Privacy Policy

Effective Date: February 23, 2025 · Last Updated: September 29, 2026

Welcome to getTRIX ("we," "our," or "us"). We are committed to protecting your personal information and your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the application.

1. Information We Collect

1.1 Information You Provide

Account Information: Email address, name, and encrypted password when you create an account.
Family Information: Names, relationships, and roles (parent/guardian) of family members you add.
Child Information: Name, profile photo (if provided), token balance, reward preferences, and transaction history for each child, plus an optional last name if you choose to add one.
Photos and Images: Profile photos you upload, stored securely on our servers.

1.2 Information Automatically Collected

Activity Data: Tokens awarded, rewards requested and redeemed, and the settings you choose, stored to provide the application's features.
Purchase Information: Your subscription status, provided by Apple through RevenueCat.
Device and Diagnostic Information: Push notification token and a random identifier for this installation of the app, device model, operating system and version, and crash and performance reports.

We do not use advertising or third-party analytics SDKs, and we do not track you across apps or websites owned by other companies.

1.3 Location Information

The application does not collect or track your precise location information.

2. How We Use Your Information

To provide the application: Process account registration, authenticate access, and deliver core functionality.
To manage family accounts: Synchronize data between family members, notify the other parents in your family about activity such as TRIX awarded and reward requests (each parent chooses which notifications they receive), and manage reward redemptions.
To communicate with you: Send updates, security alerts, and support messages.
To improve our services: Analyze usage patterns and develop new features.
To ensure security: Detect and address technical issues and fraudulent activity.

3. Data Storage and Security

3.1 Storage

Cloud Storage: We use Supabase to securely store your data with encrypted connections.
Device Storage: Authentication tokens, session information, and cached data are stored locally using secure storage mechanisms (SecureStore on iOS, EncryptedSharedPreferences on Android).

3.2 Security Measures

Data encrypted in transit using TLS/HTTPS and at rest using industry-standard methods.
Hardware-backed secure storage for authentication tokens on device.
Access controls limiting personal information to authorized personnel.

3.3 Data Retention

We retain your information for as long as your account is active. When you delete your account, we delete your personal information within 30 days, except where required by law.

4. Information Sharing and Disclosure

4.1 Family Member Access

By design, the application shares information within your family group. Parents and guardians can view and manage all family data. Children can view their own token balance and available rewards.

Each child has a 6-character balance code. Anyone who enters that code under "Check Child Balance" on the sign-in screen sees the child's TRIX balance, without signing in. The code does not reveal the child's name or any other information.

4.2 Third-Party Service Providers

Supabase: Backend infrastructure, database, and authentication.
RevenueCat: Subscription management and purchase validation.
Sentry: Crash and performance diagnostics (no advertising use).
Expo: Push notification delivery.
Resend: Transactional email delivery (account confirmation, password reset, and family invitations).
Apple and Google: Sign-in, only if you choose Sign in with Apple or Google.

These providers access your information only to perform specific tasks on our behalf and are obligated not to use it for any other purpose.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

4.4 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5. Children's Privacy

The application is designed for family use and may be used by children under 13 with parental supervision. We require parents or guardians to create and manage accounts for children under 13. Children have limited access to features appropriate for their age. We collect only information necessary to provide the application's functionality.

Parents have full control over their child's information and can review, update, or delete it at any time through the application settings or by contacting us.

6. Your Rights and Choices

Access and Portability: Request a copy of your personal information.
Correction and Deletion: Update inaccurate information or delete your account.
Objection: Opt out of certain data processing activities.
Restriction: Limit how we use your information in certain circumstances.

To exercise these rights, contact us at [email protected].

7. Account Deletion

You may delete your account at any time in the app: open Preferences → Account Management → Delete Account and confirm. Your account is deleted immediately. If you are the only parent in your family, the family and all of its children, token history, and reward records are deleted too; otherwise the family stays with the remaining parents. Backup copies are purged within 30 days. This action cannot be undone.

Alternatively, contact [email protected] to request account deletion.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. California Residents (CCPA)

California residents have the right to know what personal information we collect, request its deletion, opt-out of the sale of their information (we do not sell information), and non-discrimination for exercising these rights. Contact [email protected] to exercise these rights.

10. EU Residents (GDPR)

EU residents have additional rights including lawful basis review, data portability, erasure, and the right to lodge a complaint with a supervisory authority. Our lawful basis for processing is consent and contract performance.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by posting the new policy in the application and sending an in-app or email notification. Continued use of the application after changes indicates acceptance of the updated policy.

12. Contact

Questions, concerns, or complaints:

Email: [email protected]
Support: [email protected]

We will respond within 30 days.