Privacy Policy

Introduction

Claribee LLC (“Claribee,” “we,” “our,” or “us”) operates Triffle, an anonymous journaling app for hobbies, personal goals, and life journeys. This Privacy Policy applies to the Triffle mobile application (the “App”), our websites, public journey pages, and related services (collectively, the “Service”). It explains what information we collect, how we use and share it, and the choices you have. What we collect depends on how you use the Service. Some information is collected only in the App, and some only when you visit our websites. This Policy should be read together with our Terms & Conditions. If you do not agree with this Policy, please do not use the Service.

Our Approach

Triffle is built around anonymity. We intentionally limit the personal information we collect. We do not collect data for cross-app tracking, targeted advertising, or third-party marketing. We do not sell your personal information.

Where the Service Is Offered

The Service is intended for and offered only to individuals located in the United States and Canada. We do not direct the Service to individuals in the European Economic Area, the United Kingdom, or Switzerland. Your information is stored and processed in the United States.

Information We Collect in the App

• Account information. When you create an account, we collect your email address.
• Age verification. During sign-up, we ask for your date of birth to confirm you meet our minimum age requirement. We retain only your birth year and month, not your full date of birth. Where required by law, we may also request an age-range signal from your device's app store (for example, Apple or Google). That signal confirms your age range without sharing your exact birth date. If we receive it, we store the result of the check, its source, when it was performed, and the lower and upper bounds of the age range provided.
• Anonymous username and profile. Your username is generated automatically. We do not ask for your real name, phone number, or other identifying details. Your profile may include an avatar or cosmetic items you select or unlock.
• User content. We store the journeys, progress logs, photos, comments, and reactions you create, along with the date and time they were saved. The date shown on a progress log reflects when it was saved on our servers, not necessarily when a photo was originally taken. Content you post may be visible to other users according to the App's community features.
• Social activity. We store accounts you follow and accounts that follow you. We also store the reactions and comments you leave on others' logs.
• Reminder settings. If you set up reminders for a journey, we store your reminder preferences so we can send them.
• Invites and referrals. Each user has a unique invite link tied to their account. When someone signs up through your link, we record that the new account came from your invite. We use this to attribute signups and grant referral rewards.
• Public sharing. If you choose to share a journey publicly, we create and store a unique share identifier linked to that journey. See Public Sharing of Journeys below.
• Push notification tokens. If you allow push notifications, we store a device token so we can deliver notifications to your device.
• Usage and diagnostic data. We collect limited information about how the App is used and how it performs. This may include:
  • Screens and features used, session activity, and login frequency
  • Performance metrics
  • Crash and error reports, which may include device model, operating system, and App version
  Analytics events from the App are associated with an internal account identifier so we can understand how features are used over time. They are not associated with your email address, and they are not linked to website analytics (see Information We Collect on Our Websites below).
• Technical and security data. When your device connects to our servers, requests pass through our security provider, which processes your IP address, browser or device information, and request details. This is used to protect the Service from spam, bots, and attacks.

Photos and Camera Access

• Permissions. If you attach photos to a progress log, the App requests access to your device's camera and/or photo library solely so you can take or select images for that log. We do not request access to your device location for photo features.
• Photos you attach. When you post a progress log with photos, we store the image file you submit, after the on-device processing described below, and associate it with your log. Photos may be visible to other users according to the App's sharing and community features.
• On-device processing. Before a photo is uploaded, the App may resize it, apply rotation you choose in the camera preview, and convert it to a compressed WebP format. This processing happens on your device.
• Photo source. We record whether each photo was taken with the in-app camera or selected from your photo library. We use this only to show how the photo was added and for internal product understanding.
• What we do not collect from photos. Photo metadata is removed. When a photo is converted to WebP on your device, embedded metadata is removed from the file before upload. This includes EXIF data, GPS coordinates, original capture date and time, camera make and model, and other device identifiers. We do not read, store, or use this metadata. When you take a photo with the in-app camera, EXIF data is not requested.
• Local draft copies. While you are composing a log, the App may temporarily store a local copy of selected photos on your device. These copies are not uploaded until you choose to post.
• Storage identifiers. Uploaded photos are stored at addresses that include an internal account identifier and an upload timestamp. These are used to store and serve your images. They appear in image addresses used by the App and on shared journey pages. This identifier is not your username or email address.
• Photo-related analytics. We may collect limited diagnostic information related to photo uploads, such as whether a log included media and whether an upload failed. We do not log photo file names, file paths, or image contents for analytics.
• Content moderation. Photos and other content you submit may be reviewed using automated tools, including third-party moderation services, to enforce our Terms and community standards.

How Your Email Is Kept Separate

Your email address is stored separately from your public activity. It is never displayed to other users and is not associated with your public activity. We use it for account access and recovery, and for service communications such as security notices and updates to our Terms or this Policy. We may also use it to send occasional product updates and announcements, which you can unsubscribe from at any time using the link in those emails.

Public Sharing of Journeys

Public sharing is opt-in and reversible. You can share only your own journeys, never another user's.

• How it works. When you choose to share a journey publicly, we generate a unique link to a read-only version of that journey. Anyone with the link can view it.
• What is shown. The public page displays that journey's entries and media. It never displays your username, email address, or profile. Images on the page are served from addresses that include an internal account identifier, as described in Photos and Camera Access above. Anything you have written or shown in the journey itself will be visible, including any personal information you chose to include.
• Search engines. Public journey pages are marked so that search engines do not index them. Anyone who has the link can still view and share it.
• Turning sharing off. You can disable public sharing at any time. When you do, the link stops working immediately. Anonymous analytics events recorded while the page was public, such as page views, remain in our analytics records. Copies someone made while the page was public, such as screenshots, are outside our control.
• Sending links. Sharing works by generating a link that you send yourself. We do not access your device contacts. When you share a journey link or invite link through your device's share menu (for example, Messages, Mail, or AirDrop), that link is sent through the app or platform you choose. That app or platform's own privacy practices apply, not ours.

Information We Collect on Our Websites

• Cookieless analytics. Our websites do not use cookies or similar tracking technologies, and we do not store any identifier on your device. We use a cookieless analytics service to understand how visitors use our websites, including public journey pages. This processes:
  • Pages viewed
  • The referring source (for example, the site that linked you to us)
  • A daily, non-reversible hash generated momentarily from your IP address and browser user agent, which lets us count unique visits within a single day
  Your raw IP address and user agent are not retained. The value used to generate each hash is deleted at the end of each day, after which the hash cannot be linked back to you. Our analytics provider processes this information on our behalf. Because no cookies are used, there is no cookie banner or cookie consent. Website analytics are not linked to your App account or to analytics collected in the App.
• Waitlist email addresses. We previously collected email addresses through our website's waitlist form, which has since been discontinued and no longer accepts new submissions. For emails collected while the form was active, we retain this information to notify subscribers about the App launch and related updates. This information was provided voluntarily and is not used for any other purpose. You can unsubscribe at any time using the link in any of these emails.

How We Use Your Information

We use the information we collect to:

• Create and manage your account, and let you log in and recover access
• Confirm you meet our minimum age requirement
• Provide App features, including journeys, progress logs, photos, comments, reactions, follows, reminders, public sharing, and invites
• Attribute invites and grant referral rewards
• Send push notifications, service emails, product updates and announcements, and waitlist emails where applicable
• Understand usage trends, diagnose crashes and errors, and improve the Service
• Moderate content and enforce our Terms and community standards
• Protect the Service against spam, bots, fraud, abuse, and security threats
• Comply with legal obligations

How We Share Information

We do not sell, rent, or trade your personal information, and we do not share it for targeted advertising. We share information only in these circumstances:

• With other users. Your anonymous username, profile, and content you post are visible to other users according to the App's community features.
• Publicly, at your choice. Journeys you choose to share publicly are visible to anyone with the link, as described in Public Sharing of Journeys above.
• With service providers who help us operate the Service (see Service Providers below). They receive only the information needed to perform their functions and may not use it for other purposes.
• For legal reasons, when required by law, regulation, or valid legal process, or to protect the rights, safety, or property of our users, Claribee, or others.
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case your information may transfer as part of that transaction.

Service Providers

We use trusted service providers to help us operate the Service. They fall into these categories:

• Cloud hosting and storage, for our database, authentication, and uploaded photos
• Security and network services, for spam protection, bot detection, and content delivery
• Analytics and error tracking, for understanding how the App and websites are used and diagnosing errors
• Crash reporting, for diagnosing App crashes
• Content moderation, for automated review of text and photos you submit, only to enforce our community standards. Our moderation provider does not use your content to train its models, advertise to you, or profile you.
• Background processing, for running scheduled tasks such as reminders
• Push notification delivery, for sending notifications to your device through Apple's and Google's notification services
• Email delivery, for account and service emails, product updates, and waitlist emails

These providers receive only the information needed to perform their functions and may not use it for other purposes. They handle data according to their own privacy policies and our agreements with them.

Push Notifications

With your permission, we send push notifications about activity related to your account, such as comments on your logs and new followers, and reminders you set up for your journeys. Notification content passes through our push notification provider and Apple or Google. You can turn off notifications at any time in the App or in your device settings.

Data Retention

• Account information. We keep your email, birth year and month, age verification results, and account information for as long as your account is active.
• Deleted accounts. When you delete your account, it is deactivated immediately. Your personal information, including your email address and birth year and month, is deleted or anonymized within 45 days of your request, except where we must retain it by law. Our backups are kept for 7 days, so copies in backups are removed within 7 days after that.
• Comments on others' logs. If you delete your account, comments you left on other users' logs remain in place so their conversations stay intact. Your username and avatar are removed from those comments, so they are no longer associated with you. The text of the comments remains, so avoid including personal information in comments.
• Public share links. When you disable public sharing or delete the journey or your account, the share link stops working.
• Analytics. App and website analytics data is retained for up to 1 year. Website visit hashes become permanently irreversible at the end of each day.
• Crash reports. Crash reports are retained for up to 90 days.
• Security logs. Security and request logs are retained for up to 30 days.
• Waitlist emails. Waitlist email addresses are kept until you unsubscribe or we no longer need them for the purposes described in Section 'Information We Collect on Our Websites'.

For more information, see our Account Deletion Page.

Data Security

We use industry-standard encryption and security practices to protect your information. No system is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. In the event of a security incident affecting your personal information, we will notify you and/or applicable regulators as required by law, using the contact information associated with your account.

Your Privacy Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct or delete it
• Receive a copy in a portable format
• Object to or restrict certain processing
• Withdraw consent where we rely on it

You can delete your account at any time in the App. To exercise other rights, contact us at [email protected]. We may need to verify your identity before acting on your request. You can also manage push notifications in your device settings, and unsubscribe from non-essential emails using the link in each email.

California Privacy Notice

This section applies to California residents and supplements the rest of this Policy.

Categories of personal information we collect. In the past 12 months, we have collected the following. For each, the table shows the source and who receives it for a business purpose.

Sensitive personal information. We do not intentionally collect sensitive personal information as defined by California law, and we do not use or disclose it to infer characteristics about you. However, content you choose to write in your journeys may contain sensitive information. We process that content only to provide the Service.

Purposes. We use personal information for the business purposes described in 'How We Use Your Information' above.

Sale and sharing. We do not sell your personal information. We do not share it for cross-context behavioral advertising. We have not done either in the past 12 months, and we have no actual knowledge of selling or sharing information of consumers under 16.

Your rights. California residents have the right to:

• Know what personal information we collect, use, and disclose
• Access it
• Request deletion or correction
• Opt out of its sale or sharing (which we do not do)
• Not be discriminated against for exercising these rights. We will not deny you service, charge different prices, or provide a different quality of service because you exercised them.

How to make a request. Email [email protected]. We will verify your request using the email address associated with your account and respond within 45 days. You may use an authorized agent, who must provide proof of your authorization.

Retention. See Data Retention above.

Canadian Privacy Rights

If you live in Canada, you have the right to:

• Access the personal information we hold about you and request corrections
• Withdraw your consent to our processing, subject to legal and contractual limits. Withdrawing consent may mean you can no longer use the Service.
• File a complaint with the Office of the Privacy Commissioner of Canada, or with your provincial privacy regulator where applicable

Your information is stored and processed in the United States by us and our service providers. It may be accessible to courts, law enforcement, and national security authorities there under U.S. law.

Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly and close the account.

Changes to This Policy

We may update this Policy from time to time. If we make significant changes, we will notify you in the App or by email, and may ask you to review and accept the updated Policy before continuing to use the Service.

Contact Us

Questions about this Policy or your information can be sent to: [email protected]