Privacy Policy

1. Overview

Alibi Ledger, LLC ("we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the Trust Onion mobile app, our iMessage extension, our website (trustonion.io), and related services, including any branded or white-labeled versions we operate for organizations (collectively, the "Services").

The Services help trusted groups — including friends, families, clubs, teams, and organizations — check the identity of someone they are talking to. They do this through time-based codewords, verified selfies ("Proofie™s"), and cryptographic key exchange between members of a private group. By using the Services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

a. Information You Provide in the App

Account information (such as your name, email, or other identifiers) when you create a family or organization account; family-group information; encrypted family-backup data when you enable that feature; and user-submitted content such as feedback or in-app support requests.

b. Information You Provide on Our Website

When you reach out to us or interact with our website, we collect what you choose to send us:

• Support requests: when you submit our support form, we collect your name, email address, support category, subject, an optional order or account reference, your message, and any files you attach (images or PDFs, up to three per request).
• Newsletter sign-up: your email address, if you choose to subscribe to product updates.
• Email to us: if you email us directly (for example, our general, support, press, or legal addresses), we receive the contents of your message and your email address.

Voice safety demonstration: if you choose to use our Hear Your Own Voice Cloned demo, This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio. The provider clone is deleted immediately after generation. Submit only your own voice with the speaker's permission, and do not submit another person's voice.

c. Automatically Collected Information

Device information (hardware model, operating system, browser type), log data (IP address, timestamps, and activity on the Services), and cookies or local storage identifiers. When you submit a support request, we record the IP address and browser user agent associated with the submission to help prevent abuse and fraud.

d. Codewords Data

Codewords are generated locally on your device using a time-based algorithm and rotate on a schedule. They are never transmitted to or stored on our servers. We have no access to your codewords.

e. Secret Passkeys

Your WebAuthn passkey (the cryptographic key that proves your identity) is generated and stored exclusively in your device's secure hardware. It is non-exportable and is never transmitted to us in any form, encrypted or otherwise.

If you enable family backup, the app encrypts family-group data on your device using a key derived from your passkey. An encrypted backup blob, together with the information needed to identify and restore that blob (such as an initialization vector and key identifier), may be uploaded to our servers. We store only the encrypted backup data and have no ability to decrypt it; decryption happens only on your device.

f. Proofie™ Data

When you create a Proofie (a verified selfie or other image-based verification record with a timestamp, cryptographic verification data, and optional location), the app uploads the Proofie image through our IPFS-based, content-addressed media-storage path. The app server receives the resulting content identifier and related metadata so the Proofie can be stored in the app's history, synchronized across authorized devices, verified, displayed, and shared through a verification or sharing link. Proofies are not peer-to-peer only and may be stored by the external media-storage provider used to operate these features.

A lasting record of a place and time. Proofie™ images are stored on IPFS, a third-party distributed file network. Once created and shared, copies can’t be deleted everywhere by you, the recipient, us, or bad actors. So when you create a Proofie, you make a verifiable record of the place and time it captures.

A Proofie may be shared with a selected recipient or made accessible through a verification or sharing link. Anyone who receives or obtains access to that link may be able to view the information made available through the Proofie, which may include the image, timestamp, verification data, and optional location.

g. Location Information

If you enable location features, your device includes location data in the Proofie payload sent to our servers. Location is optional and may be stored with the Proofie record and related metadata, then shared through the authorized Proofie recipient or verification/sharing link. Do not include location unless you are comfortable sharing it with everyone who can access the Proofie.

3. How We Use Information

We use information to operate, maintain, and improve the Services; to respond to your contact and support requests; to send product updates if you have subscribed (you can unsubscribe at any time); to detect and prevent abuse, fraud, and security threats; to customize your experience; and to comply with legal obligations and enforce our Terms of Service.

4. How We Share Information

We do not sell your personal information. We share information only with the trusted service providers described in Section 5 (who process it on our behalf under confidentiality obligations), when required by law, court order, or government request, or in connection with a merger, acquisition, or asset sale (with notice where required).

5. Third-Party Processors

We rely on a small number of trusted service providers to operate the Services — for example, to host our database and storage, secure account sign-in, and notify our team of new support or contact messages. Each provider receives only the data needed to perform its function and is bound by confidentiality obligations.

For Proofies, images are uploaded without encryption through an IPFS-based, content-addressed media-storage provider. Our systems handle the content identifier and Proofie metadata, and external media-storage or verification providers may process images, metadata, or preview data as needed to create, synchronize, verify, display, and share Proofies. Authorized recipients and anyone who obtains a Proofie verification or sharing link may be able to view the information made available through that Proofie.

Files you attach to a support request are stored on our own servers and are accessible only as needed to handle your request. We also use artificial intelligence and media tools to create our own marketing content (such as articles and videos); these tools process our editorial content only and do not receive your personal information.

For the voice safety demonstration, our voice provider processes the submitted sample and the fixed message solely to provide the one-time playback. We use short-lived, minimized hashed IP identifiers to enforce abuse limits; those identifiers are retained only for the rate-limit window and are not used to identify you. The demo has per-IP, daily, shared-capacity, and concurrency limits.

6. Data Retention

We retain personal information, including Proofie records and related metadata, for as long as needed to provide the Services and their history, synchronization, verification, display, and sharing features, comply with legal obligations, or resolve disputes. You can delete your account and request deletion of your data through the app. When you delete your account, we remove your personal information from our systems within 30 days. Contact and support records are retained only as long as needed to handle your request and meet our legal obligations.

A lasting record of a place and time. Proofie™ images are stored on IPFS, a third-party distributed file network. Once created and shared, copies can’t be deleted everywhere by you, the recipient, us, or bad actors. So when you create a Proofie, you make a verifiable record of the place and time it captures.

7. Security

We use commercially reasonable safeguards, including encryption and biometric authentication (Face ID, Touch ID) for key storage, to protect data. Codewords are generated locally and never leave your device. Private keys used to sign Proofies are stored on your device and protected by biometric authentication. However, no method of transmission or storage is completely secure.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to opt out of marketing communications. Contact us at legal@trustonion.io to exercise these rights.

9. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

10. International Data Transfers

Your data may be transferred and stored on servers outside your jurisdiction, including in the US. We ensure appropriate safeguards for such transfers, such as standard contractual clauses where required.

11. Links to Other Sites

Our Services may link to external sites, including the Apple App Store and Google Play. We are not responsible for the privacy practices of those third parties.

12. Children's Privacy

Trust Onion is designed for family use. Children under 13 may use the app under parental supervision as part of a family group. We do not knowingly collect personal information from children under 13 without parental consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with a revised effective date.

14. Contact Us

If you have questions or concerns, contact:

Alibi Ledger, LLC
30 N Gould St Ste N
Sheridan, WY 82801

Email: legal@trustonion.io