1. Who We Are
Silky Apple Technologies operates TrueConsent and is responsible for the service data described here.
2. Data We Handle
We handle your Google-verified name, email, profile photo and account identifier; consent text, parties, responses and audit timestamps; attachment names, links, permissions and proof metadata; push-notification tokens; and privacy-reduced device, network, timezone and security data.
Acceptance can include device confirmation and approximate or precise coordinates only when you choose that option. With permission, the app reads device contacts locally so you can select names and email addresses; only selected details enter a consent.
3. How We Use Data
We use data to authenticate users, deliver and verify consent records, notify parties, protect against abuse, generate proof PDFs, and provide support. If you tap Generate, consent text and conditions are sent to Cloudflare AI; the result may be cached for up to 30 days to avoid repeat processing.
4. Services and Sharing
Cloudflare Workers, D1 and KV process service records. Google provides sign-in and user-controlled Drive storage. Firebase delivers push notifications. We share consent data with its involved parties and service providers only as needed to operate TrueConsent, comply with law, protect rights, or review abuse reports. We do not sell personal data.
5. Storage and Retention
Drafts inactive for 30 days may be removed. Consent and audit records are retained according to their lifecycle and as needed for evidence, disputes, fraud prevention, legal duties, and other parties' rights. Attachments and optional proof backups remain in the owner's Google Drive. Moderation records are retained only as needed to handle reports and prevent repeat abuse.
6. Deletion and Your Rights
You can export records and delete your account in Settings. TrueConsent first tries to remove app-created Drive sharing; if Google access is unavailable, deletion can continue and the app tells you which Drive sharing to remove manually. Drafts and private account data are deleted where possible, while proof-bound party identity may remain unchanged for the reasons above.
Contact us to request access, correction, deletion, restriction, objection, or other rights available where you live.
7. International Processing and Security
Cloud providers may process data outside your country under their safeguards. API traffic uses HTTPS; invite tokens are hashed; access controls, rate limits and integrity checks reduce misuse. No system is completely secure.
8. Children
TrueConsent is not directed to children who cannot legally consent to data processing or contracts. A parent or guardian must act where local law requires.
Contact Us
If you have any questions about this Privacy Policy, please contact us at techsupport@silkyapple.com.