← Tridente SI

Privacy Policy

This policy explains what the Tridente SI apps for iPhone, iPad and Mac and the Tridente SI service behind them ("the Service") collect, why, and what you can do about it. Seahorse is the AI assistant in the Service. We aim to collect as little as possible.

1. Account

• Continue with Ghostee: Ghostee (ghostee.org) signs you in and tells us your Ghostee user ID and handle. From these we derive an opaque Tridente account ID and a placeholder address (for example name.1a2b3c@ghostee.user). We never receive your Ghostee passkey or password. If you have linked Lyre to Ghostee, Ghostee may also give us the email address of that Lyre account so the two can be connected.
• Email and password: we store your email address and a salted hash of your password, never the password itself.
• Invite codes: while access is invite-only, an invite code you enter is checked and we issue a short-lived pass (10 minutes). We don't store the code against your account.

2. Conversations

• When you are signed in, your conversations (titles and message text) are synced to our storage so they appear on all your devices. They are encrypted at rest (AES-256-GCM).
• Images you attach are resized and re-encoded on your device, which also removes photo metadata such as location. They are sent with that one message for analysis and are not saved in your synced history.
• Memory: if you explicitly tell Seahorse something about yourself ("remember…", "my name is…", "I prefer…"), up to 25 short facts are saved with your account so Seahorse can remember them in later chats.
• Searching your chats happens on your device. Search terms are not sent to us.

3. How your messages are processed

• To answer you, your message, recent turns of the conversation, any saved memory facts and any attached image are sent to a third-party AI model provider through a cloud AI platform.
• When Seahorse decides a question needs current information, a search query based on your message is sent to a web search provider, and the Service may fetch the public web pages it found.
• We do not use your conversations to train AI models, and we do not sell your personal data. There are no ads.
• Don't submit information you would not want processed by an automated system or by these third-party providers.

4. Device security

• Your sign-in token is stored in the Apple Keychain on your device, and only on that device. The app does not use cookies.
• App Attest: the app uses Apple's App Attest to prove that requests come from a genuine copy of the app. Your device creates a key, and Apple certifies it. We store that key's public part and a counter. No personal data is involved.
• Face ID / Touch ID / passcode lock: this is checked by your device's operating system. We never receive biometric data.
• The app hides your chats in the app switcher. Text you copy from a message is cleared from the clipboard after 60 seconds, and on iPhone and iPad it is not shared with your other devices.

5. Operational data

To run the Service and prevent abuse we process request metadata such as IP address, time and requested endpoint. We keep IP-based rate-limit counters (they expire within minutes to hours) and per-account daily usage counters. The Service runs on Cloudflare, which processes this traffic for us.

6. Your choices

• Delete any conversation in the app, or share or copy a conversation or message.
• Sign out at any time. Signing out also revokes your session on our servers.
• Delete your account in the app under Settings → Delete Account. This removes your synced conversations, memory, account links and usage counters, and signs out every device. If you signed in with Ghostee, we also tell Ghostee that this Tridente SI account was deleted (we send only your Ghostee account ID and the reason) so it can remove the link on its side. We keep only a minimal deletion marker (your opaque account ID and a session counter) so old sign-in tokens can never work again.
• If your Ghostee account is deleted, Ghostee tells us. We then remove the link and sign out your devices. For 30 days, the app lets you either move your account to an email and password (keeping your conversations) or delete it.
• For any other request (access, correction, deletion), email us at the address below.

7. Retention

We keep account data and synced conversations while your account exists. Deleting your account removes them as described above. One-time sign-in codes, attestation challenges and invite passes expire within minutes.

8. Children

The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

9. Changes

We may update this policy. The "last updated" date above shows when it last changed.

10. Contact

Privacy questions and data requests: enquiries@bekje.com.