Privacy Policy
Effective Date: 1 June 2026 | Last Updated: 12 August 2026 | Version 1.1
1. Introduction
trrrust is an ephemeral, privacy-first messaging application built on the principle that the safest data is data that was never retained. We designed trrrust from the ground up so that your private conversations remain private — not as a marketing claim, but as a structural, technical guarantee enforced by the architecture of the product itself.
This Privacy Policy explains what personal data Versionhash Technologies LLP ("Versionhash," "we," "us," or "our") collects when you use trrrust, why we collect it, how it is used and protected, and what rights you have with respect to that data.
2. Who We Are
Entity: Versionhash Technologies LLP
Type: Limited Liability Partnership registered in India
Contact: contact@trrrust.com
3. Age Restriction
trrrust is intended exclusively for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will delete their account and all associated data without notice.
4. The trrrust Privacy Architecture
trrrust is architecturally incapable of retaining message content. Messages are end-to-end encrypted on the sender's device, relayed through our servers as opaque encrypted blobs, and decrypted only on the recipient's device. Our servers hold an undelivered message in memory (RAM only, no disk) for a maximum of five minutes. After delivery or expiry, the data is gone.
There is no message database. There is no chat log. There is no backup. This is not a policy — it is the architecture.
5. Information We Collect
- Username (chosen by you, need not be your real name)
- Hashed password/PIN (never stored in plaintext)
- Public encryption keys (private keys never leave your device)
- Device identifier (opaque, per-install, not device serial)
- Profile picture (optional, stored only if you set one)
- Contact pairings (record of who you have connected with)
- Device info (OS version, app version — compatibility only)
- Push token (only if you enable Buzz notifications)
6. Information We Do NOT Collect
- Full name, email address, or phone number
- Message content (encrypted end-to-end)
- Contact lists or address books
- Location data
- Browsing history
- Communication records or metadata
- Advertising identifiers
- Biometric data
- IP address logs linked to identity
7. Data Retention
Account data (username, keys, pairings) is retained while your account exists. Message content is never retained. Upon account deletion, all associated data is purged within 30 days.
8. Your Rights
Depending on your jurisdiction, you have rights under the Indian DPDP Act 2023, GDPR (EEA/UK), and CCPA/CPRA (California). These include the right to access, correct, delete, and port your data. To exercise any right, contact us at contact@trrrust.com.
This is a summary of our privacy practices. For the full legal privacy policy, contact us at contact@trrrust.com.