TILLAR TECHNOLOGIES

AI Reliability Apps Privacy Policy

Version 2026-09-05.2 · Effective September 5, 2026

Tillar Technologies LLC publishes AI Claim Checker, Compliance Overlay, Conversation Anchor, AI Drift Guard, FreshReceipt, Instruction Monitor, Knowledge Freshness Guard, Memory Consistency, Model Compare, Source Change Alerts, AI Work Audit, and AI Reliability Suite. This policy covers their shared service. Pressure Wash Estimator operates offline and has its own privacy policy.

Information we process

Google account identifier, verified email, and display name for account access; protected session credentials; the accepted Terms version, app and acceptance time.
User-selected Drive file identifiers, names, version numbers and modification times; encrypted OAuth credentials for the selected-file integration.
Notification tokens after an explicit notification opt-in, plus consent and delivery state.
Google Play product and subscription state, encrypted purchase tokens and a token fingerprint used to prevent fraudulent duplicate entitlement. We do not receive your full payment-card or bank credentials.
Content you submit to a chosen checking workflow: responses, evidence, questions, prompts, source labels/dates, compared outputs, project and workspace names, anchors, memories, instructions, framework controls, mappings, proposed actions, connector destinations and review decisions.
Results and requested history: claims, findings, comparisons, freshness/consistency signals, audit and incident records, remediation suggestions and usage state. Sensitive Data Guard retains check findings/counts, not the raw text submitted to that guard.
Operational request/error records needed for service security and availability, and messages you choose to send to support.

Selected files and user control

FreshReceipt checks file version metadata. Its freshness feature does not need the contents of your original Drive files. Separately pasting content into another check submits that content to our backend. We do not automatically monitor your conversations with ChatGPT, Claude, Gemini or other AI services. You select the content, sources and actions. Do not submit material you lack permission to process.

Google Drive access is optional and uses the selected-file scope. You can disconnect it in FreshReceipt and revoke access through your Google account. Disconnect invalidates pending authorizations and removes the app's saved credentials and synchronization state. Original Google Drive files are not deleted. Notifications are optional and can be disabled in the app or Android settings.

Purpose and service providers

We use data to run your requested checks, authenticate you, verify subscriptions, retain the projects/history you request, monitor selected sources, deliver opted-in alerts and transactional renewal notices, secure the service, provide support and complete deletion. We do not sell personal data or use submitted check content for advertising or model training.

Google processes identity verification, selected Drive access and Google Play transactions. Firebase Cloud Messaging processes notification delivery. Namecheap provides our server hosting. These providers receive the information necessary for their functions under their applicable service terms. They may independently retain their own account, security and transaction records; deleting a Tillar account does not delete your Google account or Google purchase history. We may also disclose limited data when required by law, to protect rights/security, or during a business transfer with legally required notice.

Security

Service traffic uses HTTPS. Android session credentials use Keystore-backed encryption, and app backups exclude those credentials. Server OAuth and purchase tokens and managed database backups are encrypted. Access checks separate customer accounts and subscription capabilities. No security measure guarantees absolute protection; contact us promptly about suspected unauthorized access.

Retention

Account-linked content, projects and requested audit history remain while the account is active or until you use available deletion controls.
Verified account deletion removes the primary user record, sessions, app content, linked integrations, notification tokens and operational subscription records. The normal automated action is immediate; an assisted request is completed within 30 days, subject to a documented lawful exception.
Our encrypted database backups expire within 35 days. A separate pseudonymous deletion ledger prevents deleted accounts from returning when a backup is restored. Restored data is reconciled against that ledger before service access resumes.
Operational logs expire within 90 days and temporary service exports within seven days. Support correspondence is retained only as needed to resolve the case and meet a documented dispute or legal obligation.
Minimal consent, purchase-ownership, billing, refund, renewal-notice and security evidence may be retained for up to seven years for transaction records, consent, disputes, fraud prevention or legal obligations. Retained technical receipts use pseudonymous references where possible and exclude submitted check content and authentication tokens.
Records under a specific legal hold are restricted to that purpose and deleted when the hold ends. Independent provider records follow the provider's policy; we remove app-controlled credentials and request provider deletion where applicable.

Account deletion and subscriptions

Use Delete account in the app or the public account-deletion page. Deletion applies across the shared AI Reliability family. Original Drive files and copies you exported to other services remain under your control. Deleting an account or uninstalling an app does not cancel Google Play subscriptions. Cancel in Google Play separately to stop renewal.

Eligibility, changes and contact

Our English-language launch offering is for adults age 18 or older in the United States, Australia, New Zealand and Singapore where enabled in Google Play. We will update this policy when practices change and obtain further consent where required.

International processing and privacy requests

Tillar Technologies LLC operates in Florida, United States. Your selected content and account data are processed on our U.S.-based service; Google and our other named providers may process necessary service data in other countries. Foreign laws may differ from those where you live. We remain responsible for our processing and use contractual, access-control and security safeguards for entrusted processing. We assess applicable overseas-disclosure and comparable-protection requirements before enabling a market or changing a processor; accepting this policy is not a waiver of those protections.

James Tillar is our privacy officer and data-protection contact at james@tillartechnologies.com. Contact him to request access, correction, deletion, withdrawal of optional integration/notification consent, or to raise a complaint. We verify identity proportionately and respond within the applicable legal deadline; if additional time is permitted and needed, we explain why. Withdrawing information necessary to supply a feature may prevent that feature from working, but optional consent is not required for unrelated features. Applicable exceptions to a request will be explained rather than silently refused.

You may also contact the privacy regulator in your jurisdiction, including the Office of the Australian Information Commissioner, New Zealand's Office of the Privacy Commissioner or Singapore's Personal Data Protection Commission. These complaint rights are not limited by our Florida location or by the Terms. No submitted check content is used for advertising or model training.