Skip to content
Lyncat Tria

Privacy policy

Last updated: October 21, 2026

Tria is built so that your documents leave your Mac as little as possible. This page explains what data each part processes: the website, the app with your own key, the app with Tria AI, and purchases.

Who is responsible

Startcat App Development, S.L. (“Start.cat”), tax ID (NIF) B65745622, with its registered address at Av. Alella, 23, 08328 Alella (Barcelona), Spain. You can write to us at hola@lyn.cat about anything to do with your data.

This website

  • It uses no cookies and no third-party resources: fonts and images are served from our own server.
  • To know how many visits it gets and which buttons are used (such as “Tell me when it’s out”), we use Umami, an analytics tool installed on our own server in the EU (analytics-niu.lyn.cat). It uses no cookies and stores nothing in your browser, it doesn’t keep your IP address and it doesn’t let us know who you are: it only gives aggregate figures (pages viewed, which site you came from, country, language, browser and device type). The legal basis is our legitimate interest in knowing whether the website does its job.
  • The web server doesn’t keep a log of visits. If a request fails, on the website or with Tria AI, it notes the IP address, the date and the page or call requested so we can fix it (legitimate interest: keeping it working and secure). Those notes are deleted after 12 months at most.
  • If you write to us asking to be told when Tria comes out, we use your email address only for that and delete it after letting you know. The legal basis is your consent, and you can withdraw it at any time by writing to us.

The app with your own key

If you use Tria with your own Anthropic or OpenAI key, Start.cat receives nothing: not your documents, not usage data, not telemetry. The app sends just what’s needed from each document directly to your provider, which handles it under its own terms. Your key is stored in your Mac’s Keychain.

The app with Tria AI

When you use Tria AI, the app sends each document to our server in the European Union, which passes it to Claude on Amazon Bedrock, also in the European Union. Neither our server nor Amazon stores the content.

What is sent for each document: your rules (TRIA.md) and your profile (PERFIL.md), the list of your folders with a few example names, the text extracted from the document (at most about 12,000 characters from the first 3 pages), its original name and dates and, only if it has no readable text, an image of its first 2 pages.

What we store:

  • your Apple purchase identifier (appTransactionID), with its environment (sandbox or production) and the date you started using Tria AI, whether you have unlocked Tria, and your document balance;
  • the purchases already added to your balance, and whether they were refunded;
  • during the trial, a fingerprint (a digest that can’t be used to rebuild the document) of each document read, 20 at most;
  • for each document deducted from your balance or your trial, its fingerprint for 2 days at most, so you aren’t charged twice if the app asks for it again right away;
  • how many documents you read each day and how many times you use “Ask Tria” and rule suggestions, for the daily limits (these counts are deleted after a week);
  • a log of each request (date, type, model, tokens, estimated cost and whether it was deducted from your balance or your trial), deleted after 90 days;
  • if a call fails, the web server’s note with the IP address, the date and the call (as explained under “This website”), deleted after 12 months at most.

Anything without its own time limit is kept until you delete it.

Nothing else: not the content, not the file names, not your rules, not your profile.

See and delete: in the app’s Settings you can see the main things we store about you, save them to a file and delete them with one button. For a complete copy, including each row of the request log, write to hola@lyn.cat. Deleting your data also removes any balance you had left. All that remains of each purchase is Apple’s transaction number, the product, the environment, its dates and whether it was refunded (with what the refund took), without your identifier and with 0 documents: so it can’t be added to any balance again, a later refund takes nothing from anyone and, if you come back, the app can give you back your unlock (legitimate interest: preventing abuse). It’s kept for as long as the service exists. The server’s backups are renewed daily, and deleted data disappears from them within 30 days at most.

Why, and on what basis: to provide the service you bought (performance of a contract) and to prevent abuse and keep the service secure (legitimate interest). The daily counts and the request log also help us understand how the service is used and what it costs, and review its prices (legitimate interest). We look at this data in aggregate, without singling anyone out, and you can object to this use by writing to us at hola@lyn.cat.

Purchases

Purchases are handled by Apple. Apple tells us what you bought and under which identifier, but not your name, your email address or your payment details.

Who helps us

  • Amazon Web Services (Amazon Bedrock, Stockholm region): reads the documents to suggest the name and the folder, without storing them.
  • Clouding S.L. (Spain): hosts our server in the European Union.
  • Backblaze (European Union region): stores the encrypted backups.

They all process the data in the European Union and only for this.

Your rights

You can ask us for access to your data, to correct or delete it, to restrict its use or to give it to you in a format you can take elsewhere, and you can object to us processing it. The quickest way is to use the buttons in Settings; otherwise, write to us at hola@lyn.cat. If you think we haven’t handled it properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Changes

If anything on this page changes, we’ll publish it here with its date.