We collect as little about you as we can.

1Who is responsible for your information (Privacy Officer)

Avover System Inc. is the organization accountable for the personal information under its control. We have designated a Privacy Officer who is responsible for our compliance with this policy and with applicable privacy law.

• Privacy Officer: Emmanuel Ogunlolu
• Email: privacy@jointrio.app
• Mail: Avover System Inc., Attn: Privacy Officer, 525 Nicola Street, Kamloops, BC V2C 6J5, Canada

You can contact the Privacy Officer at any time with a question, an access or correction request, a deletion request, or a complaint (see Sections 11 to 13).

2A note on our design (why we collect so little)

Trio is deliberately built to collect the minimum information needed to introduce you to a small group and let that group meet safely:

• We match people only into groups of three or more, never one-to-one. This is a core anti-harassment design choice, not just a feature.
• We ask for your birth date only to confirm you are 18+. Your age is checked on your device and we store only a yes/no “18-or-older” flag. Your date of birth is never transmitted to us or stored on our systems (see Section 9).
• We use only a coarse, one-time sense of your general area. We do not track your location (see Section 3).
• Only people who choose to become activity creators go through identity verification, and that verification is performed by a third party. Trio never receives or stores your government ID, your selfie, or any biometric data (see Section 4).
• We do not sell your personal information and do not share it for cross-context behavioural advertising (see Section 8).

3Information we collect and why

We collect the following categories of personal information. For each, we describe the source and the specific purpose.

3.1 Account and contact information

We support Sign in with Apple, Sign in with Google, and email one-time passcodes. When you use Apple or Google to sign in, that provider tells us a limited set of information (such as your email or a private relay email) so we can create your account. We do not receive your Apple or Google password.

3.2 Profile information (what other members can see)

3.3 Coarse, one-time location: not precise or continuous

When you set your area, Trio takes a single, one-time reading of your device location and uses it only to find the nearest of our pre-defined areas (for example, a city or region). We then store only that area, not your coordinates.

3.4 Content you create in the app

Group chat messages and group photos are visible to the other members of your group. Please only share what you are comfortable sharing with those members.

3.5 Trust and safety information

Our safety tools are discretionary and best-effort. They help, but they are not a guarantee of anyone’s safety or conduct. Please also read the safety and assumption-of-risk terms in our Terms of Service.

3.6 Creator identity verification (creators only): see Section 4

Only members who choose to create activities complete identity verification, and this is handled by our verification provider, Didit. The most important point: Trio stores only a yes/no “verified” status, never your ID, selfie, or biometric data. Section 4 explains this in full.

3.7 Device and technical information

When you use Trio, we and our infrastructure providers automatically process limited technical information, such as your IP address, device type and operating-system version, app version, and basic diagnostic/error logs, to operate the Service, keep it secure, prevent abuse, and fix bugs. The app also sends crash reports and error diagnostics to Sentry, our error-monitoring provider: the device model, operating-system and app version, and what the app was doing when it failed. These reports are not linked to your name, email, or account. We do not use this information to track you across other companies’ apps or websites, and we do not share it with data brokers or advertising networks.

4Creator identity verification and biometric information (creators only)

This section is important, so we want to be precise about who collects what.

Only members who choose to become activity creators are asked to verify their identity. Regular members who only join activities are not asked to verify.

To verify a creator’s identity, we use a specialized third-party identity-verification provider, Didit. When you choose to verify, Didit’s own hosted flow captures and processes your government-issued ID, a selfie, and a liveness check (a “biometric” process that confirms a live person matching the ID). Didit, not Trio, collects, processes, and stores that ID image, selfie, and biometric data, as an independent processor under its own privacy policy and retention schedule. You can read Didit’s privacy policy here: Didit Privacy Policy.

We use the verified/not-verified status only to (a) let verified creators create activities and (b) display a scoped “Verified Creator” indicator. That indicator means only that the creator’s identity and age were confirmed by our third-party provider. It is not a background check, a criminal-history check, or any statement that the person is “safe” (see our Terms of Service).

Consent. Before any identity verification begins, we present you with a separate notice and ask for your explicit consent to proceed. You are free to decline. You simply won’t be able to create activities. Didit also presents its own notice and consent before it collects anything.

Retention of the ID and biometric data. Because Didit, not Trio, holds the ID and biometric data, Didit’s retention and destruction schedule governs it. We store only the verified/not-verified flag, for as long as your account exists (subject to Section 6). For details on how long Didit retains the underlying documents and biometrics, see Didit’s privacy policy linked above.

5How we use your information

We use personal information to:

• create, secure, and operate your account and the Service;
• confirm you are a real, unique person aged 18+ (phone verification and, for creators, identity verification);
• match you into groups of three or more and deliver group chat and group-plan coordination;
• show the limited profile information (first name, optional photo, bio, interests) that lets members recognize and get along with each other;
• provide and enforce our trust-and-safety tools (blocking, muting, reporting, no-show handling) and review reported conduct;
• send you transactional messages you’ve asked for or that are needed to run the Service (for example, an SMS verification code, or a reminder about a meetup you agreed to);
• maintain, debug, secure, and improve the Service and prevent fraud and abuse;
• comply with our legal obligations and enforce our Terms of Service.

We rely on your consent (which you can withdraw) and on the necessity of processing to provide the Service you asked for and to meet our legal obligations. Where we would ever use your information for a materially new purpose, we will ask first.

6How long we keep information, and how deletion works

We keep personal information only as long as needed for the purposes above, or as required by law.

• Group photos remain available to the members of your group until you delete them or delete your account.
• Account deletion is a soft, reversible process with a grace period. When you ask to delete your account, we schedule it for permanent deletion after a 14-day grace period, during which you can cancel by signing back in. After the grace period, your account and associated personal information are permanently and irreversibly purged by an automated process.
• Some limited records may be retained for a short additional period where necessary to comply with law, resolve disputes, or enforce our agreements (for example, records of a safety report). We keep the minimum needed and delete it when the purpose is met.

7Where your information is stored and processed (cross-border transfer)

Avover System Inc. is based in Canada, but we use reputable service providers located in the United States to run Trio. This means your personal information is stored and processed in the United States and may be accessible to those providers there. In particular:

When information is transferred to and stored in another country, it is subject to the laws of that country and may be accessible to that country’s courts, law-enforcement, and regulatory authorities. We use contractual and security safeguards (including data-processing agreements with our providers) intended to give your information a comparable level of protection to what it would receive in Canada. If you have questions about our cross-border handling of your information, contact our Privacy Officer (Section 1).

8We do not sell your personal information

We share personal information only:

• with our service providers (Section 7), who process it only on our instructions to provide the Service and are bound by contract to protect it and not use it for their own purposes;
• with the members of your group, in the limited ways described in Section 3 (your first name, optional photo, bio/interests, chat messages, and group photos);
• when required by law, valid legal process, or to protect the rights, safety, and security of our users, the public, or Avover; and
• in connection with a business transaction (such as a merger, acquisition, or financing), in which case we will require the recipient to honour this policy and will notify you of any change of control affecting your information.

9Age requirement: Trio is 18+

Trio is intended only for people aged 18 and older. You must confirm you are at least 18 to use Trio.

We do not knowingly collect personal information from anyone under 18.

If we learn that someone under 18 has created an account, we will delete it. If you believe a minor is using Trio, please contact our Privacy Officer (Section 1).

10How we protect your information

We take reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls on our systems, and restricting group photos to a private store served only through short-lived, expiring links. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

Breach notification. If a security breach involving your personal information creates a real risk of significant harm to you, we will notify you and the appropriate regulator(s) as required by law, and we maintain records of security incidents as the law requires.

11Your privacy rights

Depending on where you live (including under Canada’s PIPEDA, British Columbia’s PIPA, and Quebec’s Law 25), you have rights over your personal information, which may include the right to:

• access the personal information we hold about you and know how it has been used and disclosed;
• correct inaccurate or incomplete information;
• withdraw consent or ask us to delete your account and information (subject to Section 6 and any legal retention requirement);
• request a portable copy of certain information you provided; and
• complain to us or to a regulator (Section 13).

You can correct your information and delete your account directly in the app (edit your profile, block/mute, delete your account). To access the information we hold about you, to request a portable copy of it, or to make any other privacy request, contact our Privacy Officer (Section 1). We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights. To protect your account, we may need to verify your identity before acting on a request.

12Changes to this policy

We may update this Privacy Policy from time to time. When we make a material change, we will update the “Last updated” date above and take reasonable steps to notify you, for example, in the app or by email. The current version is always published at jointrio.app/privacy.

13How to reach us and how to complain

If you have a question, request, or concern about your privacy, please contact our Privacy Officer first. We take complaints seriously and will work with you to resolve them.