Privacy Policy

1. Overview

Trifini™ (formerly PLOS) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

Trifini™ is a product of [Legal Entity Name], [address], which is the Data Fiduciary for your personal data. Trifini was formerly known as PLOS; this policy applies to the same service and your existing account.

By using Trifini, you consent to the data practices described in this policy. This policy should be read alongside our Terms & Conditions.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Username and email address
• Password (stored in encrypted/hashed form)
• Profile preferences and settings

2.2 Life Management Data

As you use Trifini, you may voluntarily provide:

• Routines & Habits — Names, schedules, completion records, streaks
• Goals — Goal descriptions, progress, life area assignments
• Journal Entries — Personal notes and reflections
• Health & Wellness — Mood scores, energy levels, sleep logs
• Reminders — Reminder messages, schedules, and delivery preferences
• Finance — Money information you choose to enter: accounts and balances, transactions (amount, category, date, merchant), budgets, bills, subscriptions, loans and repayments, investments, insurance policies and claims, assets and liabilities (net worth), credit score, payslip and tax details, and financial goals. We never connect to your bank; everything here is typed or imported by you.

2.3 AI Conversation Data

When you use the AI Chat feature, we collect:

• Messages you send to the AI assistant
• AI-generated responses
• Actions triggered through AI conversations

2.4 Messaging Integration Data

If you connect messaging platforms (Telegram, WhatsApp), we collect:

• Your messaging platform user ID
• Messages exchanged through the integration
• Delivery and read receipts

2.5 Technical Data

We automatically collect:

• Browser type and version
• Device information
• Session data and login timestamps
• Feature usage patterns (anonymized)

3. How We Use Your Information

We use your personal information to:

• Provide the Service — Display your routines, track goals, deliver reminders
• Generate Insights — Analyze your data to provide behavioral signals, balance scores, and trend analysis
• Power AI Features — Provide context to AI assistants for personalized guidance
• Coach check-ins — If daily check-ins are on (they are on by default), your AI coach uses the same information that powers your chat with it — your goals, routines and recent activity, plus your mood logs and recent journal entries if you have allowed them under Settings > Privacy > Data Access Permissions (they are off by default) — to write a short morning and evening message. It is delivered in the app and, if you have allowed notifications on your device, as a push notification. You can switch check-ins off at any time in Settings > Notifications; we then stop generating them.
• Improve the Platform — Understand usage patterns to enhance features (using anonymized data only)
• Send Notifications — Deliver reminders and alerts through your preferred channels
• Maintain Security — Detect and prevent unauthorized access or abuse

We never sell your personal data to third parties. We never use your data for advertising purposes.

4. Data Storage & Security

4.1 Storage

Your data is stored in a secure database. All data is associated with your user account and accessible only through authenticated sessions.

4.2 Security Measures

We implement the following security measures:

• Password hashing using industry-standard algorithms
• Session-based authentication with CSRF protection
• Input validation and sanitization to prevent injection attacks
• Policy enforcement system for action authorization
• Fail-closed security model for sensitive operations

4.3 Data Encryption

Sensitive data fields (such as messaging API tokens) are encrypted at rest. All connections use HTTPS for data in transit.

5. Data Sharing & Third Parties

5.1 We Do Not Sell Data

We do not sell, rent, or trade your personal information to any third party.

5.2 Third-Party Services

We may share limited data with third-party services that are essential to the platform:

• AI Providers — Conversation context sent to AI models (Google Gemini, OpenAI, Anthropic Claude, Ollama) for generating responses
• Messaging Platforms — Reminder content sent to Telegram/WhatsApp for delivery

The services below currently process data on our behalf. This list is generated from the same source as our sub-processor page, so it always matches what the product actually uses:

• Zoho Mail — Transactional email (verification, password reset, beta approvals) (India). Data: Email address, user's name, message content
• Google Gemini — AI assistant responses (US / multi-region). Data: Chat message text; routines, reminders, life areas, goals, completion logs and a monthly finance summary (totals, top category, net worth); mood, health and journal data only if you allow it
• Razorpay — Subscription payments and invoices (India). Data: Name, email, phone, payment method fingerprint, billing history
• Telegram — Chat bot link for reminders and quick capture (opt-in) (Multi-region). Data: Message text, Telegram user/chat ID — only if you link your account
• Google (OAuth) — Sign-in with Google (optional auth provider) (US / multi-region). Data: Email, public profile — only if you choose Google sign-in
• Apple (OAuth) — Sign-in with Apple (optional auth provider) (US). Data: Email (may be relay), public profile — only if you choose Apple sign-in
• Google Calendar — Two-way calendar sync (opt-in) (US / multi-region). Data: Calendar events you choose to sync
• Google Fit — Activity and sleep data sync (opt-in) (US / multi-region). Data: Steps, heart rate, sleep sessions — only if you connect Google Fit
• Zerodha / Groww / INDMoney — Investment balance sync (opt-in) (India). Data: Holdings snapshots — only if you connect each account
• PostHog — Product analytics and session replay for debugging (anonymous where possible) (EU or self-hosted). Data: Page views, feature interactions, session recordings (with PII masking)
• Sentry — Application error tracking (EU). Data: Stack traces, request metadata, user id (no request body)
• BetterStack — Uptime monitoring of the /status/ page (EU). Data: Public status-page metadata only — no user data
• ElevenLabs — Voice synthesis (text-to-speech) for voice replies (opt-in) (US). Data: Text we convert to speech — only when voice output is enabled
• Typesense — Full-text search indexing of your content (for ⌘K) (Self-hosted / EU). Data: Indexable strings from your own entries — searchable only by you
• GrowthBook — Feature flag service (rollout decisions) (Self-hosted). Data: Non-user: flag configuration only
• hCaptcha — Bot protection on public forms (Multi-region). Data: IP, browser fingerprint — only on signup/login

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect the rights, property, or safety of Trifini, its users, or the public.

6. AI & Data Processing

6.1 How AI Uses Your Data

When you interact with the AI Chat feature, the following data may be shared with AI providers:

• Your current message and recent conversation history
• Routine names, schedules, and completion status (for context)
• Mood, energy, sleep and balance scores (for personalized advice) — only if you have allowed Mood Data and Health Data under Settings > Privacy > Data Access Permissions; both are off by default
• Goal names and progress (for relevant suggestions)
• A summary of your finance entries for the current month — total spent and earned, number of transactions, your top spending category and the amount spent in it, and your latest net worth (for money-related guidance). Individual transactions, accounts, loans, insurance, payslip and tax details are not sent. This summary is sent whenever you have logged at least one transaction in the current month, and there is currently no setting to turn it off.

Your recent journal entries are shared only if you have allowed Journal Entries in the same place (off by default). Your current conversation is always sent to the AI provider while you chat.

6.2 AI Data Retention

AI providers may temporarily process your conversation data according to their own privacy policies. We recommend reviewing the privacy policies of our AI providers for specific data handling practices.

6.3 Behavioral Insights

Trifini generates behavioral insights (signals) by analyzing patterns in your data. This analysis is performed locally on our servers and does not involve sharing data with external parties.

7. Cookies & Tracking

Trifini uses minimal cookies necessary for platform functionality:

• Session Cookie — Maintains your logged-in state
• CSRF Token — Protects against cross-site request forgery
• User Preferences — Stores display preferences (e.g., time format) in localStorage

We do not use advertising pixels or sell data to advertisers. We do use product analytics and error-monitoring services (see the list in section 5.2) to understand usage and fix problems. For more details, see our Cookie Policy.

8. Your Rights

You have the following rights regarding your personal data:

• Access — View all data associated with your account through the platform
• Export — Download your data in CSV or JSON format via the Export feature
• Correction — Edit or update any of your personal information
• Deletion — Delete individual records or request complete account deletion
• Restriction — Pause or deactivate features that process your data
• Objection — Switch off daily coach check-ins in Settings > Notifications. Turning off AI Assistance in Settings > Privacy stops coach check-ins and every other AI feature.

To exercise any of these rights, use the relevant feature in your account settings or contact us.

9. Data Retention

We retain your data for as long as your account is active. Specifically:

• Active Account — All data is retained and accessible
• Deleted Records — Permanently removed upon deletion (some records may use soft-delete with archival)
• Account Deletion — All associated data is permanently removed within 30 days
• AI Conversations — Chat history is retained for your reference; you can delete individual conversations

10. Children's Privacy

Trifini is intended for people aged 18 and over; we ask you to confirm this when you sign up. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of Trifini after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@plos.app
• Platform: Use the Contact page