This policy explains what personal data we process and why. The app stores your data on your own machine and sends us nothing; we only process what is needed to sell and license it to you.
1. Who we are
The data controller is owan, contactable at hello@troth.one. Our full identifying details are on the Legal Notice page.
Our business entity is in the process of being registered, so no company number is published yet. The Legal Notice explains what that does and does not change, and hello@troth.one reaches the person responsible for your data in the meantime.
2. The app collects nothing
The owan app runs on your computer. What it learns and stores stays on your machine. It has no analytics or telemetry and does not send your content or usage to us. Your AI conversations, files, and memory never reach our servers.
Two limited exceptions send a request to our servers, and neither carries your content: the update check, where the app asks whether a newer version exists; and, on a paid plan, license activation and periodic validation, where the app confirms your license is genuine, registers the device, and checks the license has not been refunded or revoked. These requests carry technical information such as your IP address and a device identifier, never your files, conversations, or memory.
3. What we process, and why
- Account data: your email address, and your name if you provide it, so you can sign in and manage your plan. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
- License and device data: your plan and license status and a device identifier for each device you activate, so we can deliver what you paid for and honour refunds and revocations. Legal basis: contract, and our legitimate interest in preventing license abuse (Art. 6(1)(b) and (f)).
- Purchase data: your order details and receipts, so we can deliver your plan and provide support. Legal basis: contract, and our legal obligations for invoicing.
- Payment data: handled by our payment processor (Stripe). We do not store your full card details. Legal basis: contract, and our and the processor's legal obligations.
- Server logs: IP address, timestamps, and request data from visits to our websites and from the app's update check, kept to keep the service secure and to prevent abuse. Legal basis: our legitimate interest in security (Art. 6(1)(f)).
- Waiting lists and letters: if you join a waiting list (for example for Always On or Teams) or ask for our monthly letters, your email address, to send you what you asked for. Legal basis: your consent (Art. 6(1)(a)); you can leave at any time.
- Support correspondence: what you send us when you ask for help. Legal basis: contract and legitimate interest.
- Website measurement: we count visits to owan.ai and docs.owan.ai with PostHog, hosted in the EU (Frankfurt), in cookieless mode. Nothing is stored on your device. PostHog receives your IP address and browser details with each request and turns them, on its servers, into a hash that changes every day, so a visit is not tied to who you are and cannot be followed from one day to the next. We see aggregate numbers: which pages were opened, which link brought people, and which buttons were pressed. No session recording, and no advertising use. Legal basis: our legitimate interest in understanding which parts of the sites work (Art. 6(1)(f)). This is the websites only; the app has no analytics or telemetry.
Our websites run no advertising tools.
4. Who we share it with
We use a small number of processors to run the store and accounts: our payment processor (Stripe), our authentication and database provider (Supabase), the sign-in providers you choose to use, our email delivery provider, Cloudflare, which hosts our websites and app downloads, and PostHog, which counts visits to our websites from the EU without cookies. They process data only on our instructions. We do not sell your data.
5. International transfers
owan is available worldwide. Some of our processors operate outside your country, including outside the EU/EEA. Where that happens we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.
6. How long we keep it
We keep purchase and invoice records for as long as required by tax and accounting law. Other data is kept only as long as needed for the purpose it was collected for, then deleted.
7. Your rights
Under the GDPR and similar laws you may request access to your data, correction, deletion, restriction, portability, and you may object to certain processing. Where we rely on your consent, you may withdraw it at any time. To exercise any right, email hello@troth.one. You also have the right to complain to your local data-protection authority.
8. Cookies
Our websites set no cookies, and visits are counted without storing anything on your device. The one thing kept in your browser is whether you turned the site's sound on, so it remembers your choice; it is never sent to us. The Cookie Notice has the detail.
9. Features that are not available yet
Some features shown on our website, such as Always On and approvals from your phone, may involve our own servers when they launch. Before any of them is available, this policy will say exactly what they process and why.
10. Changes
We may update this policy. The current version is always at this page, with its last-updated date.