Privacy & security FAQ
trill records what you watch so you can learn from it. Here’s exactly what that means for your data, in plain language.
When does trill listen?
Only after you press Start, and only until you press Stop or reach your plan’s session length. The Chrome extension shows a red REC badge while it records, and your iPhone shows its microphone indicator.
What does it record?
- Chrome extension, web and desktop app: the audio of the tab or screen you choose, plus your microphone only if you turn it on. Video is never recorded, and nothing is screenshotted.
- Netflix and YouTube: trill also reads the show’s subtitle track and keeps only the lines that played while you recorded.
- iOS app: your iPhone’s microphone, so it can hear what’s playing on your TV. That audio stays on your phone.
- Shadowing practice: your own voice takes stay on your device and are never uploaded.
Who can see my recordings?
Only you. trill has no sharing features, no public profiles and no team workspaces. Every recording, transcript, note and study item is tied to your account, and our database only returns it to you. Family sharing on Maestro shares the plan, not anyone’s recordings.
We don’t look at your content. We only would to help with a support request you send, to keep trill secure, or where the law requires it.
Is my data used to train AI?
No. We don’t train models on your content, and our AI and speech-to-text providers process it only to return results to you. They don’t use it to train their models.
How long is audio kept?
- Full recordings from the web app, desktop app and Chrome extension are kept for 30 days so you can replay the whole episode.
- After 30 days, trill keeps only short clips of the sentences you study (your shadowing deck and the lines your vocabulary, grammar and expressions come from) and deletes the full recording.
- Transcripts, notes, study material and clips stay until you delete the session or your account.
- iOS recordings never leave your phone.
Where is my data stored?
With our infrastructure providers, Supabase (database and sign-in, in the United States) and Cloudflare (audio storage and hosting). The full list of providers is on our Subprocessors page.
Is it encrypted?
Yes. Everything travels over HTTPS (TLS), and our providers encrypt stored data at rest. Access is limited per account, so a signed-in user can only ever read their own rows and files.
What can the Chrome extension access?
- Tab capture: to record the audio of the tab you start trill on.
- Streaming sites you use: to read the page title, episode and subtitles. Any other site is asked for one at a time, and only when you record there.
- Storage: to remember your session and which sites you’ve recorded on. This stays in your browser.
- Identity: to sign you in with Google.
- Notifications (optional): to tell you an episode is almost over.
Can I delete everything?
Yes. Deleting a session in trill removes its transcript, study material and audio from our servers. To delete your whole account, email support@trill.ing from the address you sign in with, and we’ll delete it within 30 days.
How do I report a security issue?
Email support@trill.ing with “Security” in the subject. Please give us a reasonable chance to fix it before sharing it publicly. We read every report.