Tribuno Privacy Policy
Tribuno keeps your personal app records on your device. We do not operate an account service or a cloud copy of those records. The app does not upload those records to us. Purchases use Apple’s StoreKit; sharing, support, and system services are described below.
Who is responsible
Tribuno is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). Questions and privacy requests:
Contact: captainlongevity@gmail.com
The records stored on your device
- Dispute descriptions, jurisdiction choices, dated evidence, communication summaries, disputed fees, meeting dates, and deadlines you enter.
- Evidence photos, locally generated reports, and your reminder and display preferences.
These records and preferences are used to provide the app features you choose. Local calculations do not send the input records to a developer-operated service. There is no in-app account or developer-operated cross-device sync.
How Tribuno handles its main features
Reference information is bundled. Opening CAT, CRT, or other legal-help resources in a browser is optional and subject to that site’s privacy practices. The current deadline feature uses local notifications, rather than reading your calendar.
Optional permissions and system services
- Camera: Used only when you choose to photograph evidence for a record. The captured image is attached locally; it is not uploaded by the app.
- Selected photos: The system photo picker gives the app the photos you choose for a record. Those copies stay in local app storage; the app does not browse or upload your entire photo library. Picking an item may cause the system Photos service to retrieve it from your own iCloud Photos account.
- Face ID / Touch ID: Optional App Lock uses Apple’s local authentication. The app receives an authentication result, not your face image, fingerprint, or biometric template. App Lock does not conceal copies that you share or information you choose to show in widgets.
- Notifications: Optional date reminders are scheduled locally after you grant notification permission. There is no developer-operated remote push service. iOS settings, focus modes, power state, or other conditions can delay or suppress an alert.
Permissions are requested in connection with the feature that needs them. You can refuse or revoke them in iOS Settings; features that need a refused permission may be unavailable. Selected photos and files are separate from granting unrestricted access to an entire library.
Widget snapshots
Widgets use locally cached deadline summaries in this app’s shared container. Information you choose to display can be visible on a Home Screen or Lock Screen; use the system’s display and notification settings for sensitive records. These displays do not create a developer-operated upload service.
Sharing, exports, and external links
Evidence PDFs are generated locally from your dispute details, dated evidence, communication log, disputed amounts and notes, owner-entered deadline notes, and attached photos that can be decoded for rendering. Original stored photo bytes are not replaced by generating a PDF. The PDF is a readable, unencrypted sharing copy, not a restorable archive, tribunal application or guarantee of accepted filing format. Verify current CAT or CRT requirements separately. Tribuno does not lodge an application or contact a corporation, council, property manager or tribunal.
Generating a file locally does not send it to us. When you choose a sharing destination, that app or provider can receive the selected content and apply its own privacy and retention rules. Opening a web link sends an ordinary request to the linked site. Review a report, photo, or screenshot before sharing information about yourself or others.
Apple purchases and diagnostics
Apple handles in-app payment and subscription billing. The app processes StoreKit product and transaction information to purchase, restore, and verify paid access. We do not receive your payment-card details or billing address through the app. Apple may provide sales reports and, depending on your Apple settings, diagnostic information through its developer services.
Apple’s handling of purchases, device services, backups, and diagnostics is described in Apple’s privacy information.
Analytics, advertising, and tracking
We have not added advertising, behavioral analytics, or third-party crash-reporting SDKs to Tribuno. We do not sell your app records or use them for cross-app advertising tracking. This does not mean that Apple, an external site you open, or an optional data provider receives no connection information. Their exchanges are described above.
Retention, deletion, and device security
After a successful save, deleting a dispute cascades to its evidence entries and stored photo copies, communications and fee records. Deleting an individual entry removes that entry and its stored photo copies, not the whole dispute. A failed database save is reported rather than treated as completed deletion. There is no Recently Deleted or full-record archive import. Original system-library media, previously shared PDFs, recipient copies and older backups are separate.
Removing the App normally removes its local container, not independently kept original media, exported files, recipient copies or older backups. Manage those copies separately. Device-backup recovery requires a usable completed backup; the developer has no record archive to retrieve.
Use a device passcode and appropriate operating-system protections. Optional App Lock, where available, is an access control and is not a promise that every copy, export, notification, or widget is encrypted or hidden. Because we hold no remote journal copy, we cannot recover a lost local record or delete a copy you sent to another provider.
If you contact support
Emailing captainlongevity@gmail.com voluntarily gives us your email address, message, and any attachments you send. We use that information to answer your request, investigate the issue, and meet applicable recordkeeping obligations. It is processed through email providers and kept as needed for those purposes; you may ask us to delete support correspondence, subject to any legal retention requirement. Please omit unnecessary private records.
This policy website
These static legal pages are hosted by Vercel. Loading a page makes a web request that can disclose your IP address, page URL, time, and browser or connection metadata to the host for delivery and security. We have added no advertising or analytics scripts to these pages.
Hosting information: Vercel’s Privacy Notice.
Children and privacy requests
Tribuno is not designed to solicit children’s personal information through accounts or a developer-operated journal service. If you believe a child has provided personal information to us through support, contact us. You can manage local records yourself and contact us about support correspondence or other data we actually hold. For information held by Apple or another provider, use that provider’s request process.
Policy changes and contact
We will update this page and its last-updated date if these practices change. Material changes to app data handling will be explained before or when the affected feature is introduced. Privacy questions: captainlongevity@gmail.com.
When saved records cannot be opened
The updated App shows recovery guidance if its persistent database cannot be opened. It does not replace that database with an empty temporary store, erase the database, or start the normal database-dependent interface. Previously scheduled reminders, widget snapshots, independent exports and backups may remain.
Check available device storage, close and reopen the App, and contact support before deleting or reinstalling it. This recovery screen is not a backup, a repair guarantee or an automatic restoration of missing records. Older installed versions may behave differently until updated; publishing this document does not update an installed App.
Editing, photos and save failures
Dispute, evidence, communication and fee editors keep form changes in temporary memory until you choose Save. Cancel discards that form’s unsaved input without rolling back other pending records. A save failure shows an error and keeps the current form input available to retry; unsaved input is not a backup and can be lost when the App closes. New rows are inserted only when saving. The App does not generally prohibit legitimate in-memory previews or editing.
Camera images and system-selected photos are prepared in memory before acceptance into the form. If preparation fails, retry or discard the pending selection; failed preparation is not silently counted as a saved attachment. Existing and accepted photos are retained when paid access expires. Stored photo copies are within evidence entries, not a separate file vault. Discarding a draft does not erase the original photo in your system library.
Reminders use dates you entered, not a binding deadline calculation. Database-read failure retains the previous reminder plan or widget snapshot rather than replacing it with an assumed empty result. These may be stale; check the App and dates yourself. No calendar write, timer, shortcut or Live Activity is provided.