Privacy Policy

This section applies to the independent HUMAS ID account, the cabinet at id.humassystem.com and the HUMAS ID app. A HUMAS System Platform account belongs to a separate service. The data controller is TRIONCORE OÜ; its contact details and the process for exercising your rights appear in the general policy.

Account and activity

We process your name, email, HUID, language, profile image, organization connections, invitations, requests, decisions, caller checks, notifications and support reports. Your name and image may be available to organizations within an established connection and the relevant interaction. Request and caller-check records are available to the participating parties; support reports are available to their author and authorized administration.

Sign-in and protection

Sign-in takes place on the protected HUMAS ID page in the system browser; the app receives session tokens. Your password is not shared with organizations. To protect sign-in, we process browser, session and security-event information, hashed known-browser identifiers and attempt limits. Security notices may be sent by email.

Images and notifications

You can select a profile image from your photo library; the selected image is sent to HUMAS ID. Push notifications use Apple Push Notification service and Firebase Cloud Messaging. The server associates an installation identifier and delivery token with your account and session. Firebase technical components may process identifiers and diagnostics about the installation, app and delivery. We do not use this information for advertising or tracking across other companies’ apps. You can change push permission in your device settings.

Referral program

Where the referral program is available, we process invitation codes, rewards, balances and payout records. An eligible participant may be asked for the recipient name, IBAN and tax-residence country in the protected cabinet to arrange a payout. The IBAN is stored encrypted. These details are not required for ordinary sign-in or caller verification.

Support, retention and deletion

Support processes the topic, description, selected categories, related organization or employee, administration response and report state. Archiving hides a report from the main list and does not delete it. Receipt and reply notices are emailed when the user chooses this option.

You can delete your account from Settings through the protected HUMAS ID page with password confirmation. Deletion ends access, disables sessions and push, removes or anonymizes personal contact details, the profile image and your own support reports, and closes organization connections. The HUID and shared interaction history, including confirmations, caller checks and referral accounting events, may remain to maintain record integrity, protect rights and meet applicable obligations. This does not mean keeping all data indefinitely. Technical logs and backups follow separate infrastructure retention periods. The Platform account cancellation period does not automatically apply to HUMAS ID.

For data access, correction and deletion questions: info@trioncore.tech. HUMAS ID support: support@humassystem.com. The other provisions of the general policy, including your rights and contact with the supervisory authority, continue to apply.

This section explains how HUMAS System Mobile uses information when connected to a HUMAS System Platform account. The other sections of this policy continue to apply.

Controller and contact

TRIONCORE OÜ is the controller for the mobile-app processing described here. Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Pirita tee 28, 12011, Estonia. Registry code: 17512566. Privacy requests: info@trioncore.tech. Support for the current app build: support@humassystem.com.

Information used

Depending on the functions used, the app accesses the account HUID, display name, email, profile presentation, Personal Glyph, direct Glyph transfers and messages, confirmation requests and decisions, participant-safety reports, and Personal Legacy arrangements including selected heirs’ HUIDs. If notifications are enabled, the app and Platform use an installation identifier, push token and notification preferences. An app issue report includes its category and description, account identity and limited diagnostics: app version, build, operating system, language, theme and the screen from which it was sent. An email reply is requested only if the participant chooses it. The camera scans a sign-in QR code; its images are not uploaded or retained for that purpose. Local Glyphs and preferences may be stored on the device.

Purposes and legal bases

Account and activity data provide the connected service, messages, confirmation requests and participation history. Personal Legacy records document a participant’s chosen continuity arrangement. Naming an heir does not transfer the participant’s identity, HUID, signatures or permissions. Notification data delivers enabled notifications; reports and limited diagnostics support responses, participant protection and service integrity. Depending on the operation, processing is based on performance of the service agreement, legitimate interests in security, support and reliable records, an applicable legal obligation, or a separate choice where consent is required. The app does not use participant data for third-party advertising or cross-app or cross-site tracking.

Recipients and transfers

Authorized HUMAS System personnel, hosting and email providers process data only as needed for their tasks. Enabled push notifications use Google Firebase Cloud Messaging and, on iOS, Apple Push Notification service. Data may be disclosed to a competent authority when legally required. Transfers outside the European Economic Area, where applicable, require an appropriate legal mechanism and safeguards; information about the applicable safeguards can be requested from the privacy contact.

Retention and clearing data

“Clear app data” disconnects the Platform session and removes local Glyphs, Activity state, notification history and preferences from that device; it does not delete the Platform account or canonical records. For an eligible account-deletion request, the Platform provides a 30-day cancellation period, then removes or replaces profile contact and identification fields and disables access. The canonical HUID and history remain. Verified participation, confirmations, transfers and Personal Legacy records may remain where necessary for continuity, legal obligations or claims; this is not a reason to keep every item indefinitely. Disconnecting the app attempts to unregister push delivery; a disabled device record may remain on the server. Closing a support or safety report does not automatically erase its text or diagnostics. Their retention depends on the need to investigate, document the outcome, protect participants and address claims; they are not automatically Personal Legacy records. Technical logs and backups follow separate infrastructure settings.

Choices and rights

Camera and notification permissions are optional. Participants can change notification settings, clear local app data and, where available, block or unblock other participants. Account deletion is requested through Platform account management, not “Clear app data”. Subject to applicable conditions, participants can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, or withdraw consent. Requests concerning preserved records are assessed individually. Write to info@trioncore.tech; a proportionate identity check may be required. A complaint may be lodged with Estonia’s Andmekaitse Inspektsioon.

Platform account management · Andmekaitse Inspektsioon