Effective date: 11 October 2026
This policy covers your TrulyStupid account, the Truly Hub desktop software and the apps that run inside it (including Power Stream), the theme shop, and this website. The Truly Hub mobile app has its own policy: mobile app privacy policy.
We do not show advertising, we do not sell your data, and we do not use it for profiling.
TrulyStupid is the developer of Truly Hub and its apps, and is the data controller for the information described here. Contact us at support@trulystupid.dev.
Truly Hub is desktop software. Your overlays, commands, media, chat history, viewer records, session recordings and stream events are stored on your own machine.
Your connections to Twitch and TikTok are made directly from your computer to those platforms. Your chat messages, gifts, follows and viewer activity arrive on your computer, not through our servers. If you sign in to TikTok inside the Hub, that session stays on your machine.
Some features do send data to us, such as text you have read aloud in our voices (see Voices) and profile backups (see Backups).
Only what an account needs in order to work.
| Data | Why |
|---|---|
| Email address and username | To identify your account, sign you in, and send account email. |
| Password | Stored only as a one-way hash. We never hold your actual password. |
| Two-factor secret and backup codes | Only if you enable two-factor authentication. Stored encrypted. |
| Twitch account link | If you connect Twitch, your Twitch user id and access tokens, stored encrypted, so the Hub can act on your channel. Revoking access in Twitch ends this. |
| Subscription record | Your plan, status, renewal date and the payment provider's reference for your subscription, so we know what you are entitled to. |
| Devices | A name and identifier per machine you use premium apps on, to enforce the device limit on your plan. |
| Cloud sync documents | If you turn cloud sync on, your app configuration (commands, overlays, event handlers, counters, gift sounds: so it follows you between machines. Recent versions are kept so a bad change can be rolled back. Your stream history and viewer records are backed up separately: see Profile backups. |
| TikTok account | The TikTok username you sign in with in the Hub, and the one you choose to watch, so support can find your account and your Hub can be matched to it. |
| Installation records | Per Hub install: a generated id, the machine name you gave it, operating system, app version, the Truly apps installed and their versions, when it last checked in, and the IP address it last connected from. If you turn on the mobile app, also the address and access code your phone uses to reach the Hub on your home network. |
| Diagnostics | Error reports and technical traces the Hub sends so faults can be found: timestamps, severity, messages, stack traces and version numbers. Detailed tracing is off unless we turn it on for your account while investigating a problem; a detailed trace can include the names and chat lines of viewers involved in the error. |
| Social features | If you use them: your display profile, your friends list, and anything you share with a friend. Shared bundles are deleted automatically after 14 days. |
| Agency membership | If you join an agency: your membership and role. The agency's owners and managers can see your username, email address, when you joined, whether your email is verified, and your plan and its status. See Agencies in our Terms. |
| Purchases | Theme purchases and licences, kept as a record of what you own and for accounting. Each paid theme file carries your account ID, to discourage sharing. |
| Discord bot | If you add the Truly bot to a Discord server: its settings, and the points, links and birthdays it keeps for your members. See our Discord Privacy Policy. |
| Support messages | What you write in a contact or feature-request form, plus the Discord handle you give us if you want a reply there. |
| Profile backups | If cloud sync is on, Power Stream also backs up each profile's stream history (the chat and event log of each stream), loyalty points, viewer records and viewer stats, so a reinstall or a new PC does not lose them. See Backups. |
| Voice usage | For each line spoken in one of our voices: which voice, what it was for, and how many characters, so we can meter your plan. Not the text itself. |
When the narrator or another feature speaks a line in one of our voices (the Premium and Free voices in Power Stream), the Hub sends that line to our service, which passes it to a speech provider and returns the audio. The line can include a viewer's chat message and name if you have chosen to have chat read aloud. We do not store the text; the provider receives it only to turn it into speech. TikTok's own voices are made directly between your computer and TikTok, and do not pass through us.
Profile backups are encrypted, but with a key we hold, so we are able to open them. We only do so to diagnose and fix problems: to investigate an error or bug, whether you reported it or our diagnostics picked it up, and to work out and test the fix. We do not use backups to learn about you or your viewers, to build profiles, for marketing or for anything else, and we never share them. Every time a backup is opened it is recorded in our internal audit log.
We never see or store your card details. Payment is handled entirely by our payment provider on their own pages.
We receive from them only what we need to run your subscription: a customer and subscription reference, the plan, the status, and the renewal date.
We use service providers in these categories. They process data on our behalf, under our instructions, and for no purpose of their own.
We use no advertising networks and no third-party analytics. If you want to know which companies handle your data, write to support@trulystupid.dev and we will tell you.
Email support@trulystupid.dev from the address on your account and we'll delete it.
Deleting your account cancels any subscription and permanently removes:
We keep a record of what you bought where tax and accounting law requires it, no longer linked to your name or email. Diagnostics and installation records are unlinked from you, as described above. Copies in our database backups are overwritten within 14 days.
Anything stored on your own computer stays there. To remove it, uninstall Truly Hub and delete its data folder.
If you are in the UK or the EEA you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, and to receive a copy in a portable form. Write to support@trulystupid.dev and we will respond within one month.
If you think we have handled your data badly, you can complain to your data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk).
Our service and database are hosted in London. Some providers listed above operate internationally, so data may be processed outside the UK or EEA under the safeguards those providers offer, such as standard contractual clauses.
Traffic is encrypted in transit with HTTPS. The database is encrypted at rest. Passwords are stored only as one-way hashes, and tokens and two-factor secrets are encrypted. Two-factor authentication is available on every account and is required for remote access to your Hub. Only our own staff can reach account data, and only to provide support and fix problems.
Our products are for people aged 18 or over. We don't knowingly keep an account for anyone younger: if we learn of one, we delete it.
If this policy changes materially we will update the effective date above and, where the change affects how your data is used, tell you in the app or by email.
Questions, data requests or complaints: support@trulystupid.dev.