Privacy Policy
Last updated · 12 July 2026
1. Who we are
Trshy (trshy.app) is a small anonymous feed for saying a word safely, operated by Craftsmanship Co. This page explains what we collect, why, and what we do and don't do with it. Questions any time: hello@trshy.app.
2. What we collect
An account: your email address and sign-in method (Google, or email and password), handled by our sign-in provider. A profile: the username you choose. Your posts: typed notes and hand-drawn drawings. A coarse area context so the feed can show what's around you. Never your exact GPS position, and never a history of your movements. Basic technical records (timestamps, error logs) that do not contain your words. We collect no contact lists, no advertising identifiers, and we run no third-party ad trackers.
3. How your words are stored
Every post is encrypted before it is stored. Each one is sealed with its own key, with master keys kept in a separate key-management system. Plain text never sits on our servers, in our backups, or in our logs. Trshy is not end-to-end encrypted: posts are meant to be read on the public feed, and our systems briefly handle a post in memory (for example, for safety screening) before it is sealed.
4. Anonymous, and the honest limits
Other people never see your name. There are no profiles and no followers; the feed shows the word, not the person. Internally, we do keep one sealed, encrypted record linking each published post to the account that posted it. It is stored separately from the content, under separate keys, and is used only for moderation, safety, and lawful requests. In short: you are anonymous to the public, but not beyond the reach of safety and the law.
5. How long things stay
Posts slip out of the feed within about a day, but leaving the feed is not deletion: posts remain stored in encrypted form. Account and profile data stay for as long as your account exists.
6. Deleting your account
You can delete your account inside the app (Profile → Delete Account). This permanently removes your sign-in identity and profile. Posts you already published remain stored in sealed, encrypted form and are no longer tied to an active account.
7. Who else touches your data
We use a small set of service providers to run Trshy: an authentication and database provider, and a cloud platform for hosting and key management. They process data for us under contract. We do not sell your data, show ads, or share anything with data brokers. We may disclose information if a valid legal order requires it.
8. Moderation
Posts may be screened automatically before they are published. If a post is rejected, its content is discarded. Rejected posts are never stored.
9. Your rights
You can ask us to access, correct, or delete the personal data we hold about you, and you can complain to your local data-protection authority. Write to hello@trshy.app and we will respond as required by applicable law (including Thailand's PDPA and, where it applies, the GDPR).
10. Children
Trshy is not directed at children under 13, and we do not knowingly collect their data. If you believe a child is using Trshy, tell us and we will act.
11. Changes to this policy
When this policy changes, we will update this page and the date at the top. Meaningful changes will be announced in the app.
12. Contact
hello@trshy.app. We read everything.