TRIDENT

Privacy Policy

What Trident collects, why, and what it never does. Written to describe how the product actually behaves rather than to cover every theoretical case.

Last updated 15 September 2026 · Trident, Pune, India

Draft for review. This describes the current build accurately, but it has not been reviewed by a lawyer. Have it checked before you launch publicly or take real users — India's DPDP Act 2023 carries obligations this document describes but does not, on its own, discharge.

What we collect

DataWhenWhy
Email address If you create an account It identifies your account and is how you sign back in.
Password If you create an account Stored only as a bcrypt hash. We cannot read it, and cannot tell you what it is.
Approximate location Only when you tap to enable it To sort cafés by distance from you. Held in your browser for that session and never sent to our servers or stored.
Display name If you choose one (at sign-up or before your first review) Shown publicly beside your reviews and on your public profile. Your email is never shown.
Your reviews When you review a café, stay or place to see Public. Your scores, any text and tags you add are shown with your display name on the place and your profile, and are averaged into its Trident Score.
Reports and blocks When you report a review or block someone To moderate reviews and to hide blocked people's reviews from you. Not shown to anyone.
Agreement to the guidelines Before your first review The date you agreed to the community guidelines, as a record that you did.
Watchlist and preferences When you save a café or answer onboarding To show your saved list and rank recommendations. Visible only to you.

What we do not collect

Location, specifically

Trident asks for location only when you tap Enable on the map. Your browser, or Android if you use the app, then shows its own permission prompt, and you can refuse. If you refuse, the map centres on central Pune and everything else works normally — no feature is withheld.

The coordinates stay in the page you have open. They are used to compute distances and are discarded when you close the tab. You can revoke the permission at any time in your browser's site settings.

Where café and stay data comes from

Cafés, hostels and PGs are not our own listings. They come from:

The Trident Score is the average of reviews written on Trident. It is not derived from Google or Foursquare ratings, which are shown separately and labelled by source.

Stays carry no rent, deposit or availability. Nobody publishes that for Pune's hostels and PGs in a form we can read, so rather than estimate it we leave it out and say so on every listing. What you see there is where a place is, what kind it is, who it is for where that is recorded, and how to contact it.

Itineraries are built from our own café rows. The planner reads your request, picks cafés already in this database, and orders them by walking distance. It never invents a venue, and the spend figures it shows are estimated from each café's price level — they are not menu prices and are labelled as estimates.

Who else sees your data

Your account data sits in a PostgreSQL database hosted by Supabase, who process it on our behalf. Search queries you type are sent to Groq to interpret them into filters; the query text is sent, your identity is not.

Nobody else. We do not share your data with advertisers, data brokers, or café owners.

Your rights

Under India's Digital Personal Data Protection Act 2023 you can:

Delete your account yourself in the app (Profile → Delete my account), or see the account deletion page. Deletion is immediate and removes your email, display name, reviews, reports, blocks, saved places and preferences; the Trident Scores of places you reviewed are recalculated without your reviews. For anything else, email ishanbhalerao27@gmail.com and we will respond within 30 days.

Keeping it secure

No system is perfectly secure. If you find a vulnerability, please email us rather than disclosing it publicly, and we will fix it.

Children

Trident is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

If this policy changes materially, the date at the top changes and account holders are told by email before the change takes effect.