Privacy Policy

Who we are

Tranca ("we", "us") provides the Tranca app and the Tranca hardware tag. For privacy questions and requests, contact us at suporte@tranca.app.

No account required

The app has no sign-up, login, email or password. On first launch it generates a random identifier (a UUID) stored on your device to keep your settings together. This identifier is not linked to your name, email or phone number, and you can reset it at any time by using "Erase all data" in Settings.

Age check and younger users

Tranca is available to all age groups. On first launch, a neutral age screen asks for a date of birth so the app can choose the appropriate privacy mode. The date is checked only on your device and is never stored or transmitted. The app stores only whether the user is under 18 or an adult.

For users under 18, Tranca does not start PostHog analytics or RevenueCat, does not offer in-app purchases, and does not contact our online tag-activation service. The core app-blocking and offline tag-signature checks remain available on the device.

Data stored only on your device

The following stays on your device and is not uploaded to us:

• Your modes, schedules and paired tag identifiers
• Your usage statistics (time locked, sessions, streaks)
• Your app settings

App blocking on iOS and Android

On iOS, Tranca uses Apple’s Screen Time / Family Controls framework. The apps and categories you choose are represented by opaque tokens managed by Apple, so Tranca never receives readable app names or browsing activity. On Android, the Accessibility service reads only the package name of the app currently in the foreground, compares it on the device with your blocked list, and discards it. It cannot retrieve screen content. On both platforms, your blocked-app list stays on your device and is not sent to us, PostHog or RevenueCat.

NFC tags

When you tap your Tranca tag, the app reads the tag’s identifier (and, on genuine tags, a factory authenticity signature) only to lock or unlock. Tapping is processed on your device. Lock and unlock never require an internet connection.

Analytics

For adult users, to understand how the app is used and improve it, we use PostHog, hosted in the European Union (eu.i.posthog.com). Analytics events describe product usage — for example screens viewed, features used, and app lifecycle events — associated with the random device identifier above. They do not include your name, and we do not use them to track you across other apps or websites. PostHog is disabled for users under 18.

On our website, the Meta Pixel measures page views, checkout starts and completed purchases from our Facebook and Instagram ads. It is loaded only after you accept marketing cookies. Meta may receive technical identifiers, the page visited and purchase value/currency. You can change your choice at any time through “Cookie settings”.

Subscriptions and purchases

For adult users, Tranca Premium is an optional in-app purchase sold through Apple’s App Store or Google Play. Payment is processed by Apple or Google — we never receive or store your card details. We use RevenueCat to manage and verify your subscription or purchase status, associated with an app-specific identifier. RevenueCat processes this on our behalf. Purchases and RevenueCat are disabled for users under 18.

Buying the hardware on our website

If you buy a Tranca tag on our website, checkout is handled by Stripe. To fulfil your order we process the contact, shipping and payment details you provide. Card data is handled directly by the payment provider. This information is used to process and deliver your order and to meet our legal obligations.

Tag authenticity

Genuine tags carry a factory signature that the app verifies on your device. For adult users, when you pair a tag while online, the app also sends the tag identifier, its authenticity payload and a one-way hash of the app’s random device identifier to api.tranca.app. We use this to confirm authenticity and detect cloned tags. This online request is disabled for users under 18. Pairing can continue after the offline signature check, and locking and unlocking remain offline.

Legal bases (EU/EEA)

Where the GDPR applies, we rely on: our legitimate interest in maintaining and improving the app (minimal, non-identifying analytics); performance of a contract (providing subscriptions and fulfilling hardware orders); and your consent where it is required. You can object to processing based on legitimate interest.

Your rights

Depending on where you live (including the EU/EEA under the GDPR and Brazil under the LGPD), you may have the right to access, correct, delete, port or object to the processing of your data. The fastest way to delete your on-device data is "Erase all data" in Settings, which wipes it immediately and generates a new identifier. For any other request, contact suporte@tranca.app.

Data retention

On-device data remains until you erase it or uninstall the app. Analytics are retained only as long as needed for the purposes above. Purchase and order records are kept as required to provide the service and meet legal and tax obligations.

International transfers

Our PostHog analytics are hosted in the European Union. Meta, Apple, Google, Stripe and RevenueCat may process data outside your country; where required, such transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Children

Tranca is available to children as well as adults. The under-18 privacy mode keeps the date-of-birth check and core blocking features on the device and disables analytics, purchases and online tag activation. We do not knowingly collect personal data from children through the app.

Changes to this policy

We may update this policy as the product evolves. We will update the date at the top and, for material changes, provide a clearer notice.

Contact

For any privacy question or request, write to suporte@tranca.app.