Privacy Policy
Effective date: 20 October 2026. Trophio Limited ("Trophio", "we", "us") makes the Trophio app (the "App") and runs the website at trophio.app (the "Site"). This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what choices you have. Please read it together with our Terms of Service.
1. Who we are
Trophio Limited is a company incorporated in Hong Kong. We are the data user responsible for your personal data under the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").
If you have any question about your data, write to us at support@trophio.app.
2. What we collect
Information you give us
- Account details. Your email address and name. If you sign up with an email and password, we store your password in a form we cannot read. If you sign in with Apple or Google, we receive the email address and name they choose to share with us. We never see your Apple or Google password.
- Your records. The income and expenses you log: amounts, dates, merchants, categories, notes, tags, currencies, and the receipt photos you scan or attach.
- Client and prospect details. Names (or nicknames) you link to expenses, and birthdays if you choose to enter them. Please only enter information about other people that you are entitled to keep.
- Goals and preferences. Your revenue goals, savings goals, language, currency and notification settings.
- Messages to us. Anything you send to our support team.
Information collected automatically
- Subscription details. Your plan, renewal date and purchase identifier. Payments are handled by Apple or Google. We never receive your card number.
- Device and usage information. Device model, operating system, app version, language, IP address, screen views, which features you use, and crash reports. If you allow notifications, we also store your push notification token.
- Trial and abuse prevention. A device identifier that lets us make sure a free trial, if we offer one, is used once per device.
What we do not collect
We do not collect your precise location, your phone contacts, your bank login details, insurance policy numbers, or your clients' medical or underwriting information.
Camera, photos and Face ID
The App uses your camera and photo library only when you choose to scan or attach a receipt. If you turn on the app lock, Face ID or fingerprint checking happens on your device. We never receive your biometric data.
The Site
The Site does not use advertising cookies or third-party ad trackers. Our servers keep ordinary technical logs (such as IP address and browser type) for security and reliability. If you open a link with an invitation code, we use the code to apply the referral.
3. How we use your data
- To run the App: sign you in, sync your records across devices, read your receipts, calculate your figures and create your exports.
- To manage your subscription and referrals.
- To answer your questions and fix problems.
- To keep the service secure and prevent fraud and abuse.
- To understand how the App is used and make it better, using analytics and crash reports.
- To send you service messages about your account, security, billing and important changes. You can turn off push reminders in the App under Settings → Notifications.
We do not sell your personal data. We do not show third-party advertising. We do not use your financial records to train AI models.
4. AI receipt scanning
When you scan a receipt, the image is sent over an encrypted connection to an AI service provider that works for us. It reads the merchant, date, amount and category, and sends the result back to the App for you to review. These providers may only use your receipt to produce that result. We do not allow them to use it to train their models.
AI can make mistakes, especially with faded or handwritten receipts. Always check the result before you save it.