Effective date: 6 August 2026
This policy explains how the Truly Hub mobile app for Android (the “App”) handles your information. The App is a companion to the Truly Hub desktop software: it signs you in to your existing TrulyStupid account, notifies you when someone applies to join your agency, and can show your live chat and stream events while you are away from your computer.
The App does not create accounts, does not show advertising, and contains no analytics or tracking SDKs.
TrulyStupid is the developer of the Truly Hub software. For anything in this policy, contact support@trulystupid.dev.
The App only handles data tied to the TrulyStupid account you sign in with.
| Data | Why |
|---|---|
| Email address and username | To sign you in and show which account is active. |
| Account identifier | To load your agency role, subscription status and device seats. |
| Two-factor authentication code | Checked at sign-in. The App requires two-factor authentication and will help you set it up if your account does not have it yet. Codes are used once and never stored on your device. |
| Notification token | A token issued by Google so notifications can reach this device, stored with a randomly generated install identifier and the app version. It is removed when you sign out. |
| Agency membership details | If you own or manage an agency, the App shows people who have applied to join it: their username, email address and when they applied: so you can approve, reject or defer them. |
The App does not collect your location, contacts, photos, files, microphone or camera input, and it does not use an advertising identifier. The install identifier is a random value generated on first run; it is not a device, hardware or advertising ID and does not follow you if you reinstall the App.
When you turn on Mobile access in Truly Hub on your computer, the App can show your live chat and stream events. That connection is made directly between your phone and your computer over your own local network.
Your chat messages, gifts, follows and other stream events are never sent to our servers and we never see them. Our servers are used only to tell your phone the local network address of your own computer, so the two can find each other. The feature works only while your phone is on the same network, and stops the moment you switch it off in Truly Hub.
The App talks to our own service and to two services that exist to get notifications and updates onto your phone. Nothing else.
api.trulystupid.dev): sign-in, your account details, your agency,
and your notification token. All traffic is encrypted in transit over HTTPS.Our own service in turn runs on infrastructure we do not own, so those providers necessarily handle your data too:
That is the complete list. Each of these acts as a service provider processing data on our behalf and under our instructions, not for their own purposes. We do not sell your data, share it with advertisers, or use it for advertising or profiling.
Your sign-in session is kept in the operating system's protected credential storage: encrypted with a key held in the Android Keystore: rather than in ordinary app storage. The random install identifier is stored the same way. Signing out removes both and unregisters this device from notifications.
The App is for people aged 18 or over. We don't knowingly keep an account for anyone younger: if we learn of one, we delete it.
If this policy changes materially we will update the effective date above and, where the change affects how your data is used, tell you in the App or by email.
Questions, data requests or complaints: support@trulystupid.dev.