TRIWAZ

PRIVACY POLICY

Last Updated: July 22, 2026

TRIWAZ ("TRIWAZ," "we," "us," or "our") provides an artificial intelligence debate and analysis service through the TRIWAZ website, Android application, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data, and the choices and rights that may be available to you.

This Privacy Policy applies to personal data that TRIWAZ collects or controls through the Service. Third-party services process data under their own applicable terms, privacy policies, and service settings.

1. WHO CONTROLS YOUR DATA

TRIWAZ is operated from Taipei, Taiwan (R.O.C.). TRIWAZ acts as the controller of personal data when it determines the purposes and means of processing. Our contact details appear in Section 14.

2. PERSONAL DATA WE COLLECT

We may collect the following categories of personal data:

Account and authentication information. Depending on how you sign in, this may include your email address, authentication-provider identifier, account identifier, and profile information made available through the selected sign-in method. Authentication credentials are handled through our authentication provider and are not stored by TRIWAZ as readable passwords.

Guest accounts. Guest login creates a temporary anonymous account identifier without requiring a name or email address. Guest accounts, associated debate records, and remaining TRI are automatically and permanently deleted approximately 30 days after creation unless the account is linked to a permanent sign-in method before deletion.

Inputs and Outputs.We collect debate topics, selected settings, arguments, positions, instructions, voice transcripts, and other content you submit ("Inputs"), together with model responses, debate content, conclusions, and related generated material ("Outputs").

Please do not include personal, confidential, legally protected, or sensitive information in Inputs unless it is necessary and you are authorized to provide it.

Voice input. If you use voice input, recorded audio is transmitted to a transcription provider to convert it into text. TRIWAZ does not retain the audio after transcription is completed. The resulting text is processed as an Input under this Policy.

Debate history and technical representations. We may retain Inputs, Outputs, selected settings, conclusions, continuation relationships, and technical representations used to provide history, retrieval, caching, similarity matching, service continuity, performance optimization, security, and fraud prevention.

Payment and subscription information. We do not directly store complete payment-card details. We may receive and retain transaction status, product information, order or transaction identifiers, subscription status, amount, currency, protected purchase-verification information, refund and reversal information, and related records needed to credit TRI, manage subscriptions, prevent duplicate credits, reconcile transactions, handle support requests, prevent fraud, and comply with law.

Rewarded-ad information. The Android application offers optional Google AdMob rewarded advertisements. We may process or receive an internal account reference, transaction identifier, reward information, consent status, device or advertising identifiers, publisher identifiers, diagnostic information, and verification data to attribute TRI, prevent duplicate credits, enforce usage limits, maintain records, and investigate abuse.

Communications. If you contact us, we may collect your contact details and the contents of your correspondence.

Usage and technical information. We and our providers may automatically receive IP address, browser or device type, operating system, language, app version, timestamps, referring or exit information, interaction data, crash reports, diagnostic data, security signals, and similar technical information.

Cookies and similar technologies. The website may use cookies or similar technologies for authentication, session management, preferences, security, analytics, and Service operation. Disabling necessary technologies may affect the Service.

Bot and abuse prevention. Certain authentication or security flows may use Cloudflare Turnstile. Cloudflare may process browser, device, network, and interaction signals under its own applicable terms and privacy practices.

3. HOW WE USE PERSONAL DATA

We may use personal data to:

  • Provide, operate, maintain, personalize, and support the Service.
  • Authenticate accounts and maintain account state across the website and Android application.
  • Route Inputs, obtain model and search results, generate Outputs, and provide debate history and continuation features.
  • Manage TRI balances, discounts, rewards, purchases, subscriptions, refunds, reversals, and related records.
  • Use caching, retrieval, similarity matching, and other automated optimization techniques to improve speed, reliability, consistency, availability, and resource efficiency.
  • Analyze aggregated, statistical, or appropriately de-identified Service usage and performance.
  • Detect, prevent, investigate, and respond to fraud, duplicate rewards, abuse, unauthorized access, security incidents, and policy violations.
  • Communicate with you about account, security, support, billing, legal, or Service matters.
  • Comply with applicable law, legal process, tax, accounting, audit, regulatory, and platform requirements.
  • Establish, exercise, or defend legal claims and protect TRIWAZ, users, providers, and the public.

TRIWAZ does not use your Inputs or Outputs to train its own foundation models unless we separately disclose that practice and obtain any consent required by applicable law. Third-party providers' retention, model-improvement, training, and other data-use practices are governed by their own applicable terms, privacy policies, and service settings.

4. AI MODELS, SEARCH, AND THIRD-PARTY PROCESSING

The primary models currently listed for each tier are:

  • SCAN — GPT-5 nano · Gemini 2.5 Flash-Lite · NVIDIA Nemotron-3 Super 120B-A12B
  • SYNC — GPT-5.4 nano · Gemini 2.5 Flash · NVIDIA Nemotron-3 Super 120B-A12B
  • TRIWAZ — GPT-5.6 Luna · Gemini 2.5 Pro · NVIDIA Nemotron-3 Ultra 550B-A55B

Model and related technology developers may include OpenAI, Google, NVIDIA, Meta. AI and model-hosting providers currently used by TRIWAZ may include OpenAI, Google, DeepInfra, Groq. This disclosure does not mean that a specific model is permanently tied to a specific provider.

TRIWAZ may use additional models or technologies for framing, transcription, fallback, reliability, safety, testing, and service continuity. Model developers, providers, routing, and technical configurations may change over time.

To improve the freshness and relevance of certain analyses, TRIWAZ may use Serper's web-search capabilities to retrieve publicly available, current information related to a submitted topic. A topic or related search query may be processed by Serper under its own applicable terms and privacy practices.

Third-party providers process data under their own applicable terms, privacy policies, data-use practices, and service configurations, which may change independently of TRIWAZ. TRIWAZ does not control or make guarantees on behalf of independent third parties and, to the maximum extent permitted by applicable law, is not responsible for their independent privacy practices, outages, policies, or conduct.

5. PAYMENTS, SUBSCRIPTIONS, AND ADVERTISING

Website purchases are processed through Creem. Purchases and subscriptions in the Android application are processed through Google Play Billing. Those providers may process payment, identity, device, transaction, tax, refund, dispute, and compliance information under their own applicable terms and privacy policies.

Third-party advertisements are displayed only in the Android application, not on the TRIWAZ website. Rewarded advertisements are optional and require an affirmative user action.

Google and its advertising partners may process device information, IP address, advertising or publisher identifiers, app interactions, consent signals, diagnostic information, and related data for ad delivery, personalization where permitted, measurement, security, fraud prevention, frequency management, and other purposes described in their policies and service settings.

Where required, the Android application uses Google's privacy messaging and consent tools before ads are requested. A Privacy and cookie settings entry is available in the application where required so that applicable advertising and consent choices can be reviewed or updated. Device-level advertising controls may also be available through Android settings.

6. HOW WE DISCLOSE PERSONAL DATA

We may disclose personal data:

  • To AI, model-hosting, transcription, search, hosting, database, authentication, security, rate-limiting, analytics, payment, billing, advertising, customer-support, and infrastructure providers used to operate the Service.
  • To Supabase for authentication, database, and related backend services.
  • To Creem, Google Play, Google AdMob, and related payment or advertising participants as needed to process transactions, subscriptions, rewards, consent choices, refunds, reversals, disputes, and compliance requirements.
  • To Cloudflare for bot detection, security, and abuse prevention.
  • When required by applicable law, legal process, court order, government request, or platform obligation.
  • When reasonably necessary to protect TRIWAZ, users, providers, or the public; investigate abuse; enforce agreements; or address security, fraud, and legal claims.
  • In connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law.
  • With your direction, authorization, or consent.

TRIWAZ does not sell personal data for monetary consideration. Certain advertising-related disclosures may nevertheless be treated as "sharing," targeted advertising, or a similar regulated activity under some privacy laws.

7. LEGAL BASES FOR PROCESSING

Depending on the context and applicable law, we process personal data because it is necessary to perform our contract with you; pursue legitimate interests such as providing, securing, improving, and protecting the Service; comply with legal obligations; protect vital or legal interests; or because you have provided consent. Where processing is based on consent, you may withdraw consent, subject to applicable law and the continued availability of features that require the processing.

8. RETENTION

We retain personal data for as long as reasonably necessary for the purposes described in this Policy, including Service delivery, account history, security, fraud prevention, billing, legal compliance, dispute handling, accounting, enforcement, and protection of rights.

  • Permanent-account data may be retained while the account remains active and for a reasonable period afterward where necessary or permitted by law.
  • Guest accounts, associated debate records, and remaining TRI are automatically deleted approximately 30 days after creation unless linked to a permanent account.
  • Inputs, Outputs, conclusions, and related technical representations may be retained for history, continuation features, caching, retrieval, security, and Service optimization until deleted or no longer reasonably needed.
  • Voice audio is not retained by TRIWAZ after transcription is completed.
  • Payment, subscription, transaction, refund, reversal, tax, audit, fraud-prevention, and reconciliation records may be retained after account deletion where required or reasonably necessary. Where appropriate, records may be detached from the deleted account.
  • Usage, security, and diagnostic logs may be retained for a reasonable period and then deleted, aggregated, or de-identified where appropriate.
  • Third-party providers determine their own retention under their applicable terms, policies, and service configurations.

In determining retention periods, we may consider the purpose of processing, the nature and sensitivity of the data, security and fraud risks, legal or platform obligations, dispute and enforcement needs, and whether the data can be aggregated or de-identified.

9. INTERNATIONAL PROCESSING

TRIWAZ operates from Taiwan and uses providers that may process personal data in Taiwan, the United States, Europe, Asia, and other jurisdictions. Privacy and data-protection laws may differ from those in your location. Where required by applicable law, TRIWAZ or the relevant provider will rely on an appropriate legal basis or transfer mechanism.

10. SECURITY

We use reasonable technical and organizational measures designed to protect personal data, which may include encryption in transit, access controls, authentication safeguards, restricted service credentials, logging, monitoring, and separation of sensitive payment-verification data.

No system, storage method, or internet transmission is completely secure. We cannot guarantee absolute security, and you are responsible for protecting your account, device, and authentication methods.

11. YOUR RIGHTS AND CHOICES

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data; withdraw consent; and lodge a complaint with a competent regulator. These rights are not absolute and may be subject to identity verification, legal exceptions, security considerations, and retention obligations.

  • Account deletion. You may delete your account through account settings on the website and in the Android application. If you cannot access your account, follow the instructions at triwaz.com/delete-account or contact hello@triwaz.com.
  • Account deletion permanently removes the account, remaining TRI, and associated debate history, subject to records retained for payment, tax, security, fraud prevention, legal, regulatory, dispute-resolution, and enforcement purposes.
  • Advertising and consent choices can be reviewed through the Android application's Privacy and cookie settings entry where available, as well as through applicable Android device settings.
  • You may control website cookies through browser settings, although disabling necessary cookies may impair the Service.

California residents may have rights under the CCPA/CPRA, including rights to know, correct, delete, and opt out of certain sharing or targeted advertising. EEA and UK residents may have rights under applicable data-protection law and may lodge a complaint with a supervisory authority. Taiwan residents may have rights under Taiwan's Personal Data Protection Act.

To exercise a privacy right, contact hello@triwaz.com. We may need to verify your identity and may decline, delay, or limit a request where permitted by law.

12. CHILDREN

You must be at least 13 years old, or the minimum age required in your jurisdiction, to use the Service. If you are under 18, you must have permission from a parent or legal guardian.

We do not knowingly collect personal data from children below the applicable minimum age without required authorization. If you believe a child has provided personal data in violation of this section, contact hello@triwaz.com.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes to the Service, providers, technology, data practices, law, security requirements, or business operations. An updated Policy takes effect when posted or on the stated effective date, unless applicable law requires otherwise.

Where required by law or reasonably appropriate, we may provide additional notice through the Service, by email, or by another suitable method. Continued use of the Service after the effective date is subject to the updated Policy. Where law requires consent for a new processing purpose, we will request it separately.

14. CONTACT US

  • Email: hello@triwaz.com
  • Location: Taipei, Taiwan (R.O.C.)