How TrueOne collects, uses, protects, and — uniquely — deletes your data, including our verify-and-discard model for identity documents.
Last updated: July 19, 2026 · Applies to jointrueone.com, the TrueOne waitlist, TrueOne events, and the TrueOne platform as it launches.
Most privacy policies exist to protect the company. This one exists to explain a promise: TrueOne verifies who you are, then deletes the evidence. Because our entire platform is built on identity verification, we hold ourselves to a stricter privacy standard than platforms that never learn who their users are. Here is exactly what we collect, why, for how long, and what we will never do.
To join TrueOne, every member completes government-ID verification and a live selfie check. Here is precisely what happens to that data:
During verification: your ID document and live selfie are processed — by us and/or a specialist identity-verification provider acting under contract — solely to confirm that (a) the document is genuine, (b) the face in the live check matches the document, and (c) you meet the age requirement.
After verification: the ID images and biometric data used for the check are permanently deleted. What we retain is the outcome, not the evidence: a flag that you are verified, your verified first name, your date of birth (to display accurate age), and a one-way cryptographic hash that prevents banned users from re-verifying with the same document. A hash cannot be reversed into your document.
What this means: there is no vault of member IDs or face scans at TrueOne to breach, subpoena in bulk, or sell. We cannot lose what we do not keep.
You provide: waitlist details (name, email, city); account and profile information when the platform launches (photos, bio, preferences); communications you send us; and event registrations. Verification data is handled exclusively as described in Section 1.
Collected automatically: standard technical data — IP address, device and browser type, pages visited, and referral source — via server logs and privacy-respecting analytics, used for security and to improve the site. We do not use invasive cross-site advertising trackers.
From others: if you interact with our social pages or arrive via a partner link, we may receive basic referral information. We do not buy data about you from brokers.
To operate the waitlist, site, events, and platform; to verify identity as described above; to notify you about launch, events, and material changes; to enforce our Community Guidelines and protect members from fraud and abuse; to comply with legal obligations; and to improve our services. That is the complete list.
We never sell your personal information. We never store ID documents or biometric templates after verification completes. We never display your last name, exact birthdate, email, or contact details to other members. We never use your private messages to train advertising profiles. And we never permit anonymous accounts — which is a privacy feature for everyone you might meet.
We share data only with: service providers under contract who help us operate — identity-verification processing (bound to the same delete-after-verify rule), email delivery, form processing, hosting and infrastructure — and only what each needs; event venues receive attendee counts, never your documents; legal authorities when validly required by law or to prevent imminent harm — noting that our verify-and-discard model means bulk identity data does not exist to produce; and a successor entity if TrueOne is ever acquired, under this policy's commitments, with notice to you.
ID images and biometrics: deleted upon verification, typically within minutes, always within 7 days even in edge cases requiring manual review. Waitlist data: until launch plus a reasonable transition, or until you ask us to delete it. Account data: while your account is active and for a short period after closure for fraud prevention. The ban-hash from Section 1: retained indefinitely — it is the mechanism that keeps banned members out and contains no recoverable personal data. Logs: rotated on standard short schedules.
Wherever you live, we honor the substance of modern privacy law: access (ask what we hold about you), correction, deletion (of everything except the irreversible ban-hash and records law requires us to keep), portability, and objection to specific processing. Florida residents have these rights under Florida law; California residents under the CCPA/CPRA; EU/UK visitors under GDPR. Exercise any of them by emailing hello@jointrueone.com — we respond within 30 days and never discriminate against you for asking. You can leave the waitlist or unsubscribe from any email via the link in its footer.
We use encryption in transit, restricted access controls, reputable infrastructure providers, and — above all — the structural security of minimal retention: the most sensitive data we touch is deleted by design. No system is perfect; if a breach ever affects your personal data, we will notify you and regulators as the law requires, promptly and plainly.
We use essential cookies to make the site function and lightweight analytics to understand aggregate usage. We do not deploy third-party advertising cookies. Your browser's controls and Do-Not-Track settings are respected for anything non-essential.
TrueOne is strictly 18+. We do not knowingly collect data from anyone under 18, and our ID verification is specifically designed to prevent minors from creating accounts — one of its most important functions. If you believe a minor has provided us data, contact us immediately for deletion.
If we change this policy, we will update the date above and, for material changes — especially anything touching the verify-and-discard model — notify waitlist members and account holders by email before the change takes effect. The verify-and-discard commitment is foundational: any weakening of it would be announced loudly, never buried in an update.
Privacy questions, rights requests, or concerns: hello@jointrueone.com or our contact page. We read everything.