Tryio – Privacy Policy

Last updated: 27 May 2026

Tryio ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding your data. By using the Tryio app, you agree to the practices described in this policy.

1. Data Controller

Tryio is operated as an independent mobile application. For privacy-related inquiries, please contact us at [email protected].

2. Data We Collect

When you register and use Tryio, we collect the following personal data:

Registration data:

• Full name
• Email address
• Password (stored in hashed/encrypted form; never stored in plain text)

Profile data:

• Profile photo
• Display name and bio

Usage and activity data:

• AI coaching session inputs, responses, and progress history
• Practice scenario selections and results
• App usage patterns and session data
• In-app purchase and subscription status

3. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Deliver and personalize the AI coach experience based on your progress and preferences
• Track your improvement over time and generate personalized feedback
• Process in-app purchases and manage subscription access
• Send transactional emails (account verification, password reset)
• Detect and prevent fraudulent or abusive behavior
• Comply with legal obligations

4. Automated Processing and AI Features

4.1. Tryio's core feature is an AI-powered social skills coach. The coach processes data you share during sessions (your inputs, scenario choices, and profile context) to generate personalized guidance and feedback.
4.2. This AI processing is powered by a third-party AI provider. Data sent to this service is limited to what is necessary for generating the coaching response and is subject to the provider's data processing terms.
4.3. AI-generated suggestions are for self-improvement and educational purposes only. Tryio does not guarantee specific outcomes.
4.4. You have the right to request human review of decisions made solely by automated means that significantly affect you, in accordance with applicable law.

5. Data Storage and Security

5.1. All personal data is stored in a cloud-based PostgreSQL database (Supabase). Data is encrypted at rest and in transit using industry-standard protocols (TLS/SSL).
5.2. Passwords are never stored in plain text. We use secure hashing algorithms.
5.3. Authentication tokens are stored securely on your device using encrypted storage.
5.4. We implement access controls ensuring only authorized personnel can access production data.
5.5. While we take reasonable measures to protect your data, no system is 100% secure. We encourage you to use a strong, unique password.

6. Data Sharing and Third Parties

We do not sell or trade your personal data. We may share data with:

• Supabase (PostgreSQL cloud database) – data storage and authentication
• Upstash (Redis) – session and token management
• Resend – transactional email delivery (e.g. account verification, password reset)
• Google (Sign in with Google) – authentication
• Apple (Sign in with Apple) – authentication
• Apple App Store – in-app purchase processing
• Law enforcement or governmental authorities – when required by law

All third-party providers are required to handle your data in accordance with applicable data protection laws.

7. Data Retention

7.1. We retain your personal data for as long as your account is active.
7.2. Upon account deletion, we will remove your personal data from our active systems within 30 days.
7.3. Some data may be retained for a limited period in encrypted backups for legal or operational reasons, after which it will be permanently deleted.

8. Your Rights

Depending on your location, you may have the following rights:

• Access – request a copy of the personal data we hold about you
• Correction – request that we correct inaccurate data
• Deletion – request deletion of your personal data ("right to be forgotten")
• Portability – receive your data in a structured, machine-readable format
• Objection – object to automated decision-making or processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Tryio is intended for users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that a user is under 18, we will immediately terminate their account and delete their data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available in the app and on our website. Where changes are significant, we will notify you in the app. Continued use of the Service after updates constitutes acceptance of the revised policy.

11. Contact

For any questions, concerns, or data requests regarding this Privacy Policy, please contact us at: [email protected]