Privacy Policy

1. Introduction

Project Trinetra ("we," "our," or "us"), operated by Unravel The Love, explains how we collect, use, disclose, and safeguard your information when you use our application and services.

2. Information We Collect

• Device Information: Device type, operating system, and unique identifiers.
• Location Data: Approximate or precise location when services are enabled for disaster alerts.
• Usage Data: Information about feature interactions and actions taken.
• Property Inspection Data: Photos and compliance data from Zone 0 self-inspections. Processed on your device by default. If you choose cloud analysis, the photo is sent to Google (Gemini) for that analysis — see section 4.

3. How We Use Your Information

• Provide civil defense and disaster resilience services.
• Deliver location-relevant real-time disaster alerts.
• Process property inspections via on-device AI, or via Google Gemini if you choose cloud analysis.
• Calculate aggregated, anonymized community compliance metrics.
• Improve application experience.
• Comply with legal obligations and protect public safety.

4. On-Device AI Processing

Property inspection photos stay on your device by default and are processed using Liquid AI LFM models locally. In the default mode, those photos are not transmitted to cloud servers — the server stores only numerical compliance results and, if you take evidence photos, a cryptographic fingerprint (hash) of each photo so it can later be proven unaltered. Sharing an actual photo — for example, for an inspector to review — is a separate, explicit choice per photo, and it only works after the photo has been filtered on your device to blur faces and licence plates (this sharing option is currently switched off until that filter meets our accuracy bar). When cloud processing occurs, it currently runs on Google's Gemini service, not on our own infrastructure. Our production deployment is configured for cloud AI providers (Google, and OpenAI, Anthropic and Groq as fallbacks); the sovereign, self-hosted configuration exists in the software and is used for customer-operated deployments, but it is not what powers the public app today. Earlier versions of this policy said photos were never transmitted to the cloud and that cloud processing ran only on our own infrastructure. Neither was accurate for the public app; we corrected this on August 29, 2026. An earlier version also described an offline mesh-networking feature; that feature is not implemented and has been removed from this policy.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

• Emergency Services: With disaster response agencies when necessary for public safety.
• Insurance Partners: Only with your explicit, revocable consent, a carrier you name receives your property's compliance status and flagged categories — never photos, never your identity. No insurance partner is connected today.
• Service Providers: Third-party providers supporting operations under strict data processing agreements.
• Legal Requirements: When required by law or to protect our rights and safety.

6. Truth Ledger

All significant platform actions are recorded on a cryptographically hash-chained, append-only audit trail. The ledger stores hashes rather than raw personal data, and every entry links to the one before it so later alteration can be detected.

7. Data Security

Security measures include JWT authentication with HS256 signing, role-based access control (RBAC), account lockout after 5 failed attempts within 15 minutes, and 30-minute session inactivity timeouts. No method of electronic transmission or storage is completely secure, but we implement industry best practices.

8. Data Retention

Information is retained only as long as necessary to provide services, unless law requires longer retention.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of certain data collection practices.
• Withdraw consent where processing is based on consent.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Any unknowingly collected information will be deleted promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

admin@trinetra.app