Privacy Policy

01Who is responsible for your data

The controller of the personal data described here is [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS] ("Trellip", "we" or "us"). You can contact us at support@trellip.app.

02What this policy covers

This policy applies to the trellip.app website, the Trellip desktop apps for macOS and Windows, the mobile apps, the browser extension and any related service we operate (together, the "Service").

03Data we process

The data we process depends on how you use Trellip:

• Account data: name, email address, profile picture and sign-in method (Google or email and password). Only if you create an account, which is managed with Firebase Authentication.
• Your library: links, texts, reminders, maps, PDFs, videos and images you save, with their titles, descriptions, tags, collections, canvas layouts, dates and technical metadata.
• Files: files you upload to a cloud-enabled account are stored in Firebase Storage.
• Link previews: when you save a web address, the app requests that page from your device to read its title, description and preview image.
• AI requests: if you use AI features, the content needed for the request (for example selected items, text, images, the first page of a PDF and your instructions) is sent to our AI provider, see section 5.
• Billing data: plan status and identifiers from our payment provider. We do not store full card numbers.
• Map data: addresses or places you search for, sent to map and geocoding services when you use map features.
• Public collections: if you publish a collection in Explore, its title, description and the items you choose to include become visible to other users.
• Technical and security data: app version, device type, approximate region derived from your IP address and abuse-prevention signals from Firebase App Check and reCAPTCHA.
• Website data: the website stores your theme and language preference in your browser. It does not use advertising cookies.

04Why we use it and on what legal basis

We process personal data for these purposes:

• To provide the Service and sync your library: performance of a contract (Article 6.1(b) GDPR).
• To run the AI features, link previews and map search you ask for: performance of a contract.
• To process payments, manage subscriptions and keep invoices: performance of a contract and compliance with legal obligations.
• To keep the Service secure and prevent abuse: our legitimate interest.
• To fix errors and improve performance using technical or aggregated data: our legitimate interest.
• Analytics, if we enable them: your consent, where the law requires it.

05Service providers

We work with providers that process data on our behalf or under their own terms, and only as far as needed for their function:

• Google Firebase and Google Cloud: authentication, database, file storage, hosting, cloud functions and App Check.
• Google Gemini models, accessed through Google Cloud: processing of the AI requests you make.
• Stripe: payment processing and subscription management.
• Google reCAPTCHA: protection against automated abuse.
• Map providers, including OpenStreetMap, Nominatim, Photon and Esri ArcGIS: map tiles and place search.
• Google Analytics (Firebase Analytics): only if enabled, and subject to your consent where required.

06International transfers

Some providers are located or operate outside the European Economic Area. In those cases, transfers rely on the safeguards allowed by the GDPR, such as the Standard Contractual Clauses approved by the European Commission.

07Local storage on your device

The free version works entirely on your device. Your library stays in local storage on that device unless you enable a cloud plan. Deleting the app or clearing its data removes the local copies, and we cannot recover local-only data for you.

08How long we keep data

We keep personal data only as long as needed for the purposes above:

• Local data: until you delete it in the app or uninstall the app.
• Cloud data: while your account is active. When you delete your account, we delete your cloud data, including files and synced items, from our active systems.
• Backups: deleted data may remain in backups for a limited period before it is overwritten.
• Billing records: kept for the period required by tax and accounting law.
• Security logs: kept for a limited period needed to protect the Service.

09Your rights

Under the GDPR you can access, rectify, erase, restrict or object to the processing of your personal data, and request its portability. You can withdraw consent at any time without affecting earlier processing. To exercise these rights, write to support@trellip.app. We reply within one month, which can be extended where the law allows it.

You also have the right to lodge a complaint with a supervisory authority. In Spain that is the Spanish Data Protection Agency (AEPD), at www.aepd.es.

10Security

We use encryption in transit (HTTPS/TLS), access controls and per-user security rules that limit each account to its own data. App Check helps us block abusive clients. No system is perfectly secure, but if we become aware of a breach affecting your personal data, we will notify you and the authorities as the law requires.

11Children

Trellip is not directed at children. If you are under 14, or under the minimum age in your country, do not create an account or use cloud features. If we learn that we have collected personal data from a child without the required consent, we will delete it.

12Clipboard and device monitoring

Trellip does not monitor your system clipboard, keep a clipboard history, record your keystrokes or capture your screen. Content enters Trellip only when you add, import or send it yourself, for example from the browser extension.

13Changes to this policy

We may update this policy when the Service or the law changes. We will show the new date at the top of this page and, for material changes, notify you in the app or by email.