Skip to content
RRR
Sign in

Privacy Policy

Last updated:

This policy explains what personal data RRR collects, why, who sees it and what you can do about it.

1. Who we are

RRR (triple-r.app) is operated from Egypt and is the controller of the personal data described here. When our company is registered, this page will name it. Contact: hello@triple-r.app.

2. What we collect

  • Account: your email address, name, sign-in method (password, or Google sign-in), and the plan and language you choose.
  • Your content: uploaded views, renders and references, briefs, notes, materials, the images generated for you, and your approvals and ratings.
  • Credits and plan: your plan, how many credits you have left, and a ledger of credits used, returned and granted.
  • Usage records: for each AI call, when it happened, what it was for, which model and provider ran it, whether it worked, how long it took, token counts and cost, linked to your account and project. These records do not contain your images or your text instructions.
  • Quality records: for each image generated for you, the model used, its cost, automatic quality scores, your ratings and notes, and the text instructions (brief and prompt) behind it, so that we can measure and improve results and account for what they cost.
  • Waiting list and beta application: name, email, phone (if you give one), company, role, country, the software you use, what you want to do with RRR, a portfolio link, notes, how you found us, and the time and version of the consent you gave.
  • Messages you send us.
  • Technical data: IP address, browser and device details and request logs that our hosting and database providers create to run and secure the service.
  • Payment: nothing yet. When paid plans open, a payment provider will collect payment details; we will not store card numbers.

3. Why we use it

  • To provide the service you asked for: sign you in, run renders, keep your projects and credits. (Contract.)
  • To send service emails such as invitations, sign-in confirmation and password reset. We send no marketing email without your consent. (Contract; consent.)
  • To keep the service safe, prevent abuse, control cost and fix problems. (Legitimate interests.)
  • To measure and improve quality and to account for cost, using usage and quality records and, for beta participants who agreed to the beta terms, their images, ratings and notes. (Consent; legitimate interests.)
  • To review waiting-list applications and choose who to invite. (Consent; legitimate interests.)
  • To meet legal duties. (Legal obligation.)

4. AI processing and training

To make a render, RRR sends the images and the text instructions you choose to AI model providers. We use a gateway (OpenRouter) that routes requests to models such as Google's and Anthropic's, and call some providers directly. They process that content under their own terms, only to carry out your request, as far as their terms allow.

RRR does not train AI models on your content. On paid plans, your uploads and renders are never used to train AI models. On other accounts we will not use them for training without your separate permission. We will not publish your images or use them in marketing without your written permission for each image.

Our staff may look at your content to run the service, to investigate a problem you report and, for beta participants who agreed to the beta terms, to review quality, including the copies kept as evidence (see “How long we keep it”).

5. Who we share data with

We do not sell your personal data. We share it only with providers that help us run RRR, under contracts that limit what they may do with it:

  • Supabase: database, sign-in and file storage (Frankfurt, EU).
  • Vercel: hosting and the servers that run the app.
  • OpenRouter and the AI model providers behind it, and other model providers we call directly: image and text generation.
  • Resend: delivery of service emails.
  • A separate web platform that hosts the waiting-list form; entries are saved there first and then copied to RRR.
  • A payment provider, once paid plans open.

We may also disclose data when the law requires it or to protect rights and safety.

6. Where data is processed

Your account data and files are stored in the EU (Frankfurt). Our other providers may process data in the United States, the EU and other countries. Where the law requires it, we rely on the safeguards those providers offer, such as standard contractual clauses.

7. Cookies and local storage

RRR uses only what the site needs to work: the sign-in session (set by our authentication provider), your language choice (rrr.locale, up to one year), your price region (rrr.region, up to one year), and interface preferences and drafts kept in your browser. We do not use advertising or analytics cookies and we do not track you across other sites.

8. How long we keep it

  • Account, projects and files: while your account is active. When you delete a project, a space, a shot or an image in the app, it disappears from your workspace and its files are deleted from our storage, subject to the beta rule below. You can also ask us to delete your account and all its data; we do this promptly and within the time the law requires. Copies in backups disappear on the normal backup cycle.
  • During the beta: when you delete images in the app, we do not delete them from our side. The images generated for you and the source images of the shots they came from are moved to a restricted evidence area that only named staff can reach, and are kept to evaluate and improve RRR, together with the quality records below. We delete them when you ask us to, and in any case no later than twelve months after the beta ends. After the beta, deleting in the app deletes the files from our storage.
  • Quality and usage records (ratings, notes, quality scores, cost, model and usage figures, and the text instructions behind a render): kept after you delete the images, without the images and without any file link, to measure quality, run the service and account for cost. When your account is deleted they are detached from you: your name and email are removed, and so are the free-text notes and instructions; only figures and verdicts remain.
  • Waiting-list and beta applications: for as long as the beta and the waiting list run, and afterwards as an archive of decisions, unless you ask us to delete yours.
  • Messages: as long as needed to deal with your request.

9. Security

Files are kept in private storage, and database access rules limit each workspace's data to its members. Connections use HTTPS, and the admin area is limited to named staff accounts. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

10. Your rights

Depending on where you live (for example under Egypt's Personal Data Protection Law No. 151 of 2020 or the GDPR), you may have the right to access, correct or delete your data, restrict or object to its use, receive a copy, and withdraw consent at any time. Write to hello@triple-r.app; we will answer within the time the law requires. You may also complain to your data protection authority (in Egypt, the Personal Data Protection Center).

11. Children

RRR is for professionals aged 18 and over. We do not knowingly collect data from children; if you think we have, tell us and we will delete it.

12. Changes

We will update this page when our practices change, for example when paid plans open, and tell you by email or in the app about material changes.

13. Contact

Privacy questions and requests: hello@triple-r.app.