Privacy Policy

Learn how True Media collects, uses, and protects your information when providing blockchain-based content verification services.

Last Updated: August 18, 2025Effective Date: August 18, 2025

What This App Does (The Reality)

True Media provides blockchain-based content verification services. You capture photos/videos through our app, we generate cryptographic hashes of your content, and submit those hashes to the Polygon blockchain for immutable verification records.

Information We Collect

Content Data

• Cryptographic hashes of your photos and videos (SHA-256)
• Metadata hashes (privacy-preserving) including capture timestamp, device info, and location (if enabled)
• Device attestation tokens (iOS App Attest / Android SafetyNet)
• Blockchain transaction records (public on Polygon network)

Account Information

• Email address (for account creation and verification certificates)
• Payment information (processed by Stripe - we don't store card details)
• Device identifiers for security and fraud prevention

Technical Data

• App usage analytics and crash reports
• Device type, OS version, app version
• IP address (for security and rate limiting)
• Server logs for debugging and security monitoring

Location Data (Optional)

• GPS coordinates when capturing content (only if you explicitly enable location services)
• Location data is hashed for privacy before blockchain submission
• You can disable location capture in app settings

What We DON'T Collect

• Your actual photos/videos - only cryptographic hashes
• Biometric data - no facial recognition or fingerprint data
• Personal conversations - no access to messages, calls, or other apps

• Browsing history - no web tracking
• Social media activity - no integration with social platforms

How We Use Your Information

Primary Services

• Verification Processing: Generate hashes and submit to blockchain
• Certificate Generation: Create tamper-proof verification certificates
• Account Management: Maintain your account and verification history

Security & Fraud Prevention

• Rate Limiting: Prevent abuse and spam submissions
• Device Attestation: Verify submissions come from legitimate app installations
• Anti-Tampering: Detect rooted/jailbroken devices (with graceful degradation)

Communications

• Service Updates: Critical security or service announcements
• Transaction Confirmations: Payment and verification status updates
• Support: Respond to help requests and technical issues

Information Sharing

Public Blockchain Records

Content hashes and metadata hashes are permanently stored on the public Polygon blockchain.Anyone can view these records, but they cannot reverse-engineer your original content from the hashes.

Service Providers

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google Cloud Platform: Secure server infrastructure and databases
• Polygon Network: Blockchain verification records (public)

Legal Requirements

We may disclose information if required by law, court order, or to protect our legal rights. This includes cooperation with law enforcement when legally compelled.

We DO NOT Sell or Share For Marketing

• No data sales to advertisers, data brokers, or marketing companies
• No cross-app tracking or advertising partnerships
• No social media integration or sharing without your explicit action

Data Security

Technical Safeguards

• End-to-end encryption for data transmission
• Hardware Security Modules (HSM) for server-side key storage
• Certificate pinning to prevent man-in-the-middle attacks
• Encrypted databases with access logging and monitoring

Access Controls

• Principle of least privilege - employees only access necessary data
• Multi-factor authentication required for all system access
• Regular security audits and penetration testing
• Incident response plan for security breaches

Data Retention

• Verification records: Permanent (blockchain is immutable)
• Account data: Retained while account is active + 1 year after deletion
• Payment data: Managed by Stripe according to their retention policies
• Server logs: 30 days for debugging, 1 year for security monitoring

Your Privacy Rights

Account Control

• Access: View all your verification records and account data
• Correction: Update incorrect account information
• Deletion: Delete your account and associated data (blockchain records remain permanent)

Communication Preferences

• Opt-out: Unsubscribe from non-essential communications
• Support contact: Email us for privacy questions or concerns

Location Settings

• Disable location: Turn off GPS capture in app settings
• Historical location: Cannot be removed from existing blockchain records

Data Portability

• Export: Download your verification certificates and transaction history
• Format: Provided in standard JSON format

US Operations

Service Availability

True Media services are currently available only to users located in the United States. All data is processed and stored within US-based servers and infrastructure.

Privacy Compliance

• Federal Privacy Laws: We comply with applicable US federal privacy regulations
• State Privacy Laws: We comply with applicable state privacy requirements including California privacy laws
• Industry Standards: We follow industry best practices for data protection and privacy

Children's Privacy

True Media can be used by users of all ages. When users under 18 create accounts, we encourage parental guidance and supervision. We collect and process the same information for all users as described in this privacy policy, with the same security measures and privacy protections regardless of age.

Parents or guardians who have concerns about their child's account or data can contact us at contact@stemcreations.net for assistance with account management or deletion requests.

Changes to This Policy

We will notify users of material privacy policy changes via:

• Email notification to your account email
• In-app notification when you next open the app
• Website posting with effective date of changes

Continued use of the app after notification constitutes acceptance of the updated policy.

The Bottom Line

What we're really doing: Taking photos/videos you capture, generating secure hashes, and putting those hashes on a public blockchain to prove when and where the content was created.

What we're NOT doing: Storing your actual content, selling your data, tracking you across apps, or providing magical authenticity detection.

Your main privacy trade-off: Content hashes and metadata hashes become permanently public on the blockchain in exchange for immutable verification records.

Contact Information

Email Contacts

• Privacy Questions: contact@stemcreations.net
• General Support: contact@stemcreations.net
• Security Issues: contact@stemcreations.net

Mailing Address

Stem Creations LLC
St. George, Utah, 84790

Response Time: We respond to privacy inquiries within 5 business days.

Legal Notice: This privacy policy is governed by the laws of the state of Utah. Any disputes will be resolved in the courts of Utah.