Privacy Policy
English · Română
TrueReviewers.com ("Vera", "we", "us") is the data controller. Vera is built on data minimisation: we collect and keep as little as possible, and most of your activity stays on your device. We do not run advertising profiles, we do not track you across other websites, and we never sell your data or share it with data brokers.
1. What we collect
- Account identity: name, email and profile picture from your sign-in provider (Google or email). We store a hashed form of your email to count your free-search allowance.
- Search data: the product names you look up, linked to your Account or a random device identifier.
- Reviews: the score, pros, cons and text you choose to publish, and an optional GIF you attach (we store the GIF's web address from the GIF provider, not the image itself). When you have set up a public profile, your reviews are shown with your username and avatar.
- Likes and comments: you can like another member's review and reply to it with comments, optionally attaching a GIF (we store its web address). Likes are counted against your random device identifier only; comments are shown with your public profile when you have set one up, otherwise anonymously.
- Public profile (optional): a username and an avatar image you choose to add. Both are public: they appear next to your reviews in the app and on the shared Verdict pages. Uploaded avatars are checked before they appear publicly. You can change or remove them any time in Settings.
- Alert rules: conditions you create, keyed to your random device identifier.
- Payment reference: a transaction ID, amount and receipt email from Stripe. We never see or store your card details.
- Feedback: your message, optional contact email, and app context (screen, version, platform, language).
- Coarse region: country or city derived from your IP at the network edge, to localize "where to buy". No precise location.
- First-party usage events: in-app analytics such as screens viewed, searches, feature usage and anonymized error diagnostics, tied to a random device ID (and hashed email when signed in), deleted after about 90 days.
We do not collect precise location, contacts, your photo library, or advertising identifiers. The only image we hold is the single avatar you choose to upload.
2. Legal bases (GDPR Art. 6)
Contract (creating your Account, delivering searches you request, processing payments), legitimate interests (caching Verdicts, popularity counters, evaluating alerts, security), consent (optional features such as rewarded ads or alert emails, which are withdrawable), and legal obligation (payment and accounting records).
3. What stays on your device
Your theme, language and region preferences, cached quota, your device ID and session token live only on your device via standard app storage and the secure key store, and are cleared when you clear app data or uninstall. Your verdict history, watched products, alert thresholds and saved comparisons are kept on your device for instant access and, when you are signed in, are also backed up to our servers (keyed to a hashed account token, never your raw email) so they survive a reinstall. The server backup is deleted when you delete your account.
4. What we keep on our servers
Account identity, a hashed token for your quota, your optional public profile (username and avatar image, keyed to that hashed token, never your raw email), your saved verdict library (history, watched products, alert settings and saved comparisons, when you are signed in), your product queries, published reviews, the comments and likes you add to reviews, alert rules and notifications, purchase records (Stripe reference, amount, receipt email), feedback, first-party usage analytics, and shared cached Verdicts (which contain no personal data). Deleting your account removes your profile and avatar and un-links your reviews and comments so they no longer show your name. Infrastructure is Cloudflare, EU region where possible.
5. Payments
Note: Vera currently takes no payments. Deep verdicts and comparisons unlock free by watching short rewarded ads in the Android app. The description below covers how paid purchases work, and applies to any earlier purchase and if paid options return.
All payments are processed by Stripe, a PCI-DSS Level 1 provider, on Stripe's own secure payment element. We never see, receive or store your full card number, CVV or banking credentials; they go directly to Stripe. We receive only a payment reference, amount, result and receipt email.
6. AI processing
Product searches and interface translations are processed by Google Gemini and, when enabled, xAI Grok. Only the product query text and publicly sourced review content are sent to the AI provider; your name, email, payment details and device identifier are never transmitted to any AI provider. We use these services under enterprise or API terms, under which your inputs are not used to train their general models. Please don't type sensitive personal information into a search.
7. International transfers
We keep data in the EU where possible. Where our infrastructure providers operate global networks, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
8. Cookies & tracking
No advertising cookies and no cross-site tracking. This website uses no ad or analytics SDKs. The Android app integrates Google AdMob for one purpose only: so you can choose to watch an optional rewarded ad to earn a free search. There are no banner or automatic ads, no ad profiling, and we never sell your data. Our own analytics are first-party, kept on our EU servers and keyed only to a device ID. See our Cookie Policy.
9. Security, retention & deletion
We protect data with encryption in transit and at rest, hashed tokens, a secure key store for credentials, access controls and rate limiting. Cached Verdicts persist and refresh on demand; alert rules until you delete them; analytics are auto-deleted after about 90 days; purchase records are kept as legally required; Account data is deleted on request (Settings, then Delete Account, which anonymizes your server records); device-stored data is removed when you clear app data or uninstall.
10. Your rights
Under the GDPR you have rights of access, correction, erasure, restriction, objection, withdrawal of consent and data portability. Most are exercisable in-app (for example Delete Account). For anything else, email contact@truereviewers.com; we respond within 30 days, free of charge. You may also complain to your national data-protection authority. Vera is not directed to children under 16.
11. Changes
We'll update this page and the "last updated" date when this policy changes. Contact: contact@truereviewers.com.