Triunfel.ai Privacy Policy

Effective date: October 20, 2026 Last updated: October 20, 2026

This Privacy Policy explains how Triunfel LLC ("Triunfel," "we," "us," or "our") collects, uses, shares, and protects information when you use the Triunfel.ai website at https://triunfel.ai, the Triunfel.ai iOS app, and related services (together, the "Service").

By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Service. This Privacy Policy is part of, and should be read with, our Terms of Service.

1. Summary

• What Triunfel.ai does: It helps field service technicians identify likely replacement part numbers for medical equipment from a photo or a typed model/description, and points to a reference in the service manual.
• What we collect: Your account email and password (stored only in hashed form), the photos and text queries you submit, the results we return, basic usage and device/log data, and (in the future) limited billing information from our payment processor.
• What we do with it: Run the Service, identify parts, keep accounts secure, provide support, and improve reliability.
• AI processing: Photos and queries are sent to a third-party AI model provider (currently xAI) to identify parts. Under its API terms, that provider does not use our API data to train its models.
• No selling: We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.
• Do not upload patient information: The Service is not designed for protected health information (PHI). Do not upload photos or text that show or identify patients.
• Your choices: You can access, correct, export, or delete your data by contacting us, as described in Section 8.

2. Who We Are and How to Contact Us

Triunfel LLC is a New York limited liability company and is responsible (the "controller") for the personal information described in this policy.

• Mailing address: Triunfel LLC, Bronx, New York
• Privacy questions and requests: privacy@triunfel.ai
• General support: support@triunfel.ai

3. Important: Not a Medical Device, and No Patient Information

Triunfel.ai is a parts reference tool for equipment servicing. It is not a medical device, does not provide medical or clinical advice, and is not intended to diagnose, treat, or monitor any patient or condition.

You must not upload protected health information (PHI) or any information about patients, including:

• photos showing patients, patient faces, or any part of a patient's body;
• photos of screens, labels, wristbands, charts, or documents showing patient names, dates of birth, medical record numbers, or other identifiers;
• text queries containing patient names or other patient details.

Triunfel is not a HIPAA "covered entity," and we do not act as a "business associate" for any covered entity. We do not sign business associate agreements (BAAs). Please crop or frame photos so they show only the equipment or part. If we become aware that content containing patient information was uploaded, we may delete it without notice.

4. Information We Collect

4.1 Information you give us

4.2 Information collected automatically

• Usage data: Features used, lookups performed, pages or screens viewed, timestamps, and results returned.
• Log and device data: IP address, browser type, operating system, device model, app version, language, referring URL, and crash or error reports.
• Approximate location: Inferred from IP address (for example, country or region) for security and fraud prevention. We do not collect precise GPS location.
• Photo metadata: Image files can contain embedded metadata (EXIF), such as the date taken, device type, and sometimes GPS coordinates. We do not use that metadata to locate you.

4.3 Cookies and similar technologies

We use a small number of cookies and similar technologies (such as local storage in the browser and secure token storage in the app):

• Strictly necessary cookies/tokens: to log you in, keep you signed in, and protect your session (for example, against cross-site request forgery). The Service cannot work without them.
• Preference cookies: to remember settings such as your language or display preferences.
• Analytics: We do not currently use third-party analytics. If we add analytics later, we will use it only to understand overall usage and improve the Service, not for advertising, and we will update this policy.

We do not use advertising cookies, and we do not allow third-party ad networks to track you on the Service. The iOS app does not track you across other companies' apps or websites, as "tracking" is defined by Apple, and does not use the Apple advertising identifier (IDFA).

You can control cookies through your browser settings. Blocking strictly necessary cookies will stop you from logging in.

Global Privacy Control / Do Not Track: Because we do not sell personal information or share it for targeted advertising, there is nothing to opt out of. Even so, we treat a Global Privacy Control (GPC) signal as a valid opt-out request where the law requires it. Our handling of other "Do Not Track" browser signals may vary because no common industry standard exists.

4.4 Information from third parties

• Payment processor (future): If we offer paid plans, payments on the website will be processed by Stripe. Stripe collects your card details directly. Triunfel never receives or stores your full card number or security code. We receive limited information such as your name, billing email, the last four digits and brand of your card, expiration date, billing country/postal code, and transaction status.
• Apple (iOS in-app purchases, future): If you buy a subscription through the App Store, Apple processes the payment. We receive only transaction and subscription status information from Apple, not your payment card details.
• Sign-in providers: We do not currently offer sign-in through Apple, Google, or another third party. If we add it, this policy will describe the information we receive, such as a name and an email address.

5. How We Use Information

We use personal information to:

1. Provide the Service, including creating and managing your account, processing photos and queries, identifying likely part numbers, and returning service manual references.
2. Keep the Service secure, including authenticating users, preventing fraud and abuse, enforcing rate limits, and investigating misuse.
3. Provide support and respond to your requests and questions.
4. Communicate with you about your account, security alerts, changes to our terms or policies, and (if you opt in) product updates. You can unsubscribe from non-essential emails at any time.
5. Maintain and improve the Service, including debugging, measuring performance, and improving the accuracy of results. Where practical we use aggregated or de-identified data for this. We do not use your uploaded photos to train AI models.
6. Process payments and manage subscriptions (future).
7. Comply with law and enforce our Terms of Service, and protect the rights, safety, and property of Triunfel, our users, and others.

We do not use your information to make decisions about you that produce legal or similarly significant effects based solely on automated processing.

6. How We Share Information

We do not sell your personal information. We do not share it for cross-context behavioral advertising, and we do not rent it to anyone.

We share personal information only as follows:

6.1 Service providers (subprocessors)

We use trusted vendors to run the Service. They may process personal information only on our behalf and under our instructions, and they are required by contract to protect it with safeguards at least as protective as those described in this policy. The current categories are:

We may change service providers over time. We will update this policy when we do.

About AI processing: When you submit a photo or query, it is sent to our AI model provider to generate a result. Under the provider's current API terms, it does not use our API inputs or outputs to train its models. It may keep them temporarily (currently up to 30 days) for abuse and misuse monitoring and then deletes them, unless a longer period is required by law.

6.2 Legal and safety reasons

We may disclose information if we believe in good faith that it is reasonably necessary to: (a) comply with a law, regulation, subpoena, court order, or other legal process; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Triunfel, our users, or the public.

6.3 Business transfers

If Triunfel is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honor this Privacy Policy or give you notice and any choices required by law.

6.4 With your consent

We may share information for other purposes when you direct us to or give us consent.

6.5 Aggregated or de-identified information

We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you. We will not try to re-identify de-identified information, except as allowed by law.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law.

We may keep information longer if needed to resolve disputes, enforce our agreements, comply with a legal obligation (such as a litigation hold), or investigate security incidents or abuse.

8. Account Deletion and Data Requests

8.1 Deleting your account

You can ask us to delete your account at any time by emailing privacy@triunfel.ai from the email address on your account. When account deletion is available in the iOS app or on the website, you will also be able to start it there.

When your account is deleted, we delete or de-identify your account information, uploaded photos, and query history within 30 days, except for information we must keep for legal, tax, security, or fraud-prevention reasons, and data in backups (see Section 7).

Subscriptions: Deleting your account does not automatically cancel a subscription bought through the Apple App Store. You must cancel it in your Apple ID settings. For a subscription bought on our website, email privacy@triunfel.ai and we will cancel it.

8.2 Deleting individual items

To delete an individual upload or lookup, email privacy@triunfel.ai from the email address on your account.

9. Your Privacy Rights

9.1 Rights available to all users

Wherever you live, you can ask us to:

• Access the personal information we hold about you and get a copy in a portable format;
• Correct inaccurate information;
• Delete your information or your account;
• Opt out of marketing emails, using the unsubscribe link or by contacting us.

9.2 How to make a request

Email privacy@triunfel.ai or write to our mailing address in Section 2. To protect your account, we will verify your request, usually by confirming that you control the email address on the account. You may use an authorized agent where the law allows. We may ask the agent for proof of authorization and may ask you to confirm your identity directly.

We will respond within the time required by law (generally 45 days under most U.S. state laws, which may be extended once where permitted; one month under the GDPR). We will not discriminate against you for exercising your rights. If we deny your request, we will explain why. Where the law gives you a right to appeal, you may appeal by replying to our decision or emailing privacy@triunfel.ai with the subject "Privacy Appeal." If your appeal is denied, you may contact your state Attorney General.

10. U.S. State Privacy Rights (Including California)

Several U.S. states, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others, give residents certain privacy rights. Some of these laws may not yet apply to a business of our size, but we extend the rights described in this section to all U.S. users.

10.1 Categories of personal information we collect (prior 12 months)

Sources: You; your device; our service providers (for example, payment processors). Purposes: The business purposes described in Section 5. Retention: As described in Section 7.

10.2 No sale or sharing; limited use of sensitive information

We have not sold personal information and have not "shared" it (as that term is used in California law for cross-context behavioral advertising) in the past 12 months, and we do not do so now. We do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information (such as account login credentials) only for purposes allowed by law, such as providing the Service and keeping it secure, so the "right to limit" does not apply.

10.3 Your rights

Depending on your state, you may have the right to:

• Know/access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the third parties to whom we disclosed it;
• Delete personal information we collected from you;
• Correct inaccurate personal information;
• Portability, meaning a copy of your data in a usable format;
• Opt out of sale, sharing, targeted advertising, and certain profiling (we do not do these);
• Non-discrimination for exercising your rights;
• Appeal a denial of your request.

To exercise these rights, see Section 9.2.

10.4 Other California notices

• Shine the Light (Cal. Civ. Code § 1798.83): We do not disclose personal information to third parties for their own direct marketing purposes.
• Financial incentives: We do not offer financial incentives in exchange for personal information.

11. Users in the European Economic Area, UK, and Switzerland (GDPR)

The Service is designed for users in the United States. If you use it from the EEA, the UK, or Switzerland, this section also applies.

Controller: Triunfel LLC (contact details in Section 2). We have not appointed an EU or UK representative.

Legal bases for processing:

• Performance of a contract: to provide the Service you asked for (account, lookups, support, billing).
• Legitimate interests: to secure the Service, prevent fraud and abuse, and improve reliability. We balance these interests against your rights.
• Consent: for optional analytics cookies (where required) and marketing emails. You can withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, and other legal requirements.

Your rights: You have the right to access, correct, delete, restrict, or object to the processing of your personal data; the right to data portability; and the right to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local data protection authority.

International transfers: We and our service providers are based in, and process data in, the United States. When we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or a provider's certification under the EU-U.S. Data Privacy Framework, where available.

12. Children's Privacy

The Service is a professional tool and is not directed at children. You must be at least 18 years old to create an account (see our Terms of Service). We do not knowingly collect personal information from anyone under 16, and we never knowingly collect it from children under 13. If we learn that we have collected personal information from a child under 16, we will delete it promptly. If you believe a child has given us personal information, contact privacy@triunfel.ai.

13. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These include encryption in transit (HTTPS/TLS), hashed passwords, access controls that limit who can reach production data, and secure storage of authentication tokens on your device. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential and for telling us promptly about any unauthorized use of your account.

If a data breach affects your personal information, we will notify you and the relevant authorities as required by applicable law, including New York's SHIELD Act.

14. Third-Party Links and Manufacturer Documents

The Service may link to or reference third-party websites, manufacturer documentation, or parts suppliers. We are not responsible for the privacy practices of those third parties. Please review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above. If the changes are material, we will give you notice before they take effect, for example by email or an in-app notice. Where the law requires consent for a change, we will ask for it.

16. Contact Us

• Triunfel LLC, Bronx, New York
• Privacy: privacy@triunfel.ai
• Support: support@triunfel.ai
• Website: https://triunfel.ai