Truth-Check

Legal Notice & Privacy

Welcome to Truth-Check, an image and video certification and authenticity verification service. This page contains our Legal Notice, Terms of Service, and Privacy Policy, in accordance with French law. Last updated: April 5, 2026.

1. Legal Notice

1.1 Publisher

Truth-Check is operated by a sole proprietorship managed by Ben Azogui (SIRET 811 981 596 00034), with its registered office at 17B Avenue Jean Jaurès, 94100 Saint-Maur-des-Fossés, France.

Publication director: Ben Azogui.

Contact email: [email protected]

Data protection contact (GDPR): [email protected]

1.2 Hosting & Technical Stack

Application hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States.

Data hosting and storage: Firebase (Auth, Firestore, Storage) operated by Google Cloud. Data is hosted in the European region "eur3" (EU multi-region: Belgium & Netherlands), in accordance with the data residency policy selected during project setup. All data is encrypted in transit and at rest.

2. Terms of Service

2.1 Purpose of the Service

Truth-Check allows users to capture a photo or short video via the mobile application, generate a compressed version stored securely, record essential metadata (date, time, location, device) and the cryptographic fingerprint of the original file, and then create an authenticity certificate accessible via a unique link. The service only stores the compressed version, metadata, and the original file hash — the original file is never retained.

2.2 Content Creation and Deletion

Each certificate consumes a credit. Users can delete their photos or certificates at any time from the app. Deletion is permanent and irreversible.

2.3 Accounts and Authentication

Access requires a Firebase account (Google, Apple, or email authentication). Users agree to provide accurate information and to protect their credentials.

2.4 Credit System & Subscriptions

  • Essential Plan (free): 3 credits/month
  • Premium Plan: 20 credits/month
  • Pro Plan: 50 credits/month

1 credit = 1 certificate valid for 1 year (365 days). Credits are automatically renewed each month based on the active plan. Credits do not carry over: each month, the balance is reset to the amount provided by the plan, without accumulation of unused credits.

Certificates are renewable by all plans, including the free plan, at a cost of 1 credit per additional year. The Essential plan allows renewal of up to 1 year, the Premium plan up to 2 years, and the Pro plan up to 3 years per renewal.

Payments are managed via Stripe and, where applicable, via Apple in-app purchases. Users can cancel at any time through the Stripe customer portal. Any started period remains due.

2.4bis File Integrity

When a certificate is created, a cryptographic fingerprint (SHA-256 hash) of the original file is computed and stored with the certificate. This fingerprint allows subsequent verification that the original file has not been altered. The original file is not retained by the service; only a compressed version and metadata are stored.

2.5 Authorized Use

Truth-Check guarantees the integrity of data stored within the service, but cannot certify the authenticity of content prior to its capture. Users shall refrain from any illegal, fraudulent use, or use that infringes on the rights of third parties. Truth-Check reserves the right to suspend an account in case of violation of these Terms of Service.

3. Privacy Policy (GDPR)

3.1 Data Collected

  • Identity and contact information (email, Firebase UID).
  • Photo and video metadata (date, time, location, device).
  • Compressed version of photos and animated WebPs of videos, not commercially exploitable.
  • Cryptographic fingerprint (SHA-256) of original files.
  • Security logs and technical logs.
  • Payment data processed exclusively by Stripe (Truth-Check does not have access to it).

3.2 Purposes & Legal Basis

Data is used to provide the certification service, secure transactions, ensure traceability, comply with our legal obligations, and provide customer support. The legal basis is the performance of the contract, our legitimate interest in security, and, where applicable, consent (e.g., analytics cookies).

3.3 Sub-processors

Data may be processed by the following sub-processors, all GDPR-compliant:

  • Google Cloud / Firebase (Ireland/Belgium): authentication, database, file storage.
  • Vercel Inc. (United States, DPF certified): web application hosting.
  • Stripe Inc. (United States, DPF certified): payment processing — Truth-Check never accesses banking data.
  • SendGrid / Twilio (United States, DPF certified): transactional email delivery.
  • OpenAI (United States, DPF certified): audio transcription for certified videos (Whisper API) — audio files are not retained by OpenAI.

3.4 Storage & Security

Data is stored in Firebase Firestore and Storage, in the European region "eur3" (Belgium & Netherlands). All communications are encrypted in transit (TLS 1.3) and at rest (AES-256). Transfers outside the EU are governed by the Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs).

3.5 Retention Periods

  • User account: retained for the duration of service use, then deleted 3 years after last login.
  • Active certificates: retained for the chosen validity period (1 to 3 years, renewable).
  • Expired certificates: images are deleted 15 days after expiration. Certificate metadata (code, dates, status) is retained in anonymized form.
  • Deleted certificates: immediate and permanent deletion (images + metadata).
  • Security logs: retained for 12 months.
  • Payment data: managed and retained by Stripe in accordance with its own policies. Truth-Check does not store any banking data.

3.6 User Rights

Under the GDPR, you have the right to access, rectify, object to, restrict, port, and delete your data. To exercise these rights, contact [email protected]. You may also file a complaint with the CNIL (French Data Protection Authority).

4. Cookies

The website uses essential technical cookies (Firebase authentication) to maintain a secure session. Analytics cookies (e.g., Google Analytics) may be deployed in the future to improve the user experience; they will be subject to your prior consent.

5. Liability

  • Truth-Check guarantees the integrity of data stored within its system.
  • The service does not guarantee the authenticity of content prior to its capture by the user.
  • Truth-Check cannot be held liable for any fraudulent or illegal use of the service.
  • Deletion of a certificate or photo is permanent.

6. Intellectual Property

The name, logo, interface, texts and graphic elements of Truth-Check are protected by intellectual property law. Any reproduction without authorization is prohibited. Users retain all rights to their photos and content.

7. Applicable Law & Jurisdiction

These terms are governed by French law. Any dispute relating to the use of the service shall be submitted to the competent courts of metropolitan France.

Contact

For any legal questions or questions about your personal data:

  • Email: [email protected]
  • Address: 17B Avenue Jean Jaurès, 94100 Saint-Maur-des-Fossés, France