Privacy Policy

This Privacy Policy describes how Trueview ("Trueview", "we", "us", or "our") collects, uses, and shares information when you use the Trueview mobile application and related services (collectively, the "Service"). By using the Service you agree to the practices described in this policy.

1. Information We Collect

1.1 Information you provide

• Account information: first name, last name, email address, and (optionally) a profile picture you choose to upload.
• Authentication credentials: password (stored only as a salted hash) and one-time verification codes (OTPs) sent to your email or phone number.
• User-generated content: supplement scans, test requests, paid test requests, promo code redemptions, and any other input you submit through the Service.
• Communications: messages you send to us, including support requests sent to support@trueview.health.

1.2 Information collected automatically

• Device and usage data: device model, OS version, app version, language, time zone, crash logs, and basic analytics about how you interact with the Service (screens viewed, features used, last activity timestamp).
• Push notification tokens: Firebase Cloud Messaging (FCM) tokens registered to your device so we can deliver notifications.
• Log data: IP address, request metadata, and other information generated by the AWS infrastructure that powers the Service.

1.3 Information from third parties

• Sign-in providers: if you sign in with Apple or Google, we receive the basic profile information you authorize them to share (name, email, provider user ID).
• Subscription/billing: when you purchase a subscription through Apple App Store or Google Play, the purchase is processed by the respective store and surfaced to us through RevenueCat. We receive a subscription identifier and entitlement status, but not your full payment card details.

2. How We Use Information

• Provide, operate, and maintain the Service and your account.
• Authenticate you and protect against fraud, abuse, and unauthorized access.
• Process subscription entitlements and access to premium features.
• Send transactional emails (account verification, password resets, receipts, important service notices).
• Send announcement, product update, and marketing emails — you can unsubscribe at any time from the link included in each such email.
• Send push notifications related to your activity or content updates.
• Improve product quality, troubleshoot issues, and develop new features.
• Comply with legal obligations and enforce our Terms.

3. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers (sub-processors): trusted vendors that help us operate the Service, including Amazon Web Services (hosting/storage), Firebase Cloud Messaging (push), RevenueCat (subscription management), and email delivery providers. These vendors process information on our behalf under contractual confidentiality and security obligations.
• App stores: Apple App Store and Google Play handle payments and may share limited purchase metadata with us.
• Legal & safety: when required to comply with a valid legal process or to protect the rights, property, or safety of Trueview, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

4. Data Retention

We retain account information for as long as your account is active. If you delete your account (see Section 6), we soft-delete the account immediately and remove or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, fraud-prevention, or dispute-resolution purposes. Aggregated, de-identified data that cannot reasonably be linked back to you may be retained indefinitely.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal information.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@trueview.health. We may ask you to verify your identity before acting on the request.

6. Account Deletion

7. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (HTTPS), encryption at rest for stored data, hashed credentials, and access controls for our infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.

9. International Transfers

Trueview operates infrastructure in the United States (AWS us-west-1). If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to such transfers, subject to applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you through the Service. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

Questions about this Privacy Policy or our data practices? Email support@trueview.health.