Privacy Policy
TRUECIAL PRIVACY POLICY
Effective date: October 8, 2026
Last updated: October 11, 2026
This Privacy Policy explains how Truecial collects, uses, processes, stores, shares, and protects information when users access the Truecial mobile applications, the website at truecial.app, public Truecial pages, and related services (collectively, the "Service").
"Truecial," "we," "us," and "our" refer to the Truecial service operated by:
Senchenko Maksym, an individual, Ukraine
Privacy inquiries: privacy@truecial.app
General support: support@truecial.app
Safety and child-safety inquiries: safety@truecial.app
This Policy describes Truecial's data practices and the rights available to users under applicable law. It does not replace mandatory legal requirements or provide a guarantee that every security risk can be prevented.
1. Minimum Age
Truecial is intended for users aged 13 and older.
Where applicable law establishes additional age-related requirements for access to online services or the processing of minors' personal data, those requirements apply.
Truecial uses the date of birth provided by users during registration to determine the age group associated with an account and to apply certain age-related features and safety restrictions.
Users are responsible for providing accurate registration information and must not intentionally misrepresent their age or circumvent age-related restrictions.
If Truecial becomes aware that an account does not meet applicable eligibility requirements, it may restrict access, suspend the account, or take other measures appropriate to the circumstances and applicable law.
Truecial does not currently provide a separate parental-control system or a mechanism for obtaining and verifying parental consent.
Where additional legal requirements apply to minors, Truecial may restrict access to the Service or specific features as necessary.
2. Information We Collect
Depending on the features used, Truecial may process the following categories of information.
Account and profile information:
- Name;
- Username;
- Date of birth;
- Email address;
- Profile biography;
- Profile image;
- Internal account identifiers.
User-generated content:
- Photographs;
- Videos;
- Captions and descriptions;
- Stories;
- Comments and replies;
- Private messages and attachments.
Social interaction information:
- Likes;
- Followers and following relationships;
- Stars sent and received;
- Mutual Star Connections;
- Interaction records necessary to operate the relevant features.
Safety and support information:
- Reports;
- Moderation records;
- Information provided in safety complaints;
- Communications with support.
Technical information:
- IP addresses and server logs;
- Application and device technical information;
- Authentication and security information;
- Push notification tokens;
- Analytics and diagnostic information where applicable;
- Technical information associated with media uploads and application integrity checks.
Not every category of information is collected from every user. The information processed depends on the platform, enabled features, permissions, and how the Service is used.
3. Sign-In Through Google and Apple
Truecial supports authentication through Google and Apple.
When a user signs in through one of these providers, Truecial may receive:
- An account identifier supplied by the provider;
- An email address;
- Limited basic account information made available by the provider.
Truecial does not receive the user's Google or Apple password.
Google and Apple may independently process information associated with authentication according to their own privacy practices.
4. Public Profiles and Public Content
Truecial profiles are public.
Depending on the available features, other users may see:
- Name and username;
- Profile image;
- Biography;
- Public posts;
- Comments;
- Followers and following information;
- Publicly visible likes and other interactions.
Certain posts may be accessible through public links, including links in the following format:
https://truecial.app/p/...
A public post page may be accessible without registration or authentication.
Public content may be viewed, saved, copied, captured in screenshots or screen recordings, or shared by third parties outside Truecial.
Removing content from Truecial does not ensure that copies previously saved, distributed, or published by other persons will also be removed.
Star Connections are not public profile information. Their visibility is governed by the feature's privacy and age-related rules described in Section 17.
A user's date of birth is used for age-related functionality and is not described in this Policy as a standard publicly displayed profile field.
Users should avoid sharing sensitive personal information about themselves or others through public posts or profiles.
5. Photos, Videos, Camera, and Microphone
Truecial is designed around photo and video content created using the application's publishing functions.
The application requests camera access to capture photographs and videos.
Microphone access may be requested where audio recording is needed.
Media submitted for publication is transmitted to Truecial's infrastructure for processing, storage, and delivery.
Technical information associated with a media upload, such as file characteristics, relevant timestamps, and upload status, may be processed where necessary to operate the publishing system.
Truecial may process technical information intended to help establish that an upload originates from the intended application and publishing process.
Application permissions are managed through the relevant device operating system.
6. Media Selected From the Device
Where Truecial allows existing photographs, videos, or other media to be attached, including within private messages, the application may use the operating system's media-selection interface.
Through this functionality, Truecial accesses the media selected by the user for the relevant action.
Selecting media for one action does not itself grant Truecial permanent unrestricted access to the user's entire photo library.
The availability of media-selection features may vary between application versions and platforms.
7. Location
Truecial does not request access to a device's precise GPS location as part of the ordinary operation of the Service.
An IP address is transmitted when a device communicates with Truecial's servers or supporting infrastructure.
IP addresses may provide an approximate indication of geographic location.
Approximate location derived from technical network information is different from precise GPS location.
Where a user voluntarily includes location-related information in content or associated media, that information may be processed as part of the relevant content or upload.
8. Technical Information and Server Logs
Truecial's infrastructure may automatically process technical information necessary to provide, secure, maintain, and troubleshoot the Service.
Such information may include:
- IP address;
- Request date and time;
- Requested resource;
- Request method or type;
- Technical response and status;
- Other standard server-log information.
IP addresses in ordinary Truecial server logs are retained for up to 30 days. Actual retention may be shorter because of automatic log rotation.
Security mechanisms designed to address spam, automated attacks, or abusive requests may temporarily process certain technical information for shorter periods.
Some service providers may maintain their own technical records according to their applicable retention practices.
9. Application Integrity and Abuse Prevention
Truecial may use application-integrity and device-integrity technologies provided by Apple and Google, including App Attest, Play Integrity, or similar mechanisms.
Depending on implementation, these technologies may process integrity tokens, challenges, or associated technical information.
The purposes may include:
- Protecting user accounts;
- Identifying suspicious requests;
- Reducing automated attacks;
- Preventing application tampering;
- Limiting fraudulent or abusive activity;
- Protecting the publishing process.
These mechanisms are intended to reduce certain risks but do not guarantee that every malicious or unauthorized action will be detected or prevented.
10. Push Notifications
Truecial may send notifications concerning:
- Likes;
- Comments and replies;
- Followers;
- Private messages;
- Star Connections;
- Account activity;
- Service-related information.
Push notification delivery may involve Firebase Cloud Messaging and Apple system services.
Device or application push tokens may be processed for this purpose.
Users may manage notification permissions through their device settings.
Star-related notifications are subject to the age-related delivery restrictions described in Section 17. A Star that is not delivered across an age-group boundary does not generate a Star notification for its intended recipient.
11. Firebase Analytics on Android
The Android version of Truecial uses Google Analytics for Firebase for product analytics.
Depending on the configuration, this may involve:
- Application events;
- Session information;
- Application version;
- Operating-system information;
- General device characteristics;
- Installation or application-instance identifiers;
- Interactions with application features.
This information may be used to understand Service usage, assess performance, identify problems, and improve functionality.
The applicable Firebase Analytics user-level and event-level retention setting is two months.
Truecial does not use the Android Advertising ID for this purpose.
Analytics processing is subject to applicable privacy and consent requirements.
12. Firebase Crashlytics on Android
The Android version of Truecial uses Firebase Crashlytics to identify and diagnose crashes and technical stability issues.
Crashlytics may process:
- Crash information;
- Stack traces;
- Crash date and time;
- Application version;
- Device model;
- Operating-system version;
- Application state;
- Crashlytics and Firebase installation identifiers;
- Other diagnostic technical information.
According to Google's published retention practices, relevant crash information and associated identifiers may be retained for approximately 90 days before the deletion process begins.
This period is determined by the relevant provider's retention practices and may differ from the retention of information stored directly by Truecial.
13. iOS Analytics and Crash Reporting
As of the last-updated date of this Policy, the iOS version of Truecial does not use Firebase Analytics or Firebase Crashlytics.
Truecial does not currently use Apple's IDFA or the App Tracking Transparency framework for cross-service advertising tracking.
If the iOS application's analytics or crash-reporting practices materially change, Truecial will update the relevant disclosures and obtain any consent required by applicable law.
14. Advertising Identifiers and Tracking
Truecial does not currently use:
- Android Advertising ID;
- Apple IDFA;
- Cross-app or cross-site behavioral tracking for personalized advertising;
- Third-party advertising networks for behavioral advertising profiling.
If advertising or tracking practices change, Truecial will update its relevant privacy disclosures and implement any legally required consent or other safeguards before the new processing begins.
15. Stories
Stories are temporary user-generated content.
Under the current Service design:
- Ordinary Stories are retained for up to 24 hours;
- Reported Stories may be retained for up to seven days for moderation purposes;
- Truecial does not currently provide a permanent personal archive of expired Stories.
Limited related information may be retained for a longer period where a valid legal, security, reporting, or dispute-resolution purpose justifies retention.
The ordinary expiration of a Story does not guarantee the deletion of copies independently saved or shared by other users.
16. Private Messages
Truecial processes private messages and attachments to provide messaging functionality.
Messages are made available to the participants in the relevant conversation.
Truecial does not represent that private messages are end-to-end encrypted unless such protection is expressly identified in the application.
Where a conversation or message is reported, Truecial may process the reported content and reasonably necessary related information to investigate the report, address abuse, protect users, enforce applicable rules, or comply with legal obligations.
These activities do not constitute a representation that Truecial continuously reads or individually reviews all private conversations.
Under the current service architecture, permanently deleting an account removes associated conversations from the active Truecial system. The relevant conversation may consequently become unavailable to the other participant.
Information may be retained where reasonably necessary and legally permitted for reporting, security, legal compliance, or the establishment, exercise, or defense of legal claims.
The messaging restrictions applicable to adults and minors are described in Section 17.
17. Age-Related Safety Features and Star Connections
Truecial uses the date of birth provided during registration to apply certain age-related safety rules.
For these features, the Service distinguishes between:
- Users under 18;
- Users aged 18 and older.
17.1. Recommendations and Profiles
Under the current Truecial model:
- Users under 18 may receive recommendations containing content from different age groups.
- Accounts belonging to users under 18 are not included in automated account recommendations presented to adults.
- A minor's public profile may be found through search or accessed directly.
- Adults may follow minors and like their public content.
These possibilities do not override restrictions on harassment, exploitation, or other prohibited behavior.
17.2. Private Messaging
Truecial applies additional messaging restrictions:
- Adults cannot initiate private conversations with users under 18.
- Users under 18 may initiate a conversation with an adult.
- An adult may reply after the minor has initiated the relevant conversation.
- Blocking and other applicable safety restrictions remain in effect.
17.3. Online Status Privacy
Adults are not shown whether a user under 18 is online.
This restriction also applies when an adult views a minor's profile.
The purpose is to reduce the exposure of minors' activity information to adult users.
17.4. What Star Connections Mean
Star Connections are a private social interaction feature.
A Star allows a user to express an interest in communication with another user without publicly displaying that interest in the way a public like or follow may be displayed.
When two users within the same permitted age group send Stars to each other, a mutual Star Connection may be established.
Star Connections are designed for social interaction and communication, not as a romantic matchmaking service.
17.5. Separation of Age Groups
Star Connections operate separately for users under 18 and users aged 18 or older.
A mutual Star Connection cannot be established between an adult and a minor.
When a Star is submitted across these age groups:
- The intended recipient does not receive it;
- It is not displayed in the recipient's incoming Stars;
- It does not generate a notification or push notification for the recipient;
- It does not increase the recipient's visible Star counters;
- It cannot establish a mutual Star Connection;
- It does not become an active connection automatically when a user's age changes.
17.6. Protection Against Age Identification Through Stars
If an adult visits a minor's public profile and presses the Star button, the application may display the normal Star-sending animation.
The action may also remain visible in the sender's outgoing Stars, as it would for an ordinary outgoing Star.
However, the minor does not receive that Star, and it is not displayed to the minor.
This behavior is an intentional age-privacy protection measure.
Its purpose is to avoid revealing a recipient's under-18 age category through differences in the Star-sending interface, delivery notifications, or related Star activity.
The same non-delivery rules apply to attempted Stars sent in the opposite direction between age groups.
These measures are designed to limit disclosure of age information through the Star Connection feature. They do not guarantee that a person's age cannot become known through unrelated information voluntarily disclosed by that person or obtained through other means.
17.7. Age Transitions and Blocking
If two minors have an existing mutual Star Connection and one turns 18 before the other, the relevant Stars and mutual connection become hidden between those users until both are adults.
When users block each other, existing Stars and mutual Star Connections between the affected accounts are terminated.
The processing of Star activity is limited to purposes connected with operating the feature, applying safety restrictions, protecting users, and other lawful Service operations described in this Policy.
18. Reports and Moderation
Truecial provides reporting mechanisms for supported types of content and activity.
Depending on available functionality, reports may concern:
- Accounts;
- Posts;
- Stories;
- Comments;
- Private messages;
- Other supported interactions.
Report-related information may include:
- The reported account or content identifier;
- Report category or stated reason;
- Details provided by the reporting user;
- Relevant content or information submitted with the report;
- Report date;
- Review status;
- Moderation decision;
- Resolution information;
- Actions taken.
Child-safety concerns may also be submitted to safety@truecial.app.
Truecial may process relevant information to assess reports, address suspected abuse, enforce platform rules, protect users, comply with law, or defend legal rights.
The submission of a report does not automatically establish that a violation has occurred.
Reporting and moderation mechanisms do not imply continuous monitoring of every publication, message, or interaction.
Truecial's approach to child-safety violations is described further in its Child Safety Standards and Community Guidelines.
19. How We Use Information
Truecial processes information for purposes connected with providing and operating the Service.
Providing the Service
Including registration, authentication, profiles, publications, media delivery, feeds, search, recommendations, Stories, comments, likes, follows, Star Connections, private messaging, sharing links, and notifications.
Age-Related Safety
Including applying age-based interaction rules, limiting the visibility and delivery of certain interactions, restricting adult-initiated messaging, and reducing exposure of minors' online status.
Personalization
Including organizing feeds and recommendations using relevant activity and interaction information.
Security and Abuse Prevention
Including protecting accounts, identifying suspicious activity, reducing spam and fraud, checking application integrity, reviewing reports, and applying moderation measures.
Analytics and Diagnostics
Including understanding application performance, identifying crashes and technical problems, and improving the Service.
Support
Including receiving and responding to support and privacy inquiries.
Legal Compliance and Rights Protection
Including addressing lawful requests, complying with legal obligations, and protecting applicable legal rights.
The processing carried out for each purpose depends on the information involved, the features used, and applicable law.
20. Legal Bases for Processing
Where applicable data-protection law requires a legal basis, Truecial processes personal data on an appropriate basis for the relevant purpose.
Depending on the circumstances, such bases may include:
Performance of an agreement: Processing needed to create and maintain accounts, authenticate users, publish content, and provide requested Service functions.
Legitimate interests: Processing reasonably necessary for account security, fraud prevention, abuse prevention, maintaining Service reliability, and defending legal rights, where those interests are not overridden by the rights and freedoms of the affected individuals.
Legal obligations: Processing required by applicable law or binding legal requirements.
Consent: Processing for which valid consent is required and has been obtained, including certain optional technologies or activities where applicable law requires consent.
Other legally recognized bases: Processing where another basis is available and appropriate under applicable law.
Where processing relies on consent, users may withdraw consent as provided by applicable law.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Not every legal basis applies to every processing activity.
21. Who May Receive Information
Information may be disclosed or made accessible where necessary to provide requested functionality, operate infrastructure, address security concerns, or meet legal requirements.
Other Users
Public profile information and public content may be visible to others.
Private messages are available to the participants in the relevant conversation.
Star information is subject to the feature's private visibility and age-related delivery restrictions.
Hetzner
Used for server infrastructure and media storage.
Cloudflare
Used for network infrastructure, security, and delivery of certain content.
Google and Firebase
Depending on the platform and feature, used for Google sign-in, push notification delivery, analytics, crash reporting, application integrity, and related technical services.
Apple
Used for Sign in with Apple, iOS functionality, push notification delivery, application integrity, and related platform services.
Competent Authorities
Information may be disclosed where permitted or required by applicable law and where an appropriate legal basis exists.
Service providers may process information on Truecial's behalf or, where applicable, independently under their own privacy terms.
Truecial's use of service providers is subject to applicable contractual and data-protection requirements.
22. Legal Requests and Protection of Users
Truecial may preserve, use, or disclose relevant information where lawfully necessary to:
- Comply with applicable law;
- Respond to valid judicial or legally binding requests;
- Address serious abuse or security incidents;
- Prevent fraud or unlawful activity;
- Protect a person's life or safety;
- Establish, exercise, or defend legal rights.
Requests for user information are assessed according to the circumstances and applicable legal requirements.
Truecial does not treat every informal request for user information as sufficient legal authority for disclosure.
23. Sale of Personal Data
Truecial does not sell users' personal data.
Truecial does not currently use personal data for cross-service behavioral advertising tracking.
If these practices change, Truecial will update applicable disclosures and comply with any relevant legal obligations before introducing the new processing.
24. Website and Public Pages
The Truecial website and publicly accessible pages may process standard technical information required to deliver and secure web content.
This may include IP addresses and ordinary HTTP request information.
Public post pages may be accessible without a Truecial account.
Truecial does not currently use Meta Pixel, TikTok Pixel, or similar third-party advertising pixels on its public pages.
This Policy does not represent that individual public-post views are separately recorded unless that functionality is implemented.
Additional technologies introduced on the website will be disclosed where required by applicable law.
25. Data Retention
Truecial seeks to retain personal data only for as long as reasonably necessary for the purposes for which it is processed, subject to applicable legal requirements.
Retention depends on the type of information, the functionality involved, security considerations, and any lawful need to preserve relevant records.
Account Information
Core account information is generally retained while the account remains active.
Account Deletion
Under the standard in-app account-deletion process, Truecial provides a 30-day recovery period.
If the account is not restored, permanent deletion is automatically initiated after the recovery period.
Requests involving statutory erasure rights are handled in accordance with applicable law.
Posts and Media
Generally retained while the relevant post exists, subject to deletion, moderation, and lawful retention exceptions.
Stories
Ordinary Stories are retained for up to 24 hours. Reported Stories may be retained for up to seven days for moderation purposes, subject to legally justified exceptions.
Private Messages
Retained as necessary for messaging functionality and removed from the active system when the relevant account is permanently deleted, subject to the exceptions described in this Policy.
Stars and Star Connections
Relevant Star interaction records may be retained while necessary to operate the feature and associated account functions.
A Star that is not delivered because of an age-group restriction may remain recorded as an outgoing Star for the sender without becoming visible to the recipient.
Applicable deletion, blocking, account-removal, and lawful retention rules also apply to this information.
Server Logs
Ordinary server logs containing IP addresses are retained for up to 30 days.
Firebase Analytics
The configured retention period for applicable Android user-level and event-level Analytics data is two months.
Firebase Crashlytics
Crash data and related identifiers are subject to Firebase's retention practices, including an approximately 90-day period for relevant crash information before the provider's deletion process begins.
Database Backups
Truecial's database is backed up daily. Database backups are retained for up to 14 days.
Information removed from the active system may temporarily remain in backup copies until the relevant backups expire.
Backups are maintained for recovery purposes and are not intended for ordinary use of deleted account information.
Safety, Security, and Legal Records
Certain information may be retained where necessary and legally justified to address reports, prevent abuse, comply with legal obligations, resolve disputes, or protect legal rights.
26. Account Deletion
Truecial users can independently initiate the deletion of their accounts using either of the following methods:
1. Through the Truecial application
Users can initiate account deletion directly in the application:
Profile → Settings → Delete Account.
2. Through the Truecial website
Users can also initiate account deletion through the dedicated webpage:
https://truecial.app/delete-account/
To access the account-deletion functionality, users sign in using the Google or Apple account associated with their Truecial account.
Both methods initiate the same account-deletion process.
Account Deletion Process
Under the standard deletion process:
The user initiates account deletion using either of the available methods.
A 30-day recovery period begins.
During this period, the user may restore the account.
If the account is not restored, permanent deletion is automatically initiated after the recovery period expires.
Following permanent deletion, account information and associated user data are removed from the active Truecial system, subject to applicable technical and legal limitations.
Certain information may be retained where reasonably necessary and legally permitted, including:
Temporary copies in database backups until their scheduled expiration;
Information required for security or abuse prevention;
Relevant moderation or reporting records;
Information subject to applicable legal retention requirements;
Information necessary to establish, exercise, or defend legal rights.
Truecial cannot guarantee the deletion of content independently saved or shared by third parties outside the Service.
Questions or Difficulties
Users experiencing technical difficulties with account deletion, or having questions about the process, may contact:
support@truecial.app
Requests concerning personal-data rights may also be submitted to privacy@truecial.app and will be handled in accordance with applicable law.
27. Deleting Individual Posts
Truecial may apply different in-app deletion rules to different publication types or special publishing modes.
Special features, including One Shot, may have product-level deletion limits, as explained in the Terms of Use and the relevant feature interface.
Such limits regulate in-app functionality. They do not override mandatory personal-data rights under applicable law.
Users may contact privacy@truecial.app regarding legally available rights relating to their personal data.
28. User Rights
Depending on applicable law, users may have the right to:
- Request access to personal data;
- Request correction of inaccurate information;
- Request erasure of personal data;
- Request restriction of certain processing;
- Object to certain processing;
- Withdraw consent where consent is the applicable legal basis;
- Request data portability where available;
- Lodge a complaint with an appropriate data-protection authority.
Requests may be submitted to:
privacy@truecial.app
Truecial may request information reasonably necessary to establish that a request is made by the relevant individual or an authorized representative.
Identity-related safeguards are intended to prevent unauthorized disclosure or modification of another person's information.
Requests are assessed and addressed within the limits and timeframes prescribed by applicable law.
29. International Data Processing
Truecial uses infrastructure and service providers that may process information outside the user's country of residence.
Depending on the relevant service, information may be processed or accessed in different jurisdictions.
Where applicable law requires safeguards for international personal-data transfers, appropriate lawful transfer mechanisms must be applied.
Users may contact privacy@truecial.app for information concerning applicable transfer arrangements and safeguards.
30. Data Security
Truecial uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, unauthorized alteration, improper disclosure, and other relevant security risks.
Depending on the system and functionality, these measures may include:
- Encrypted network connections;
- Account authentication;
- Access restrictions;
- Limited-duration media-upload mechanisms;
- Application-integrity checks;
- Measures against automated attacks;
- Security logging;
- Database backups.
The effectiveness of security measures depends on the circumstances, relevant technology, and the nature of the threat.
No internet-based service, storage system, or electronic transmission method can guarantee absolute security.
Truecial does not represent that every security incident, unauthorized action, or harmful user interaction can be prevented.
Users are responsible for taking reasonable steps to protect access to their own devices and accounts.
31. Change of Operator or Ownership
If Truecial is reorganized, transferred, sold, or operated by another individual or legal entity, relevant information may be transferred where necessary to continue providing the Service and where permitted by applicable law.
Any transfer must be carried out subject to relevant privacy and data-protection requirements.
Users will receive notice of material changes to the operator's identity where required by law.
32. Third-Party Services
Truecial relies on external services, including Google, Firebase, Apple, Hetzner, and Cloudflare.
Some providers process data on behalf of Truecial. In other circumstances, providers may independently process certain information under their own applicable privacy policies.
Third-party services may have their own technical requirements, processing locations, and retention periods.
Truecial takes relevant third-party data practices into account when preparing and updating privacy disclosures required for App Store and Google Play.
Users may consult the privacy documentation of the relevant service providers for further information about their independent processing activities.
33. Changes to This Privacy Policy
Truecial may update this Policy to reflect:
- Changes in Service functionality;
- Changes in personal-data processing;
- New or modified service providers;
- Changes in analytics or advertising technologies;
- Changes in safety or security practices;
- Legal or regulatory developments;
- Applicable App Store or Google Play requirements.
The last-updated date is displayed at the beginning of this Policy.
Where required by law, Truecial will provide additional notice or obtain consent before introducing processing that requires such notice or consent.
34. Contact Us
Truecial
Operator: Senchenko Maksym
Status: Individual
Country: Ukraine
Privacy inquiries and personal-data requests:
privacy@truecial.app
General support:
support@truecial.app
Safety and child-safety concerns:
safety@truecial.app
Website:
https://truecial.app