Privacy Policy
Last updated: September 22, 2025
🔐 Your Privacy Matters
At Trybl, we are committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your personal information.
1. Information We Collect
Account Information
When you create a Trybl account, we collect:
- Your college email address (.edu)
- Name and profile information you provide
- Academic information (major, graduation year, courses)
- Profile photo (optional)
Google Calendar Data
If you choose to connect your Google Calendar, we access:
- Calendar Events (Read Access): We read your calendar events to find free time slots and check availability for group meetings
- Event Creation/Updates: We create or modify calendar events only with your explicit approval
Google OAuth Scopes We Request
We request only the minimum necessary Google Calendar permissions:
calendar.readonly
calendar.events
We do NOT access your Gmail, Google Drive, or any other Google services.
Usage Information
We automatically collect certain information when you use Tribly:
- Device information (device type, operating system, app version)
- Log data (access times, features used, crash reports)
- Interaction data (groups joined, events attended, connections made)
2. How We Use Your Information
We use the information we collect to:
- Provide Core Services: Enable study group formation, event scheduling, and campus connections
- Calendar Synchronization: Find mutual availability and schedule group meetings
- Improve User Experience: Personalize content, suggest relevant groups and events
- Communication: Send notifications about your groups, events, and important updates
- Safety & Security: Detect and prevent fraud, abuse, and security incidents
- Legal Compliance: Comply with applicable laws and regulations
3. Information Sharing & Disclosure
We do NOT sell your personal information to third parties.
We share information only in these circumstances:
- With Other Users: Profile information visible to other students at your college (based on your privacy settings)
- Service Providers: Trusted partners who help us operate Trybl (under strict confidentiality agreements)
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In connection with a merger or acquisition (with continued privacy protection)
4. Data Retention & Deletion
Data Type |
Retention Period |
Deletion Process |
Account Data |
While account is active |
Deleted within 30 days of account deletion request |
Calendar Cache |
7 days |
Automatically purged after 7 days |
Messages |
90 days after deletion by user |
Permanently deleted after retention period |
Usage Analytics |
2 years |
Anonymized after 90 days, deleted after 2 years |
5. Your Rights & Controls
You Have Complete Control Over Your Data
- Access Your Data: Request a copy of all information we have about you
- Correct Information: Update or correct any inaccurate information
- Delete Your Account: Request complete deletion of your account and data
- Revoke Google Access: Disconnect Google Calendar at any time via Google Account → Security → Third-party access
- Data Portability: Export your data in a machine-readable format
- Opt-Out: Unsubscribe from non-essential communications
How to Exercise Your Rights
- In-App: Use the Settings → Privacy section in the Trybl app
- Email: Send requests to triblyfindyours@gmail.com
- Response Time: We respond to all requests within 30 days
6. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
- Access Controls: Strict access controls and authentication for our systems
- Regular Audits: Security audits and vulnerability assessments
- Secure Infrastructure: Cloud infrastructure with enterprise-grade security
- Incident Response: Dedicated team for security incident response
Note: While we use industry-standard practices, no method of electronic storage is 100% secure. We cannot guarantee absolute security.
7. International Data Transfers
Trybl operates in the United States. If you use Trybl from outside the US, your information will be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers.
8. Children's Privacy
Trybl is designed for college students (typically 18+). We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will promptly delete it.
9. Compliance & Legal Frameworks
Trybl complies with applicable privacy laws and regulations:
- GDPR: For users in the European Economic Area
- CCPA: For California residents
- FERPA: For education records where applicable
10. Third-Party Services
We use the following third-party services to operate Trybl:
- Google Calendar API: For calendar synchronization (governed by Google's privacy policy)
- Cloud Infrastructure: AWS/Google Cloud for hosting and data storage
- Analytics: Anonymous usage analytics to improve the app
- Push Notifications: Apple Push Notification Service for iOS
11. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via:
- In-app notifications
- Email to your registered address
- Update notice on our website
Continued use of Trybl after changes indicates acceptance of the updated policy.
12. Data Deletion Requests
How to Delete Your Data
You can request complete deletion of your Trybl account and all associated data:
- In-App: Settings → Account → Delete Account
- Email: Send request to triblyfindyours@gmail.com
Timeline: We process deletion requests within 30 days. Some information may be retained for legal compliance.
13. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to opt-out of the sale of personal information (Note: We do NOT sell personal information)
- Right to non-discrimination for exercising privacy rights
14. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have additional rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent