Back to Trivana
Trivana

Privacy Policy

Last updated: October 8, 2026

Trivana Moments

Trivana Moments makes a personal gameshow for an occasion: a birthday, anniversary, wedding, graduation, retirement or farewell, a team celebration, a reunion, a festival or a pet. This section explains what we collect for a show, who helps us process it and how long we keep it. The rest of this policy applies too.

What we collect

  • •
    From you, the organizer: your email address and the confirmation of your payment, and the brief you write. A brief can include names and how to say them, how people are related, interests, memories, your opening and closing words, your choice of host, colors and music and, if you add them, the event date and an age.
  • •
    From friends you invite: the name or label they choose, the memories and words they send and any photos they add.
  • •
    From people who play: very little. Playing needs no account and no sign-up, and we never ask players for an email address. When a group plays together on a TV, each player types a nickname for the scoreboard. We count plays with anonymous events, such as a game starting, to keep shows working.

How we use it, and who helps us

We use this information only to write, check, voice, film and deliver the show you ordered, to support you and to keep the service safe. We never contact your recipient, we do not sell it, and we do not use it to advertise to your recipient or guests. These providers process it for us:

  • •
    Google Cloud: Vertex AI models write and review your questions and host script; Cloud Run and Cloud Tasks run the background work that prepares your show.
  • •
    OpenAI: checks the words in a brief, a friend's memory and a script for content that breaks our rules.
  • •
    ElevenLabs: turns the host script, which includes names and memories, into the host's voice.
  • •
    Runway: turns the host's script and voice into the host's video.
  • •
    Supabase: stores your draft, your order and your show, with photos and show media in private storage.
  • •
    Vercel and Cloudflare: host the site and deliver its pages and your show.
  • •
    Resend: sends your order, review and ready emails, and the emails you ask us to send.
  • •
    Stripe: takes your payment. We never see your full card number.

The service-provider register lists every provider and the data each receives.

Photos: adults only, and why

Photos are optional. They can show adults, and pets with their adult owners, but not children, even for a child's birthday or graduation. A released show opens for anyone who has its link, and we cannot collect a parent's consent from everyone pictured, so we do not accept children's photos. A photo of the cake, the place, a drawing or the family pet works well instead. Everyone who uploads confirms that the photo shows adults only and that they may share it.

We keep photos in private storage, linked to the saved draft and, for a friend's photo, to that friend's words. Uploading does not make a photo public. Only the photos the organizer selects and approves are available through a released show's unlisted play link.

Children

A family show may be played by children. We do not ask players for an account, an email address or their real name, and no advertising pixels or ad trackers load on the pages where a show is played, including the join page guests open on their phones, even for a visitor who accepted them elsewhere on our site. When a show is about a child, the organizer may give us the child's first name, age and interests; we use them only to make that show. Please share only what you would happily say at the party.

How long we keep it

  • •
    Unpaid drafts: a private draft lasts 14 days. Its photos expire with it. You can ask us to delete an unpaid draft's words and friends' contributions at any time.
  • •
    Paid shows: a show stays live at its private link for at least three years from payment, and we keep what it needs for as long as it is hosted. Payment, tax and order records are kept for as long as the law requires, even after a show is deleted.
  • •
    A scheduled email to your recipient: if you ask us to email the show to your recipient at a time you choose, we keep their email address sealed (encrypted) until that email is sent or you cancel it, and then only a masked hint of it (like r…@example.com) for 30 days. We send that one email and nothing else to them.
  • •
    Friends' replies: if you ask us to email you when your friends' replies are in, we keep that address sealed (encrypted) until the one email is sent, or until it can no longer be sent, and delete the request 30 days after it ends or as soon as the unpaid draft expires. So you can open your invitation link in another browser, we also keep that link encrypted on our side until 30 days after the collection closes, or sooner if it is canceled or the draft expires.
  • •
    Removing something: the organizer can remove photos; a friend can withdraw their own words or photos. This blocks future authorized reads and queues stored files for deletion. Cleanup may take time, and we cannot recall a copy someone already saved. Removed or expired photos are not restored by a later payment.
  • •
    Deleting a show: email [email protected] from the address you ordered with, or use the request form below. Once we have confirmed the request comes from you, we switch the show's links off and remove its personal content from our active systems, keeping only the order and payment records the law requires. Copies someone has already downloaded or printed cannot be recalled.

Who We Are

Trivana's master product and web service are operated by Rerato, Inc. (Delaware, USA), which is the data controller for the processing described in this policy unless a specific service context states otherwise. Our current mobile applications may be published and distributed in app stores by our affiliate Rerato Technologies Private Limited (CIN: U58200HR2025PTC130654, registered at First Floor, Sector-17, Faridabad, Haryana 121002, India). Both entities are referred to as "Rerato," "we," or "us" where appropriate, and the applicable seller or publisher is identified at checkout, on the receipt, or in the relevant app store.

Rerato also operates rerato.ai, our creator platform for AI hosts. If you use the same sign-in email on both products, we may link the two accounts internally so your relationship with us carries across products. The products keep separate databases; any link uses a one-way identifier derived from your email address, and you can ask us to delete either account independently.

Contact: [email protected]

What Data We Collect

We collect the following types of information to provide and improve our services:

  • •
    Account Information: Email address, name, and avatar (if provided through authentication)
  • •
    Authentication Data: Google OAuth identifiers and basic profile information for web login, or a pseudonymous account identifier for a zero-friction mobile player account
  • •
    Sales and Communications Data: Name, work email, organization and workshop details, correspondence, CRM stage, and, when tracking is enabled, email delivery, open, reply, and link-click events
  • •
    Usage Data: Games created and played, Daily Drop entries, answers, scores, streaks, challenges, host preferences, reports, blocks, and gameplay statistics
  • •
    Technical Data: IP address, browser type, app version, device model, operating-system version, installation or push-notification identifiers, crash/diagnostic events, and cookies for security, delivery, and session management
  • •
    User-Generated Content: Trivia prompts, game configurations, and uploaded content (such as PDFs, documents, or text from URLs) used to generate games. For a Personalized Facilitator Setup already purchased, this may also include consented reference photographs and, only if the customer separately chooses voice cloning, a consented voice recording made for that request. A fictional-character path does not accept a real person's photographs or voice.

Why We Collect This Data

We use your information for the following purposes:

  • •To provide login functionality and maintain your account
  • •To enable gameplay features including scores, streaks, and leaderboards
  • •To personalize your experience and remember your preferences
  • •To ensure security and prevent abuse of our platform
  • •To generate and regenerate trivia questions from your uploaded content (PDFs, URLs, or text)
  • •To analyze usage patterns and improve our services
  • •To send notifications you explicitly allow, such as the next Daily Drop or a challenge result
  • •To respond to inquiries, manage pilot and customer relationships, send relevant sales or service communications, and measure outreach engagement

How We Share Data

We do not sell your personal data. We share data only with trusted service providers who help us operate Trivana:

  • •
    Core service delivery: account services, application delivery, and storage for the content and records needed to provide the feature you use
  • •
    Payments and billing: billing contact and transaction information for supported purchases
  • •
    AI and generated media: source content, prompts, prepared scripts, and generated output when you use question, voice, or facilitator-media features. For a personalized facilitator, the default self-based path sends consented reference photographs to the avatar provider and uses a licensed Trivana voice, so it requires no customer voice recording. The optional cloned-voice path separately sends a recording only after explicit v2 voice consent and recording provenance are recorded. The fictional-character path accepts no real-person reference materials. These materials are used only to build and operate that customer's facilitator, not for another customer or Trivana marketing. Voice and facilitator-media providers are not intended to receive Learn participant response records; do not place participant personal data in source material or facilitator scripts unless a written scope permits it.
  • •
    Sign-in and communications: account profile details from the sign-in method you choose, plus email address and message content for transactional communications. If you sign in with Google, Trivana's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Trivana does not receive your sign-in password.
  • •
    Analytics and reliability: pseudonymous operational events and diagnostics needed to run and improve the service, plus optional browser and mobile analytics only where the required consent is provided. Advertising identifiers and ad-personalization signals are disabled in Trivana's mobile analytics setup.
  • •
    Customer relationship management: contact, organization, and workshop details; sales and support messages; deal status; and, where tracking is enabled, email and public-site engagement. HubSpot visitor attribution runs only after you accept optional analytics and only on eligible public pages.

The current provider register identifies the applicable vendors and data categories without describing Trivana's internal architecture. Review the service-provider and sub-processor register.

Trivana Learn & Participant Data

For participant content and response records that Trivana handles under a buyer's instructions, the buyer generally acts as controller and Rerato acts as processor. Rerato separately decides how to process account, billing, service-security, abuse-prevention, legal-compliance, and certain operational records needed to run Trivana. The applicable agreement or DPA controls if it says otherwise.

  • What we store about learners: the name a learner types when they start a quiz (self-asserted, not identity-verified), a pseudonymous participant identifier, their responses, scores, completion time, and play timestamps. The current participant flow does not require an email address or a Trivana account.
  • Link access and identity: access uses an unlisted round link. A learner can use any name; possession of the link and the entered name do not verify who completed the round. A forwarded link may be opened until it expires or is revoked.
  • Reinforcement continuity: an essential, HTTP-only participant cookie may remain on the learner's device for up to 90 days so Day 0, Day 7, and Day 14 activity can be associated with the same pseudonymous learner. The cookie does not keep an expired or revoked participant link authorized; each round is checked separately on our servers.
  • Retention & deletion: learner records are retained while your account is active. You can request deletion of a specific quiz's results, a cohort's data, or all learner data by emailing [email protected]. We target removal from active systems within 30 days after verification, subject to legal retention requirements. Limited residual copies may remain until bounded backup cycles complete. On termination, source content and learner records can be exported or deleted as provided by the applicable agreement.
  • Sub-processors & DPA: the providers we use to process this data are listed on our sub-processors page. Any Data Processing Addendum for a written Trivana Learn or Trivana Studios scope must also be agreed in writing.

For a done-for-you workshop reinforcement pilot, we use the supplied workshop material only to produce, review, host, and support the purchased deliverables. We do not publish that material or the resulting private checks as public library content without permission. You can request deletion of the source material and pilot results at any time, subject to legal recordkeeping requirements.

Cookies

We use cookies and similar technologies for essential functions and, where you choose, optional measurement and attribution:

  • •Session Cookies: To keep you logged in during your visit
  • •Authentication Cookies: To securely identify your account
  • •Preference Cookies: To remember your settings and preferences
  • •Learn continuity cookie: To connect a participant's three private reinforcement rounds for up to 90 days without requiring an account; authorization for every round is still validated server-side
  • •Daily crew cookie: When you play Trivana Daily with a crew (friends who play each Daily through the same shared links), we set a functional, HTTP-only cookie named trv_crew so your browser stays on that crew's board without an account. It holds up to three crew codes, each with a random secret; we keep only a hashed copy of each secret. It holds no name, email or account details, is never shared with third parties, and lasts up to 400 days. If you have declined optional cookies, it ends when you close your browser. Anyone with your crew's link can see its board: the player name you gave when sharing, your Daily scores and finish times, your crew streak, and whether you have played today's Daily. Shared crew links can show a crew member's name in link previews.
  • •Visitor measurement identifier: If you have not yet answered the cookie banner, we store a random first-party identifier on your device so we can tell a returning visit from a new one. It contains no personal information, is never shared with third parties, and expires automatically after 90 days. If you decline optional analytics, it is not stored and every visit is counted as new
  • •HubSpot visitor-attribution cookies: After you accept optional analytics on an eligible public page, HubSpot may set __hstc, hubspotutk, __hssc, and __hssrc to recognize a browser, count visits and sessions, and associate a later identified interaction with a CRM contact. The visitor identifiers currently last up to six months; the session cookies last for 30 minutes or the browser session. Withdrawing consent sends HubSpot do-not-track and cookie-revocation requests; HubSpot may use the __hs_do_not_track cookie to remember that choice.

We show a cookie consent banner on first visit so you can accept or decline optional product analytics cookies, CRM visitor attribution, and advertising pixels. Declining optional analytics does not disable first-party traffic and website performance measurement on public pages. That measurement uses no advertising cookies, is never shared with third parties, and excludes private account, buyer, participant, and capability-link surfaces. Until you answer the banner, it includes the 90-day visitor measurement identifier described above, so that returning visits can be distinguished from new ones; declining removes that identifier and each visit is then counted separately.

Sales Communications & CRM

We use HubSpot to manage prospect and customer records, sales communications, pilot opportunities, and related engagement. A sales or marketing email may include a small tracking image and tracked links that report delivery, opens, and clicks. These signals can be affected by privacy protections, automated scanners, image loading, or forwarding and are not treated as proof that a particular person engaged.

You can opt out of non-essential sales or marketing messages using the unsubscribe or preference link in the message, or by contacting [email protected]. We may still send service, security, billing, or other transactional messages that are necessary for an active account or purchase.

HubSpot generally acts as our processor or service provider for CRM records. If HubSpot Intent data access or enrichment products are enabled, HubSpot's current terms may instead treat tracking-code data as controller data used for its own purposes. See the HubSpot Privacy Policy for those practices.

Trivana ChatGPT Apps

When you create a Trivana game or practice quiz through a Trivana app inside ChatGPT, OpenAI sends Trivana the tool request needed to fulfill it. This may include your requested topic, language, audience, host preference, difficulty, question count, optional title, and any URLs, notes, or source text you choose to include.

  • •
    How we use it: To generate your trivia game, publish a shareable Trivana link (unlisted by default), prevent abuse, and record internal analytics labeled as ChatGPT App traffic.
  • •
    What we do not receive: We do not receive your full ChatGPT conversation history, ChatGPT password, OpenAI account credentials, or data from other ChatGPT apps or threads.
  • •
    Request metadata: Standard request metadata visible to our infrastructure, such as IP address, may be used for security, rate limiting, and fraud prevention.
  • •
    Unlisted by default; public only with your approval: Games created from ChatGPT are unlisted by default (anyone with the link can open and play them). Popularity may make a claimed game eligible for Community consideration, but never makes it public automatically. Public Community and search discovery require you to review the game and explicitly opt in from your creator report. You can withdraw that approval or request deletion anytime at [email protected].
  • •
    Trivana Study material: Notes, links, and other study material you submit are treated as user-provided content and used to create the practice quiz you request. Trivana Study quizzes are unlisted by default and are excluded from public Community featuring. Anyone you give an unlisted play link to can open it.

You can disconnect a Trivana app from your ChatGPT settings. After disconnecting it, Trivana will not receive new requests from that app on your behalf.

Trivana on Muse

When you ask Muse to use Trivana, we receive the inputs for that tool request, such as a quiz topic, optional title, language, difficulty, host preference, question count and a retry identifier. The connector does not give us your Muse password, payment-card details or general access to your conversation history. Text you or the assistant include in the tool request is received by Trivana, so do not include sensitive personal material in a free quiz prompt.

  • Quiz creation: We use the request to generate and host the quiz, prevent abuse, handle retries and measure use of the connector. Relevant prompts and generated content may be processed by the AI, hosting and storage providers listed in our service-provider register. Operational records include request and game identifiers, timing and standard network metadata.
  • What returns to Muse: The quiz title, question count and play link, and, for a newly claimable game, a private claim link. Free quizzes are unlisted, not private: anyone with the play link can play. Claiming is optional and associates the game with your Trivana account. Keep claim links private because they can transfer ownership.
  • Paid features: Where commercial tools are available, Muse can receive public product information and a link to continue on Trivana. Enter personal Moments memories, recipient details and source material only in the private Trivana builder. They are used to prepare, review, deliver and support your requested show, not returned to Muse by this connector. Buyer review and recipient sharing remain separate actions on Trivana. Subscription and credit access are checked against your Trivana account, not an assertion made by an assistant. Stripe handles payment details in its hosted checkout; this connector does not send card details or private order-access links to Muse.
  • Referral measurement: A Moments handoff may contain a signed referral identifier valid for 24 hours. It identifies the Muse channel, not your identity or payment authority. We use it with internal draft and order identifiers to measure the purchase and delivery journey. The referral does not contain your brief, email address, card details or private access credentials.

Rerato and Meta each control their own processing of connector data. This policy describes Trivana's processing; Muse's privacy notices and settings describe Meta's processing. Disconnecting Trivana in Muse stops future use through that connection, but does not itself delete a quiz or an order already stored by Trivana. The current connector does not receive an account-level disconnect notification.

To request deletion or make a revocation request to Trivana, use the deletion form below or email [email protected]. You do not need to create a Trivana account. Include the public game link or an order reference so we can locate the data and verify your authority. Do not send passwords, claim tokens or private buyer-access links. We review these requests and delete or restrict access to the relevant data after verification, subject to the retention requirements below.

Data Retention

We retain your personal data for as long as your account is active. Uploaded source content (PDFs, documents, URLs) is stored to enable game editing and question regeneration, and is deleted when the associated game is deleted. If you submit a verified account-deletion request, we target removal of personal data from active systems within 30 days, except where the law requires us to retain certain information. Limited residual copies may remain until bounded backup cycles complete.

A quiz made through an assistant may exist without a Trivana account. For those quizzes, retention is tied to providing the requested game, not to an account remaining active. You may request deletion of an individual game, its source material or associated personal data using the form below. Billing, fraud prevention and legally required records may need to be retained separately from the game or show content.

Standard mobile player accounts can be deleted immediately in the app. If you no longer have app access, the public account-deletion resource lets you start an assisted request without reinstalling Trivana, including for a pseudonymous account.

Your Rights

You have the following rights regarding your personal data:

  • •Access: Request a copy of your personal data
  • •Correction: Request correction of inaccurate data
  • •Deletion: Request deletion of your account and data

To exercise any of these rights, please contact us at [email protected].

If you are located in the EU, UK, or California, you may have additional rights under applicable data protection laws.

Request account and data deletion

We process verified deletion requests within 30 days.

Security

We implement reasonable technical and organizational safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Trivana is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at [email protected] so we can promptly remove it.

Trivana Moments shows can be about, and played by, children. We do not ask the people who play them for an account, an email address or their real name, Moments photos must show adults only, and no advertising pixels or ad trackers load on the pages where a show is played, including the join page guests open on their phones. The Moments section explains why.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Service operator and data controller: Rerato, Inc., Delaware, USA

Business mailing address: 815 Superior Ave East, Suite 1618, PMB 228, Cleveland, OH 44114, USA

Affiliated mobile store publisher and distributor: Rerato Technologies Private Limited, First Floor, Sector-17, Faridabad, Haryana 121002, India