Troyka

Privacy Policy

Last updated: 16 September 2026

Troyka counts the days you go without a habit and keeps Troy around for the minute a craving hits. This page says plainly what we store, where it lives, and how to get rid of it.

Who is responsible for your data

The controller of the data described here is Brigitte DO VALLE-SANTOS (EI), 830 Route de Choisi, 82290 La Ville-Dieu-du-Temple, France, France. Questions, requests and complaints go to support@troyka.app.

What stays on your phone

Your promise, the days you marked, your reason for starting and anything you write in the app are stored on your device with Apple's SwiftData, and synced to your own private iCloud if iCloud is enabled on the device. We cannot read your iCloud data — it belongs to your Apple Account, not to us.

What our servers store

Troyka uses Supabase (servers in the EU, Paris region) for three things:

• Your account. An anonymous account is created when you first open the app, so you can use it without signing up. If you sign in with Apple or Google later, that anonymous account is upgraded and we store the identifier the provider gives us, plus your email address when the provider shares it.
• Your subscription status. Whether you are on the free tier or Pro, handled through RevenueCat and Apple. We never see your card. Payments go through Apple, and Apple does not share your payment details with us.
• Usage events, if you allow analytics. Events, not content: that a promise was started, that Troy was opened, which onboarding screen was the last one you saw. We ask for this on first launch and you can say no. Saying no changes nothing about how the app works.

What happens when you talk to Troy

Troy answers in one of two ways, and the app chooses automatically:

• On your device. On iPhones that support Apple Intelligence, the reply is generated locally and nothing leaves the phone.
• Through our server. On other iPhones, your message, your chosen habit and your stated reason are sent to our server and passed to an AI model provider so it can answer. We do not use these messages to train any model, and we do not store the conversation after the reply is returned beyond what is needed to enforce usage limits.

Please do not put names, addresses, medical details or payment information into a message to Troy. He does not need them, and the fewer of them exist anywhere, the better.

Why we are allowed to process it, and for how long

Under the GDPR every piece of processing needs a legal basis and an end date. Ours:

• Your account — necessary to perform the contract between us (Article 6(1)(b)). Kept until you delete the account.
• Your subscription status — necessary to perform the contract, and to meet accounting obligations (Article 6(1)(b) and (c)). Purchase records are kept for as long as tax law requires, then deleted.
• Messages to Troy — necessary to provide the feature you asked for (Article 6(1)(b)). Kept only as long as it takes to answer you and to count the message against your usage limit; the counter itself holds a number, not your words.
• Usage analytics — your consent (Article 6(1)(a)). Withdraw it at any time in the app's settings; events collected before that are deleted with your account.
• Advertising identifiers, if ads are shown — your consent, asked for separately through Apple's prompt and through a consent form where the law requires one.

There is no automated decision-making that produces legal effects for you, and no profiling beyond what is described here.

Where your data goes

Our database sits in the European Union (Paris). Some of the companies we rely on — Apple, RevenueCat, and the provider of the AI model behind Troy — process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the company is certified under it.

What we never collect

• Health records, HealthKit data, location, contacts, photos or your address book.
• The content of what you write, sent to analytics. Analytics receives events only.
• Any data at all from anyone under the age this policy allows — see below.

Advertising

The free tier of Troyka may show ads. If it does, you will be asked for permission before any tracking identifier is used, through Apple's App Tracking Transparency prompt, and separately for consent where the law in your country requires it. You can remove ads permanently with a one-time purchase, and Pro has no ads at all.

Deleting everything

There is a Delete account button inside the app, in your profile. It removes your account and the data attached to it from our servers, permanently and without a waiting period. What lives on your device is removed when you delete the app; what lives in your iCloud is removed through your Apple Account settings.

You can also write to support@troyka.app and ask us to delete your data, to send you a copy of it, or to correct it. We answer within 30 days.

Who else touches your data

• Apple — your account, purchases and iCloud.
• Supabase — our database and servers, hosted in the European Union.
• RevenueCat — subscription status.
• The AI provider behind Troy — only the message you send him, and only when your device cannot answer locally.

We do not sell your data. We do not share it with advertisers or data brokers.

Your rights

If you live in the European Union or the United Kingdom, you have the right to access your data, to correct it, to delete it, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent at any time — withdrawing it does not affect what was done before. Write to support@troyka.app and we will answer within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In France that is the CNIL (cnil.fr); elsewhere in the EU, the authority where you live.

If you live in California, the CCPA gives you the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives in exchange for data. Exercising any of these rights never gets you a worse version of the app.

Age

Troyka is rated 12+ in the App Store and is intended for people aged 13 or older, or the age of digital consent in their country if that is higher. We do not knowingly collect data from anyone younger. If you believe a child has an account, write to us and we will delete it.

This is not medical care

Troyka counts days and gives you someone to talk to. It does not diagnose, treat or cure addiction, and Troy is not a doctor, a therapist or a counsellor. If you are in crisis, contact a medical professional or your local emergency service.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect, not quietly on this page. The date at the top always reflects the current version.