Privacy Policy

TrueReviewers.com ("Vera", "we", "us") is the data controller. Vera is built on data minimisation: we collect and keep as little as possible, and most of your activity stays on your device. We do not run advertising profiles, we do not track you across other websites, and we never sell your data or share it with data brokers.

1. What we collect

• Account identity: name, email and profile picture from your sign-in provider (Google or email). We store a hashed form of your email to count your free-search allowance.
• Search data: the product names you look up, linked to your Account or a random device identifier.
• Reviews: the score, pros, cons and text you choose to publish.
• Alert rules: conditions you create, keyed to your random device identifier.
• Payment reference: a transaction ID, amount and receipt email from Stripe. We never see or store your card details.
• Feedback: your message, optional contact email, and app context (screen, version, platform, language).
• Coarse region: country or city derived from your IP at the network edge, to localize "where to buy". No precise location.
• First-party usage events: basic in-app analytics tied to a random device ID (and hashed email when signed in).

We do not collect precise location, contacts, photos, or advertising identifiers.

2. Legal bases (GDPR Art. 6)

Contract (creating your Account, delivering searches you request, processing payments), legitimate interests (caching Verdicts, popularity counters, evaluating alerts, security), consent (optional features such as rewarded ads or alert emails, which are withdrawable), and legal obligation (payment and accounting records).

3. What stays on your device

Your verdict history, watched products, alert thresholds, theme, language and region preferences, cached quota, your device ID and session token live only on your device via standard app storage and the secure key store. They are cleared when you clear app data or uninstall, and are not synced across devices.

4. What we keep on our servers

Account identity, a hashed token for your quota, your product queries, published reviews, alert rules and notifications, purchase records (Stripe reference, amount, receipt email), feedback, first-party usage analytics, and shared cached Verdicts (which contain no personal data). Infrastructure is Cloudflare, EU region where possible.

5. Payments

All payments are processed by Stripe, a PCI-DSS Level 1 provider, on Stripe's own secure payment element. We never see, receive or store your full card number, CVV or banking credentials; they go directly to Stripe. We receive only a payment reference, amount, result and receipt email.

6. AI processing

Product searches and interface translations are processed by Google Gemini. Only the product query text and publicly sourced review content are sent to Google; your name, email, payment details and device identifier are never transmitted to any AI provider. We use these services under enterprise or API terms, under which your inputs are not used to train their general models. Please don't type sensitive personal information into a search.

7. International transfers

We keep data in the EU where possible. Where our infrastructure providers operate global networks, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

8. Cookies & tracking

No advertising cookies and no cross-site tracking. This website uses no ad or analytics SDKs. The Android app integrates Google AdMob for one purpose only: so you can choose to watch an optional rewarded ad to earn a free search. There are no banner or automatic ads, no ad profiling, and we never sell your data. Our own analytics are first-party, kept on our EU servers and keyed only to a device ID. See our Cookie Policy.

9. Security, retention & deletion

We protect data with encryption in transit and at rest, hashed tokens, a secure key store for credentials, access controls and rate limiting. Cached Verdicts persist and refresh on demand; alert rules until you delete them; analytics are auto-deleted after about 90 days; purchase records are kept as legally required; Account data is deleted on request (Settings, then Delete Account, which anonymizes your server records); device-stored data is removed when you clear app data or uninstall.

10. Your rights

Under the GDPR you have rights of access, correction, erasure, restriction, objection, withdrawal of consent and data portability. Most are exercisable in-app (for example Delete Account). For anything else, email contact@truereviewers.com; we respond within 30 days, free of charge. You may also complain to your national data-protection authority. Vera is not directed to children under 16.

11. Changes

We'll update this page and the "last updated" date when this policy changes. Contact: contact@truereviewers.com.