Effective date: July 30, 2026
This Privacy Policy explains how Credexa ("Credexa", "we", "us", "the App") collects, uses, and discloses your information when you use our mobile application and related services (the "Service"). By using the Service you agree to this Policy.
Definitions. "Personal Data" means information that identifies or can reasonably be linked to you. "Usage Data" means information collected automatically by the Service or its infrastructure, such as device and diagnostic information. "Service Provider" means a third party that processes data on our behalf. Credexa operates from Texas, United States.
Account information: when you sign in (via email, Google, or Apple), we collect your name and email address to create and manage your account.
Usage & progress data: your activity, stats, streaks, maturity level, and accuracy history.
Content you submit: text, links, and images you provide for fact-checking, de-biasing, or posting in the Community Hub.
Photos and camera content you choose to share: with your prior permission, images you select from your photo library or capture with your camera and submit for AI analysis. You can grant or revoke camera and photo access at any time in your device settings. Live camera frames used by Trust Lens are handled separately under Section 2 and are never uploaded.
Device and diagnostic data: IP address, device type and identifiers, operating system and version, and app interaction and timing data, collected automatically by the App and by our infrastructure providers to operate, secure, and troubleshoot the Service.
We do not collect your phone number, and we do not operate SMS messaging or live chat support.
Trust Lens uses your device camera to read on-screen text and to locate faces so it can flag possible synthetic or manipulated imagery. When you switch Trust Lens to the front camera on a device with Face ID hardware, the App starts an ARKit face-tracking session, which uses Apple's TrueDepth API to supply the camera feed.
We do not collect, record, or use face geometry, depth maps, facial expression data, or any faceprint. The App never reads ARKit's face mesh or blend-shape values, and we do not perform face recognition or identification.
Face detection produces only anonymous on-screen rectangles (the position and size of a detected face). These rectangles are used solely to draw the live overlay and are discarded frame by frame.
All camera and face processing happens entirely on your device. Camera frames, face rectangles, and face data are never uploaded to our servers, never stored on the device or in the cloud, never retained after the Trust Lens screen closes, and never shared with or sold to any third party — including for advertising, marketing, or third-party analytics.
Because no face data is stored or transmitted, there is nothing to retain or delete; it exists only in memory while Trust Lens is open and is released when you leave the screen.
Photos you deliberately choose to submit for AI analysis are handled under Sections 1 and 4, not under this Section.
We use your information to provide and improve the App's features, personalize your experience, sync your progress across devices, operate the community, maintain safety through content moderation, diagnose technical problems, and comply with legal obligations. We do not use your information for advertising or profiling, and we do not sell it.
Credexa relies on trusted third parties to function:
Google Firebase (Authentication and Cloud Firestore) for sign-in and data storage — https://firebase.google.com/support/privacy
Google Sign-In and Sign in with Apple for authentication — https://policies.google.com/privacy and https://www.apple.com/legal/privacy/
OpenRouter, which routes content you submit to AI providers for fact-checking and bias detection — https://openrouter.ai/privacy
Vercel, which hosts our API endpoints — https://vercel.com/legal/privacy-policy
GNews and Google News (RSS), public news sources used for verification — https://gnews.io/privacy and https://policies.google.com/privacy
Unsplash, which serves optional profile banner images — https://unsplash.com/privacy
Google Apps Script, which receives in-app feedback you submit — https://policies.google.com/privacy
Content you submit for analysis may be transmitted to these providers to generate your results. On-device processing libraries bundled in the App, including Google ML Kit text and face detection, run locally and send no data anywhere.
The Service may contain links to other websites we do not operate. We are not responsible for their content or privacy practices, and we encourage you to review their policies.
Your data is stored securely using Google Firebase. We take reasonable measures to protect it, but no method of transmission or storage is completely secure.
We retain account and progress data for as long as your account is active, and for up to 24 months after account closure, unless a longer period is required by law. Diagnostic and usage data is retained for up to 24 months. Residual copies may persist in encrypted backups for a limited period after deletion.
Because Credexa relies on service providers operating internationally, your information may be transferred to, stored on, and processed on computers located outside your state or country, where data protection laws may differ. We take reasonable steps to ensure your data is treated securely and in accordance with this Policy wherever it is processed.
Credexa is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it. Where local law sets a higher age of digital consent, users below that age should use the Service only with the involvement of a parent or guardian.
You can review your data in the app and sign out at any time. You can permanently delete your account and associated data directly in the app from Profile → Delete Account. You may also contact us to request access to, correction of, or deletion of your Personal Data, and to withdraw permissions such as camera or photo access through your device settings.
We do not sell your personal information. We share it only with the service providers described above, and in the following circumstances:
Legal requirements: we may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.
Business transfers: if Credexa is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred, and we will provide notice before it becomes subject to a different privacy policy.
Safety and enforcement: to investigate or prevent wrongdoing, protect the rights, property, or safety of our users or the public, or enforce our Terms.
We may update this Privacy Policy periodically. Material changes will be reflected by updating the effective date above, and where appropriate we will notify you in the App.
For privacy questions or data requests, contact talk2debaditya@gmail.com.