Privacy Policy

Who is responsible

Jakob Possert-Bienzle, EvoBioSys, Vienna

See the imprint. Questions about your data: connect@evobiosys.org.

On your phone

Most of it stays there

Your web of people, notes, inventory, transcripts, recordings and settings are kept in the browser storage of your own phone. We do not receive them. Deleting them is your choice: "Reset this phone" in Settings removes everything TrustWeb stored on it.

Through our server

What passes through the server in Switzerland

Our server runs at Infomaniak, in Switzerland. Several things pass through it, each one only because you used the matching feature:

• The relay. It carries messages between phones: asks, answers and the links to shared meetings. They are encrypted on one phone and opened on the other, so the relay cannot read them. It can see routing details (which address a message is for, from which network address it was sent, and when). The one exception is the very first connection step between two phones, sent before they share a key: that message is not encrypted.
• Encrypted backup. A backup is encrypted on your phone before it is uploaded. The server keeps ciphertext it cannot read, with its size and when it was last written.
• Sending a meeting. The notes and transcript are encrypted with a fresh key and stored on the same server. The key is only in the link you send, and that link reaches the other person as an encrypted message, so the server never holds the key.
• The demo inventory. A demo account can be connected to "Demo inventory", a small always-on TrustWeb contact that runs on this server and holds made-up lines. An ask sent to it is opened there and matched against those lines. It is also passed on, with the name you use in the demo, to the phone of the person who runs it (named in the imprint), who can answer it live or not at all. Its log keeps counts and outcomes, never the text of an ask or a name.
• Hosted recordings. Your recordings are stored on the server as ciphertext it cannot read, with each one's size, length and when it was last written or opened, counted against your allowance. A recording that is neither written nor opened for 90 days may be removed.
• Server transcription (coming, switched off today). It is switched off today, and nothing described here happens. When it is switched on and you choose it, the audio of a recording leaves your phone. It goes through our server to OpenRouter, a service that passes it to an inference provider in the United States (OpenRouter picks which one; we cannot). We set OpenRouter's data policy to "deny", which should limit the choice to providers that do not store the audio or train on it; we rely on that setting and on the providers' own statements, and we cannot check what they do. Unlike backups and hosted recordings, this audio is not encrypted for the server, OpenRouter or the provider: they handle it as audio. Our server keeps neither the audio nor the text (the audio sits in a temporary file only while it is being transcribed); it counts the minutes used. Free while we test: up to 10 hours of audio per person, within a daily budget shared by everyone. The text comes back to your phone, and the times of the sentences may be approximate.
• Network addresses reach the server with every request. TrustWeb's own services (backup, hosting, transcription, feedback) use them only in memory, to limit abuse; the web server writes no access log.

This website

What it does when you visit

• No analytics, no tracking cookies, no advertising.
• Typefaces load from Google Fonts. That means your browser contacts Google, and Google receives your network address.
• As of 2026-10-06 the web server is not configured to write access logs for this site.
• The waitlist form sends your email address to our server, only when you press the button. The optional newsletter box sends it to our newsletter service.
• The feedback form sends what you type, the kind of message and the page you wrote from. It sends your email address only if you tick a box. All of it is stored on our server in Switzerland with the time to the minute, in a file only the server can read. We do not store your network address or browser details. We read the messages by hand.
• The three boxes on the feedback form are all unticked, and your address is not sent unless you tick one. "Write back to me about this message": we keep your address so we can answer. "Notify me when it is ready": we keep it for one note when TrustWeb is ready. "Stay informed with our newsletter": we keep it, and our server passes it on to our newsletter service, which first sends you a confirmation email; you are on the list only after you click the link in it. You can ask us at any time to take you off. The newsletter service runs on our own server.

Third parties

Who else is involved

• Infomaniak, in Switzerland: hosting of our server, which holds the relay, backups and hosted recordings.
• OpenRouter and the inference provider behind it, in the United States: only for server transcription, only if it is switched on and you choose it. See above.
• Google Fonts: typefaces on this site.
• No advertising networks, no analytics providers.

Your rights

Access, deletion, complaint

You can ask us what we hold about you, and ask us to delete it, by writing to connect@evobiosys.org. Most of your data is only on your phone, where you control it. You can also complain to the Austrian data protection authority, the Datenschutzbehörde.

Status

An experimental first version

TrustWeb is an experiment. This page describes how it works on 2026-10-07 and will change as it does. The date above shows the version you are reading.