Privacy Policy

This Privacy Policy explains how Instasleb LLC, doing business as TrustyTommy (“TrustyTommy,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information when you use trustytommy.com, the TrustyTommy AI chat experience, related messages, and services that link to this Policy (collectively, the “Service”).

1. Scope

This Policy applies to information TrustyTommy controls. Third-party websites and services have their own policies.

The TrustyTommy Family Care Connection page currently describes a proposed concept. The current live Service does not automatically share a user’s private chats with a caregiver. We will provide additional notice and controls before launching any feature that changes how information is shared with a caregiver or family member.

2. Information we collect

The information we collect depends on how you use the Service.

Information you provide

• Identity and contact information: first name, email address, mobile number, and information you submit through a contact form.
• Conversation content: questions, responses, preferences, interests, stories, names of people you mention, goals, reminders, and other information you choose to discuss.
• Saved personalization and memories: facts or story notes selected or generated from conversation so Tommy can provide continuity, such as interests, family relationships, birthdays, preferred topics, projects, or information you ask Tommy to remember.
• Photos and files: images, documents, screenshots, mail, labels, receipts, cards, room photos, plant photos, or other files you choose to upload.
• Voice-related information: if you use microphone or voice-input features, your device, browser, or a service provider may process audio and convert it to text. We may receive the resulting text and, depending on the feature and provider, technical information associated with voice input.
• Health and caregiving information: information you voluntarily discuss about health, medication, appointments, symptoms, routines, caregiving, personal concerns, or another person. Please do not provide more sensitive information than necessary.
• Communications and support: the contents of messages sent through forms, email, feedback, or support requests.
• Payment and subscription information: subscription status, plan, transaction amount, dates, payment-provider identifiers, and limited billing information. Payment processors generally collect complete card details directly; TrustyTommy does not need to receive the complete card number.
• SMS choices: mobile number, consent status, opt-in and opt-out dates, delivery and click information, and message history or campaign status.

Information collected automatically

• Browser and device information: IP address, browser type, device type, operating system, language, time zone, approximate location derived from IP, and technical identifiers.
• Usage information: pages viewed, buttons clicked, session and visit times, feature use, onboarding progress, errors, referrals, and interactions with the Service.
• Browser identity and continuity information: a TrustyTommy user identifier, onboarding state, recent local conversation context, and related preferences stored in cookies or browser storage.
• Acquisition information: referring page, campaign parameters, landing-page variant, and similar advertising or referral identifiers when present in the link you use.
• Security and diagnostic information: logs used to prevent abuse, troubleshoot errors, maintain availability, and protect the Service.

Information from others

We may receive information from:

• service providers that host, support, analyze, secure, or process the Service;
• payment providers;
• SMS, email, and customer-support providers;
• referral or advertising sources;
• a family member or caregiver who contacts us or, in the future, uses a sharing feature with appropriate authorization; and
• public sources when needed to answer a user’s request.

3. How we use information

We use information to:

• provide and operate the Service;
• recognize returning users and continue onboarding;
• generate AI responses, images, summaries, and other requested output;
• remember user-selected facts, interests, stories, and preferences;
• process photos and files;
• provide reminders, text messages, and communications a user requests or authorizes;
• manage trials, subscriptions, billing, cancellation, and customer support;
• personalize content and improve usability;
• measure usage, understand which features work, and improve the Service;
• detect fraud, misuse, security incidents, and technical problems;
• enforce our Terms and protect users, TrustyTommy, and others;
• comply with law, legal process, tax, accounting, and regulatory obligations; and
• establish, exercise, or defend legal claims.

We may create aggregated or de-identified information that does not reasonably identify an individual and use it for analytics, planning, research, and service improvement. We will not attempt to re-identify information we maintain as de-identified except to test whether our de-identification measures work.

4. How AI processing works

User prompts, recent conversation context, saved personalization, and uploaded content may be transmitted to AI and workflow providers to generate and deliver the requested response.

TrustyTommy does not operate its own foundation model and does not use private conversations to train a TrustyTommy foundation model. Our vendors process content to provide contracted services and handle information under their agreements and privacy terms.

AI systems can infer information that a user did not expressly state and can generate inaccurate descriptions. We use safeguards and instructions intended to reduce errors, but we cannot eliminate them.

5. How we disclose information

We may disclose personal information to the following categories of recipients:

• AI and conversational-service providers that process prompts and produce responses;
• cloud hosting, database, storage, and content-delivery providers that run the website, store user state, or host images and files;
• workflow and automation providers that move information between Service components;
• analytics providers that help us understand traffic and feature use;
• payment providers that process subscriptions and transactions;
• SMS, email, CRM, and contact-form providers that deliver communications and manage consent;
• security, fraud-prevention, support, legal, accounting, and professional advisers;
• government authorities or other parties when reasonably necessary to comply with law, legal process, protect safety or rights, investigate fraud, or enforce agreements;
• transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business; and
• other parties at your direction or with your consent.

Providers used by the Service may include Voiceflow, OpenAI, Make, Supabase, Netlify, Cloudinary, Google, Stripe, customer-relationship or SMS providers, and Google Workspace for certain legacy or operational records. Providers and architecture may change as the Service evolves.

Service providers are permitted to process information only for the services they provide to us, subject to their agreements and applicable law.

6. Sale, sharing, and advertising

We do not sell personal information for money. We do not sell private conversation content, saved memories, photos, health-related information, or contact-form messages.

We do not use private conversation content or saved memories to deliver third-party targeted advertising.

We use analytics and may measure the performance of referral or advertising campaigns. Some state laws use broad definitions of “sale,” “sharing,” or “targeted advertising.” If our practices change in a way that triggers a legal opt-out requirement, we will provide the required notice and control.

7. Sensitive and health-related information

Conversation content may include information that some laws classify as sensitive, including health details, family information, precise personal concerns, or information about other people. We use such information to provide the feature requested, personalize the Service, protect safety and security, and comply with law. We do not use it for third-party targeted advertising.

TrustyTommy is a consumer AI service, not a health-care provider or health plan. Information you submit is not automatically protected by HIPAA. Other privacy and breach-notification laws may still apply.

Do not submit medical records, insurance identifiers, full prescription records, government identifiers, or similarly sensitive documents unless truly necessary for the specific assistance you request.

8. Caregiver and family sharing

The current Service does not automatically send a caregiver the user’s private chat history.

If a user asks us to send or share information with another person, we may do so at the user’s direction. The user is responsible for confirming the recipient and understanding what will be shared.

Before any future Family Care Connection sharing or caregiver-dashboard feature launches, we will describe:

• who can see the information;
• what categories are shared;
• how authorization is granted or withdrawn;
• whether alerts are automated;
• how errors and emergencies are handled; and
• what controls are available to the older adult and caregiver.

9. Cookies, browser storage, and analytics

We use cookies and browser storage to recognize a returning browser, preserve identity and onboarding state, maintain user preferences, support security, and measure Service use.

The browser identifier cookie may remain for up to 365 days and may be renewed when you return. Browser storage may remain until you clear it or the browser removes it.

Google Analytics or similar services may use cookies or device information to provide aggregated usage reporting. See our Cookie Notice for more detail.

Clearing site data can cause Tommy to stop recognizing you on that browser. It does not necessarily delete records stored in our systems. To request deletion from our systems, use the process in Section 12.

10. Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy, including providing continuity and saved memories; maintaining an active subscription; processing requested communications; preventing fraud; resolving disputes; meeting legal, tax, accounting, and security obligations; and maintaining backups.

Retention depends on the category and context:

• browser identifiers may remain for up to 365 days unless cleared or renewed;
• conversation-derived personalization and saved memories may remain while the Service is active and for a reasonable period afterward unless deletion is requested or a longer period is required;
• photos and files may remain with storage and AI providers long enough to process the request, support the feature, investigate errors or abuse, and follow applicable backup cycles;
• contact and support messages remain as needed to respond and maintain business records;
• payment and transaction records remain as required for tax, accounting, fraud, chargeback, and legal obligations;
• SMS consent and opt-out records may be retained to document and honor communication choices; and
• security logs and backups may remain for a limited additional period after primary records are deleted.

When information is no longer needed, we delete it, de-identify it, or securely isolate it until deletion is practical. We may retain information necessary to demonstrate compliance, honor an opt-out, prevent fraud, or resolve legal claims.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No online system is perfectly secure. We cannot guarantee that information will never be lost, misused, altered, or accessed without authorization.

Use a secured device, keep personalized return links private, and do not submit unnecessary secrets or financial credentials.

12. Your privacy choices and rights

Depending on where you live and whether a particular law applies, you may have the right to:

• know or access the personal information we maintain about you;
• correct inaccurate information;
• delete information;
• receive a portable copy of certain information;
• opt out of certain sales, sharing, targeted advertising, or profiling;
• limit or withdraw consent for certain sensitive information;
• appeal a denied privacy request; and
• receive equal service without unlawful discrimination for exercising a privacy right.

Even where a particular state law does not apply to us because of a legal threshold or exemption, we will make a reasonable effort to honor verified access, correction, and deletion requests.

To submit a request, email tommy@trustytommy.com with the subject line Privacy Request, or write to the mailing address below. Describe the request and provide enough information to locate your record. If possible, include the TrustyTommy return link or user identifier associated with your browser, but do not send passwords, government identification, or full payment-card numbers.

We may need to verify your identity. Authorized agents may submit a request where permitted by law, but we may require proof of authorization and direct identity confirmation.

We may deny or limit a request where permitted by law, including when we cannot verify identity, the request would expose another person’s information, or retention is required for security, fraud prevention, legal compliance, or claims. If applicable law gives you an appeal right, reply with “Privacy Appeal” and explain why you believe the decision should be reconsidered.

13. Text-message choices

You may opt out of promotional or automated text messages as described in the SMS Terms and in the messages you receive. We retain a suppression record so we can honor the opt-out.

14. Children

The Service is for adults age 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

15. U.S. processing

TrustyTommy is based in the United States. We and our providers may process information in the United States and other countries where privacy protections may differ from those in your location.

The Service is currently directed to U.S. users. We do not intentionally market the consumer Service to residents of the European Economic Area, United Kingdom, or Switzerland.

16. Changes to this Policy

We may update this Policy as the Service, providers, and law change. We will post the updated Policy and revise the “Last updated” date. We will provide additional notice where required for material changes.

17. Contact

Instasleb LLC d/b/a TrustyTommy
2360 Route 33, Suite 112, Unit #508
Robbinsville, New Jersey 08691
Email: tommy@trustytommy.com