Trust Center

What we hold, and what we never will

An identity app has to earn trust with specifics, not slogans. Here is exactly what TrueID.Help stores, who helps us run it, and how you stay in control. For our security principles in short, see Security & Privacy.

What we store

Your sign-in details
Your email and login method, held by our sign-in provider.
Emails you ask us to watch
Each address, whether its owner agreed, when we last checked it, and the names of breaches it appeared in.
Family members you add
Their email address, their consent answer, and the names of breaches it appeared in (Family plan).
Your checklist and tracker answers
Which steps you ticked and which people-search sites you marked. Free accounts keep these in your browser only; paid accounts sync them to your account.
Your subscription
Your plan and its status. Card details stay with our payment provider.

What we never hold

  • Passport, driver's license or other ID document images.
  • Your passwords. Password checks send only a small scrambled fragment, never the password.
  • Card numbers. Payments are handled by Stripe.
  • Anything a free tool processes in your browser, such as generated passwords or privacy letters.

Our commitments

  • We only watch an email address after its owner says yes, and nothing about it is shown until they do.
  • No advertising trackers and no sale of your personal information.
  • We count page visits with our studio's own counter: an anonymous random ID kept in your browser and the page address. No cookies, no ad networks.
  • Every connection is encrypted (HTTPS), and our database provider encrypts stored data.
  • Secret keys stay on our servers and are never sent to your browser.
  • Your data is only reachable through your own signed-in account.

Who helps us run TrueID

Each provider handles only what its job needs.

  • Clerk · Sign-in and account security
  • Supabase · Our database
  • Stripe · Payments
  • Resend · Email alerts and permission requests
  • Have I Been Pwned · Breach data for monitored emails
  • Cloudflare Turnstile · Bot checks on public tools
  • Upstash · Rate limits that stop abuse
  • Vercel · Website hosting

Your control

  • Delete everything: use “Delete account” on your dashboard. Your monitored emails, household, saved progress and subscription record are erased.
  • Stop watching an email: remove it from your monitoring list anytime. Owners can also say no from the permission email.
  • Download your data: coming soon. Until then, email us and we'll send you a copy.

Found a security problem?

Email smithappsupport@gmail.com with “security” in the subject, or use the report form. Please don't test against other people's accounts. We'll reply, keep you updated, and credit you if you'd like.

Honest about limits: no service can promise you'll never be breached, and TrueID is a protection toolkit, not insurance. Read the full Privacy Policy and Terms.