Privacy
Privacy Policy
Last updated: June 23, 2026
Troth is a native iOS app that helps independent convenience-store and gas-station owners keep per-regulator compliance records — food safety, fuel/UST, tobacco & alcohol, and OSHA — with reminders and a tamper-evident Evidence Vault. Troth is operated by Finn Digital LLC, a Florida limited liability company, which is the controller of your data ("Finn Digital", "we," "us," "our"). This policy explains exactly what data we collect, how we use it, and the things we deliberately do not do.
The short version. We collect only what the app needs to do its job: your sign-in details and the compliance records you create. We do not track you, run ads, embed analytics SDKs, or sell or share your data. You can export your records and delete your account from inside the app at any time.
On this page:
Overview
This Privacy Policy applies to the Troth iOS app and the records you create within it. Troth is a recordkeeping, scheduling, and reminder tool. The information you put into Troth is business compliance documentation for your store — checklists, checks, temperature readings, corrective actions, an audit log, legal-hold records, and evidence photos.
Your data is processed and stored on Google Cloud infrastructure in the United States using Firebase. Google (Firebase) is our sole third-party data processor. We describe each part of this in the sections below, and we ground every statement in what the app actually does.
Information We Collect
We collect two kinds of information: the account details needed to sign you in, and the compliance content you choose to create. We also describe the device permissions Troth may request and exactly how each is used.
Account data
- Your email address.
- An optional display name.
You sign in with Sign in with Apple, Google, or email and password. Apple's Private Relay (hide-my-email) addresses are supported. We never receive your Apple or Google password.
Content you create
Stored and linked to your account:
- Store profile and store locations
- Units (e.g., coolers, freezers, tanks)
- Checklists and checks
- Temperature readings
- Schedules and corrective actions
- An audit log and legal-hold records
- Evidence photos you capture in the app
This is your business compliance recordkeeping data.
Evidence photos and the Evidence Vault
When you capture an evidence photo with the in-app camera, each photo is sealed with a SHA-256 hash recorded in an append-only chain. This makes later alteration of a stored record detectable — it is tamper-evident, not tamper-proof. Evidence photos are stored linked to your account in the same way as the rest of your content.
Camera
Troth uses the camera only when you take an evidence photo. It is not used in the background and is not used for any other purpose.
Microphone and speech recognition (optional)
The microphone and speech recognition are optional and are used only for hands-free voice capture of readings, if you choose to enable it. Your speech is transcribed on-device using Apple's Speech framework.
Your voice audio stays on your device. When you use voice capture, the audio is not sent to or stored on our servers — only the resulting text reading is saved as part of your records.
How We Use Your Information
We use your information solely to provide the app's functionality — what Apple's privacy framework calls App Functionality. Specifically, we use your data to:
- Authenticate you and keep you signed in to your account.
- Store, organize, and display the store profiles, units, checklists, checks, readings, schedules, corrective actions, audit log, legal-hold records, and evidence photos you create.
- Send you the reminders and schedules you set up within the app.
- Seal evidence photos with a SHA-256 hash in an append-only chain so that alteration is detectable.
- Generate the in-app PDF and CSV exports you request.
Consistent with Troth's Apple privacy manifest, tracking is set to off (NSPrivacyTracking = false). The data we collect is linked to you and is used only for App Functionality.
What We Do Not Do
We do not track you. Troth contains:
- No advertising and no ad networks.
- No analytics SDKs and no third-party trackers.
- No data brokers.
- No selling or sharing of personal data for advertising.
We do not collect your location or GPS, your contacts, or usage analytics. We do not build advertising profiles. Your compliance records are yours.
How Your Information Is Shared
We do not sell or share your personal data for advertising. We share data only as needed to operate the app:
- Google Firebase (our processor). Troth uses Firebase Authentication, Cloud Firestore, and Cloud Storage to run the app. Google (Firebase) is our sole third-party data processor (sub-processor) and processes your data on our behalf to provide these services.
- Legal requirements. We may disclose information if required to do so by law, regulation, legal process, or an enforceable governmental request, or to protect the rights, safety, or property of Troth, our users, or the public.
Separately, when you sign in with Apple or Google, Apple or Google handles its own part of the sign-in flow under its own privacy policy. We never receive your Apple or Google password.
Data Storage & Security
Your data is processed and stored on Google Cloud infrastructure in the United States via Firebase.
| Safeguard | How it works |
|---|---|
| Encryption in transit | Data moving between the app and our backend is protected with HTTPS/TLS. |
| Encryption at rest | Stored data is encrypted using Google Cloud's default encryption. |
| Owner-scoped access | Access rules are scoped to the owner, so only your account can read your store's data. |
| Tamper-evident records | Evidence photos are sealed with a SHA-256 hash in an append-only chain, making alteration detectable. |
No method of electronic storage or transmission is perfectly secure. The Evidence Vault is tamper-evident, not tamper-proof, and we cannot guarantee that records can never be altered, lost, or corrupted.
Data Retention & Deletion
We keep your data while your account is active. You are in control of deletion:
- Delete your account in-app. Go to Settings → Delete Account. This deletes your account and your associated store data and evidence from our systems.
- Legal-hold records are preserved. Records you have explicitly placed under a legal hold are retained until you release the hold. This is by design, so that evidence under hold is not lost.
- Apple token revoked. When you delete your account, your Sign in with Apple token is revoked.
Subscriptions & Payments
Troth offers an optional auto-renewable subscription, Troth Plus, at $9.99/month or $79.00/year, with a 7-day free trial for new subscribers.
- Apple handles billing. Payment is processed by Apple through your Apple Account. We do not receive your card details.
- Manage or cancel any time. You can manage or cancel your subscription in your Apple Account settings.
Your Rights & Choices
You can access, correct, export, and delete your data:
- Access and correct. View and edit your account details and records inside the app.
- Export. Use the in-app PDF and CSV export to take your records with you.
- Delete. Delete your account in-app at Settings → Delete Account (legal-hold records are retained until you release the hold, as described above).
For any privacy request, contact us at finnegantom65@gmail.com.
California residents (CCPA/CPRA)
We do not sell or share your personal information. You may exercise your rights to know, access, and delete by contacting us at the email above.
GDPR and UK GDPR
Where the GDPR or UK GDPR applies, our lawful basis for processing your account and content data is the performance of our contract with you. For optional features (camera and voice capture), our basis is your consent, which you can withdraw at any time by turning off the relevant permission.
Children's Privacy
Troth is a business tool for store operators. It is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be reflected here, and your continued use of Troth after an update means you accept the revised policy.
Contact Us
Troth is operated by Finn Digital LLC (Florida, USA). Questions about this policy or your data? Reach us at: