Privacy Policy

1. Who we are

TruthLayer is a nonprofit media-literacy project. This policy covers the TruthLayer website, and will cover the TruthLayer mobile apps and browser extension at launch. If any section differs per platform, the platform-specific terms will be shown in-app.

2. What we collect

2.1 When you analyze a video

• Video URL hash — a SHA-256 hash of the normalized video URL, not the raw URL. This lets us cache results so the same video isn't re-analyzed wastefully.
• Analysis metadata — pipeline and model versions, risk scores, claim counts, source counts, and persuasion-signal types detected. No raw transcript text is stored outside the specific evidence segments shown in your analysis.
• Interaction events — anonymous events such as "warning viewed," "analysis shared," or "feedback submitted," used only to improve the product and audit for bias.

2.2 When you join the waitlist

• Email address — used solely to notify you about the launch. You can request deletion at any time via [email protected].

2.3 Technical data

• Hashed IP address — retained for a maximum of 30 days for abuse prevention and rate limiting, then purged.

3. What we never collect

• Your identity tied to individual video analyses (analyses are pseudonymous by default).
• Raw transcript text beyond the evidence segments in your analysis.
• Your location or device fingerprint beyond the hashed IP above.
• Child identities in family/parental features — only the parent account is stored; child profiles are local-first by default.
• Browsing history outside the videos you explicitly ask us to analyze.

4. What we never do with your data

• No sale of data. Ever.
• No behavioral advertising. Ever.
• No political profiling or user scoring.
• No sharing with social media platforms whose content is analyzed.
• No law-enforcement surveillance use of logs, except the explicitly opt-in extremist-threat notification pathway described in our safety documentation.

Logs are used only for system improvement, bias auditing, and red-team safety testing.

5. Data retention

• Cached video artifacts (downloaded media, transcripts, frames) are retained only as long as needed for caching and are subject to defined expiry.
• Hashed IPs: 30 days maximum.
• Waitlist emails: until you request deletion or the launch notification is sent.
• You may request export or deletion of your data at any time at [email protected].

6. Children

TruthLayer is designed with young users in mind. Our teen modes are built to teach verification skills, not to profile minors. We do not knowingly collect personal data from children under 13 without verifiable parental consent, and child profiles in family features are stored on-device by default. Where local law requires (including COPPA in the US and GDPR-K in the EU), additional consent flows apply and will be presented in-app.

7. Security

Data is encrypted in transit and at rest. Analysis jobs are isolated per tenant; internal cache paths are never exposed to clients. Access to production data is limited to personnel who need it for operations and safety review.

8. Changes to this policy

We will update this page when the policy changes and note the revision date above. Material changes affecting data use will be announced in-app or by email before taking effect.

9. Contact

Questions about privacy: [email protected].