1. Introduction
This Privacy Policy explains how TrueConsent by Silky Apple Technologies handles your data. TrueConsent provides cryptographically verifiable digital agreements, authorizations, and consent records.
2. Data Collection and Usage
Account Authentication: We support secure sign-in via Google Sign-In and Sign in with Apple. We collect your authentication identifier, verified email, and profile name to issue and verify agreements. When signing in with Apple, we receive your Apple user ID and name (if shared) or private relay email. Deleting your account revokes your Apple authorization token.
Acceptance Details & Identity Attributes: When creating an agreement, the creator may require the recipient to provide specific verification details upon acceptance—such as a phone number, date of birth, government identification number, or custom reference ID. These values are self-reported by the signer, encrypted in transit and at rest, and incorporated into the agreement's tamper-evident cryptographic proof hash.
Audit & Verification Data: To generate legally robust verification records and QR proofs, agreements record timestamped audit metadata including IP address, timezone, signing method, and an anonymized SHA-256 hashed device fingerprint.
Location Proofs: If you explicitly opt in to attach location verification when signing, the app captures your device's GPS coordinates (coarse or fine) at the moment of consent.
Contacts & Attachments: With your permission, the app accesses device contacts locally so you can select recipient names and email addresses. You may also select photos or documents to attach to consent requests.
Biometrics: Device biometric authentication (Touch ID, Face ID, or fingerprint) is evaluated strictly on-device through native operating system APIs and is never accessed, transmitted, or stored by our servers.
3. Where Data Is Stored
Digital consent records, cryptographic signatures, encrypted acceptance snapshots, and audit logs are securely stored on our Cloudflare backend infrastructure (including D1 encrypted databases, KV cache, and R2 object storage). You may also optionally connect your Google Drive to store personal copies of generated Proof PDFs.
4. Third-Party Services and Notifications
TrueConsent integrates with Google Sign-In, Sign in with Apple, Cloudflare API infrastructure, Cloudflare Workers AI (for optional plain-English consent summaries and clause generation, cached for up to 30 days), and Firebase Cloud Messaging (FCM) for instant consent notifications, status updates, and reminders. We do not use third-party advertising or cross-app behavioral tracking networks.
5. Account Deletion and Legal Record Retention
You can delete your account at any time within the app settings. Account deletion purges your personal profile, push tokens, and private profile backups. Inactive drafts older than 30 days are automatically removed. However, to preserve the integrity of records already completed with third parties, tamper-evident consent records, hashes, signatures, and audit trails of completed agreements are permanently retained for the benefit of all participating parties.
6. Limitation of Liability
To the maximum extent permitted by applicable law, our maximum liability arising out of or in connection with your use of the application, regardless of the cause of action, will not exceed the amount you paid for the service.
Contact Us
If you have any questions about these terms, please contact us at contact@silkyapple.com.