Last Updated: Dec 11, 2025
Tronic ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, mobile applications, and related services (collectively, the "Service"). By using the Service, you consent to the data practices described in this policy.
1. Information We Collect
We collect information about you in various ways when you use the Service.
1.1 Information You Provide to Us
Account Information:
- Email address
- Username
- Password (encrypted)
- Profile information (name, bio, profile picture - optional)
- Wallet addresses (for blockchain features) Mission Participation:
- Content you submit (photos, videos, text responses)
- Survey responses
- User-generated content Communications:
- Messages you send us (support requests, feedback)
- Email preferences
- Notification settings Payment Information:
- Payment card details (processed by third-party payment processors)
- Billing address
- Transaction history
1.2 Information We Collect Automatically
Usage Data:
- Pages visited and features used
- Mission interactions and completion data
- Time spent on the Service
- Clicks, navigation paths, and user journeys Device Information:
- Device type and model
- Operating system and version
- Browser type and version
- IP address (hashed)
- Device identifiers
- Mobile network information Location Information:
- General location based on IP address (city/region level)
- Precise location (only if you grant permission for location-based features) Cookies and Tracking Technologies:
- Cookies, web beacons, and similar technologies (see Cookie Policy below)
- Anonymous user identifier (Tronic ID)
- Session information
1.3 Information from Third Parties
Authentication Providers:
- Information from third-party authentication services (e.g., email, name, profile picture if you connect social accounts) Blockchain Data:
- Public blockchain information (wallet addresses, NFT ownership, transaction history) Brand Partners:
- Information brands provide about mission participants (if you participate in their missions)
2. How We Use Your Information
We use the information we collect for the following purposes: Provide and Improve the Service:
- Create and manage your account
- Process mission participation and reward fulfillment
- Provide customer support
- Analyze usage patterns and improve user experience
- Develop new features and functionality Communications:
- Send transactional emails (account verification, password reset, mission notifications)
- Send promotional communications (with your consent)
- Respond to your inquiries and support requests Security and Fraud Prevention:
- Detect and prevent fraudulent activity
- Monitor and prevent abuse of the Service
- Enforce our Terms of Service Legal Compliance:
- Comply with legal obligations
- Respond to legal requests (subpoenas, court orders)
- Protect our rights and property Analytics and Research:
- Understand how users interact with the Service
- Measure mission effectiveness and user engagement
- Conduct research to improve our platform
3. Analytics & Tracking
Third-Party Analytics Services
We use third-party analytics services to help us understand how users interact with the Service and improve user experience. What Analytics Services Receive:
- Anonymous identifier (Tronic ID): A unique identifier assigned to your account that does NOT contain personal information
- Usage data: Pages visited, features used, mission interactions, time spent
- Device information: Device type, browser type, operating system
- Technical information: Hashed IP address, session data What Analytics Services DO NOT Receive:
- Your email address
- Your name or profile information
- Your phone number
- Any other personally identifiable information (PII) Analytics Providers: We use analytics providers including PostHog to process this data. These providers help us understand user behavior, measure feature performance, and improve the Service. Data Retention:
- Analytics data is retained for up to 2 years for analysis purposes
- PostHog automatically deletes data after 7 years per their data retention policy
- When you delete your account, your Tronic ID is immediately disassociated from your profile, making all historical analytics data anonymous
4. Cookie Policy
What Are Cookies?
Cookies are small text files stored on your device that help us provide and improve the Service.
Cookie Categories
We use the following types of cookies:
Necessary Cookies (Required)
These cookies are essential for the Service to function and cannot be disabled.
- Authentication: Keep you logged in
- Security: Prevent fraud and protect your account
- Session management: Remember your preferences during your visit
Analytics Cookies (Optional - Requires Consent)
These cookies help us understand how you use the Service.
- Usage tracking: Pages visited, features used, mission interactions
- Performance monitoring: Load times, errors, user journeys
- A/B testing: Compare different features and designs Provider: PostHog and similar analytics services Default: Opted-out (you must explicitly opt-in)
Preference Cookies (Optional)
These cookies remember your choices and settings.
- Theme preferences: Dark mode, light mode
- Language preferences: Your selected language
- Display settings: Layout and customization choices
Your Cookie Choices
Cookie Consent Banner:
- On your first visit, you'll see a cookie banner asking for your consent
- You can accept or decline optional cookies
- Necessary cookies are always enabled (required for functionality) Cookie Settings:
- Manage your cookie preferences anytime through account settings
- Toggle analytics cookies on or off
- Your choices are saved and respected across sessions Browser Controls:
- Configure your browser to block or delete cookies
- Note: Blocking necessary cookies may break core functionality Do Not Track:
- We respect browser "Do Not Track" (DNT) signals
- If DNT is enabled, we will not track your activity for analytics purposes
Cookie Duration
- Session cookies: Deleted when you close your browser
- Persistent cookies: Remain until expiration or manual deletion
- Authentication: 30 days
- Analytics: 1 year
- Preferences: 1 year
5. How We Share Your Information
We do not sell your personal information to third parties. We share your information only in the following circumstances:
5.1 Service Providers
We share data with trusted third-party service providers who help us operate the Service: Analytics Provider (e.g., PostHog):
- Receives: Anonymous Tronic ID, usage data, device information
- Does NOT receive: Email, name, phone, or any PII
- Purpose: Understand platform usage and improve user experience Authentication Provider:
- Receives: Email address, encrypted password
- Purpose: Secure account login and identity verification Payment Processor (e.g., Stripe):
- Receives: Payment information, billing address
- Purpose: Process payments when you make purchases
- Note: Only receives data when you initiate a purchase Cloud Infrastructure Provider:
- Receives: All Service data (stored encrypted)
- Purpose: Data storage, hosting, and infrastructure Email Delivery Service:
- Receives: Email address
- Purpose: Send transactional emails (account verification, password reset, mission notifications) Notification Service:
- Receives: Email address or phone number (only if you enable notifications)
- Purpose: Send push notifications or SMS alerts
5.2 Brand Partners (Dashboard Access)
When You Participate in Branded Missions: Brands who sponsor missions on our platform have access to a dashboard where they can view information about users who participate in their missions. What Brands Can See:
- Your email address
- Your name (if provided in your profile)
- Mission completion status and timestamp
- Content you submitted as part of the mission (photos, survey responses, etc.)
- Rewards you claimed from their missions What Brands Cannot See:
- Your activity in other brands' missions
- Your full platform activity history
- Your password or login credentials
- Your private messages or account settings
- Your payment information Purpose: Brands use this information to:
- Fulfill rewards and prizes you've earned
- Contact you regarding the mission
- Analyze mission performance
- Comply with legal obligations (e.g., tax reporting for prizes over $600) Your Choice: Participation in Branded Missions is voluntary. By choosing to participate, you understand that the brand will have access to your email and mission activity through our dashboard. Brand Responsibilities: Brands are independent data controllers and must:
- Use your data only for mission-related purposes
- Comply with applicable privacy laws (GDPR, CCPA, etc.)
- Honor your opt-out requests for marketing communications
- Maintain their own privacy policies governing their use of your data Important: Once a brand receives your information through the dashboard, their privacy policy governs how they use and protect your data. We encourage you to review the brand's privacy policy before participating in their missions.
5.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Subpoenas or court orders
- Legal process or government requests
- Investigations of fraud, security threats, or illegal activity
- Protection of our rights, property, or safety
5.4 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on the Service before your information is transferred.
5.5 With Your Consent
We may share your information for any other purpose with your explicit consent.
Important Statement
We do NOT:
- Sell your personal information to third parties
- Share your personal information with analytics providers (only anonymous Tronic ID)
- Allow third-party services to use your data for their own marketing purposes
- Provide brands with your activity in other brands' missions
6. Data Retention
Active Accounts
While Your Account Is Active:
- Email address and profile data: Retained indefinitely while account is active
- Mission participation data: Retained indefinitely
- Transaction records: Retained for 7 years (tax and accounting compliance)
- Analytics data: Anonymous Tronic ID retained for up to 2 years
Deleted Accounts
When You Delete Your Account:
- Personal data removed from active systems: Within 30 days
- Personal data purged from backups: Within 60 days
- Analytics data: Tronic ID immediately disassociated from your profile (becomes fully anonymous)
- Transaction records: Retained for 7 years if legally required (tax compliance)
Analytics Data
- Anonymous analytics data (Tronic ID only, no PII) retained for up to 2 years
- PostHog automatically deletes data after 7 years per their retention policy
- When you delete your account, your identity is removed from all analytics data immediately
Email Communications
- Transactional email logs: Retained for 1 year
- Unsubscribe records: Retained indefinitely to honor your opt-out preferences
Legal Exceptions
We may retain data longer when required to:
- Comply with tax or accounting regulations (7 years)
- Respond to legal proceedings (subpoenas, court orders)
- Investigate or prevent fraud and abuse
- Enforce our Terms of Service
7. Your Privacy Rights
You have control over your personal information. Depending on your location, you may have additional rights under applicable laws.
7.1 Rights for All Users
Right to Access:
- Request a copy of your personal data
- Contact privacy@tronic.app with subject "Data Access Request"
- We will send you a JSON file with your data within 30 days Right to Correction:
- Update your profile information through account settings
- Contact us to correct inaccurate data Right to Deletion:
- Request account deletion by emailing privacy@tronic.app
- Personal data removed within 30 days (see Data Retention above) Right to Opt-Out:
- Opt out of analytics tracking through cookie preferences or account settings
- Opt out of promotional emails via unsubscribe link or account settings
- Opt out of push notifications through device settings
7.2 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Right to Know:
- Know what personal information we collect
- Know the categories of sources from which we collect information
- Know the business or commercial purposes for collecting information
- Know the categories of third parties with whom we share information Right to Delete:
- Request deletion of your personal information (subject to legal exceptions) Right to Opt-Out of Sale:
- We do NOT sell your personal information
- You can verify this by reviewing our data sharing practices above Right to Non-Discrimination:
- We will not discriminate against you for exercising your CCPA rights
- You will receive the same level of service regardless of your privacy choices Right to Correct:
- Request correction of inaccurate personal information Right to Limit Use of Sensitive Personal Information:
- We do not use sensitive personal information for purposes requiring opt-out under CPRA How to Exercise Your Rights:
- Email: privacy@tronic.app
- Subject: "CCPA Data Request - [Access / Deletion / Correction]"
- Include: Your registered email address
- Authorized Agent: You may designate an authorized agent to make requests on your behalf Verification: We will verify your identity before processing requests by confirming your email address or other account information. Response Time: We will respond within 45 days of receiving your request (may extend up to 90 days for complex requests).
7.3 Texas Residents (TDPSA)
If you are a Texas resident, you have rights under the Texas Data Privacy and Security Act (TDPSA) similar to California residents: Rights:
- Right to know what personal data we collect
- Right to access your personal data
- Right to correct inaccurate data
- Right to delete your personal data
- Right to opt-out of targeted advertising (we do not engage in targeted advertising)
- Right to non-discrimination How to Exercise: Contact privacy@tronic.app with subject "TDPSA Data Request"
7.4 European Residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR): Right to Access:
- Obtain confirmation of whether we process your data and access to that data Right to Rectification:
- Correct inaccurate or incomplete personal data Right to Erasure ("Right to be Forgotten"):
- Request deletion of your personal data in certain circumstances Right to Restriction of Processing:
- Request that we limit how we use your data Right to Data Portability:
- Receive your personal data in a structured, machine-readable format
- Transmit your data to another controller Right to Object:
- Object to processing based on legitimate interests
- Object to direct marketing (we always honor opt-out requests) Right to Withdraw Consent:
- Withdraw consent at any time (does not affect lawfulness of processing before withdrawal) Right to Lodge a Complaint:
- Lodge a complaint with your local data protection authority if you believe we've violated GDPR Legal Basis for Processing: We process your personal data based on:
- Contractual Necessity: To provide the Service and fulfill our Terms of Service
- Legitimate Interests: To improve the Service, prevent fraud, and ensure security
- Consent: For optional features like analytics tracking (you can withdraw anytime)
- Legal Obligation: To comply with applicable laws and regulations Data Transfers: If we transfer your data outside the EEA, we use appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions for countries with equivalent data protection Data Protection Officer: For GDPR-related inquiries, contact our Data Protection Officer at: dpo@tronic.app
7.5 How to Exercise Your Rights
Email Requests: To exercise any of these rights, email us at:
- Email: privacy@tronic.app
- Subject: "Data Request - [Access / Deletion / Correction]"
- Include:
- Your registered email address
- Type of request (access, deletion, correction)
- Any specific data you're requesting Our Process:
- Verification: We verify your identity by asking you to reply from your registered email address
- Processing: We process your request within 30 days (45 days for complex requests)
- Response:
- Access requests: We send you a JSON file containing all your personal data
- Deletion requests: We soft-delete your account and send confirmation
- Correction requests: We update your data and send confirmation Response Time:
- Standard requests: 30 days
- Complex requests: 45 days (we will notify you of the extension) No Fee:
- Exercising your rights is free (we may charge a reasonable fee for excessive or repetitive requests) Note on Third Parties: For data shared with third parties (such as brands via the dashboard), you may need to exercise your rights directly with those parties as they are independent data controllers.
8. Security
We implement reasonable security measures to protect your information from unauthorized access, disclosure, alteration, or destruction: Technical Measures:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Secure password hashing (bcrypt)
- Regular security audits and penetration testing Organizational Measures:
- Access controls and authentication
- Employee training on data protection
- Incident response procedures
- Regular security policy reviews Your Responsibility:
- Keep your password secure and confidential
- Enable two-factor authentication if available
- Do not share your account credentials
- Notify us immediately of any unauthorized access No Guarantee: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If You're Under 13: Do not use the Service or provide any information to us. If You're a Parent: If you believe your child under 13 has provided us with personal information, please contact us at privacy@tronic.app and we will delete it. Ages 13-17: If you are between 13 and 17 years old (or under the age of majority in your jurisdiction), you represent that you have obtained permission from your parent or legal guardian to use the Service.
10. International Data Transfers
Tronic is based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries. Data Protection:
- We use appropriate safeguards for international transfers (Standard Contractual Clauses, adequacy decisions)
- Your data is protected by this Privacy Policy regardless of where it is processed By using the Service, you consent to the transfer of your information to the United States and other countries.
11. Third-Party Links
The Service may contain links to third-party websites, applications, or services not owned or controlled by Tronic. We Are Not Responsible For:
- Third-party privacy practices
- Content on third-party sites
- Third-party data collection Your Responsibility:
- Review the privacy policies of any third-party sites you visit
- Understand that this Privacy Policy does not apply to third-party services
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. How We Notify You:
- Post the updated Privacy Policy on the Service
- Update the "Last Updated" date at the top
- Send an email to your registered email address (for material changes)
- Display a prominent notice on the Service (for material changes) Your Continued Use: Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. Review Regularly: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: General Privacy Inquiries:
- Email: privacy@tronic.app
- Response time: Within 5 business days Data Rights Requests (GDPR, CCPA, TDPSA):
- Email: privacy@tronic.app
- Subject line: "Data Request - [Access / Deletion / Correction]"
- Response time: Within 30 days (45 for complex requests) Data Protection Officer (GDPR):
- Email: dpo@tronic.app Mail:
- Tronic Privacy Team
- [Your Company Address]
- [City, State, ZIP Code] Support:
- Email: support@tronic.app
- Website: [Your support URL]
14. Summary of Key Points
What We Collect:
- Account info (email, username, profile)
- Usage data and analytics
- Device information
- User-generated content How We Use It:
- Provide and improve the Service
- Send transactional communications
- Analyze usage patterns (anonymously)
- Prevent fraud and ensure security Who We Share With:
- Analytics providers (anonymous Tronic ID only, no PII)
- Service providers (authentication, payments, cloud hosting)
- Brand partners (email and mission activity when you participate in their missions)
- Legal authorities (when required by law) We Do NOT Sell Your Data Your Rights:
- Access, correct, and delete your data (email privacy@tronic.app)
- Opt out of analytics tracking (cookie preferences or account settings)
- Opt out of promotional emails (unsubscribe link)
- Lodge complaints with authorities (GDPR) Data Retention:
- Active accounts: Retained while active
- Deleted accounts: Removed within 30 days, backups purged within 60 days
- Analytics: Anonymous data up to 2 years How to Contact Us: privacy@tronic.app
By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and sharing of your information as described.