Privacy Policy

This is a draft for a prototype. Trinzee is a product prototype: balances, cards and payments are simulated and no real money moves. Before launch this policy will be reviewed by a lawyer and updated for the payment partners we use.

What we collect

• Account details: your name, email address, username and a hashed password. We never store your password itself.
• Groups and payments: the groups you join, who is in them, and the payments made with a group card, including each person’s share. This is the product; everyone in a group can see its payments.
• Balance activity: money you add or withdraw and your share of group payments.
• Card details: only a token from the payment provider plus the card brand and last four digits. Card numbers never reach Trinzee.
• Device and usage data: basic logs (IP address, browser or app version, timestamps) used for security, rate limiting and fixing problems.

How we use it

• To run the service: sign you in, show your balance, split payments across a group and keep an accurate record of every transaction.
• To keep accounts safe: confirming your password for sensitive actions, confirming email changes with a code, and detecting abuse.
• To send you notifications about approvals, shares and balance changes. In this prototype they appear in the app only.

What we share

Your name, username and avatar are visible to people in your groups and to anyone who searches for you to invite you. Your balance is private to you; other members only see whether your share of a payment is covered. We do not sell personal data. In a real version, payment and card details would be handled by regulated providers under their own policies.

Your choices

• Change your name, username, email and cards on file from your profile.
• Leave a group at any time. Payments you were part of stay in the group’s history because they are part of other people’s records too.
• Ask us to delete your account by emailing hello@trinzee.com. We keep transaction records we are required to keep for reconciliation, with your personal details removed.

Security

Passwords are hashed with scrypt, sessions use random tokens stored only as hashes, sensitive actions require re-entering your password, and the iPhone app can be locked with Face ID. No system is perfectly secure; if you believe your account was accessed without permission, change your password and contact us.

Contact

Questions about this policy: hello@trinzee.com.