How Troth keeps it sealed.
Honesty needs a place where it's safe. Here is exactly where your marriage lives, who can see it, and what we haven't finished yet.
Where your marriage lives
In your own iCloud. Troth has no servers of its own. When one of you writes something, it's saved on your iPhone and synced through your iCloud account to your spouse's iPhone, the same way your Photos and Notes move between your devices today.
The two of you are joined by an iCloud share. That share is the room. Nothing in it goes anywhere except between the two phones in it, and Apple's infrastructure that carries it.
For the technically minded: Troth is built on Apple's CloudKit. There is no Troth database, no Troth account, and no copy of your room anywhere we can reach.
What Apple can and can't see
Your iCloud data is encrypted on the way to Apple and while it sits on Apple's servers. By default, though, Apple holds the keys. That's the same standing as your Photos, Notes and iCloud backups have right now: Apple could open them if it were required to.
Turn on Advanced Data Protection and that changes. Your keys stay on your devices, your Troth room is end-to-end encrypted, and Apple can't read it either. For a shared room, both of you need it on.
We recommend it, and the app will walk you through it. We don't require it, because it's your iCloud and your call. It takes about two minutes in Settings.
What we can see
Nothing that's in the room. There is no admin view, no support tool that opens a couple's data, and no back door. Clark and Carrie can't read your messages, your letters or your promises, and we've built it so that we can't be asked to.
What we do hold is the email address you gave us for the waitlist and the letters, which lives with our email provider. That's the whole list.
Troth doesn't analyze what you write, doesn't summarize it, doesn't suggest anything based on it, and doesn't feed it to an AI. It doesn't sell anything to anyone, and there are no ads. It keeps.
If Troth goes away
Your marriage stays where it is: in your iCloud, on your phones. Nothing we do, or stop doing, can take it away from you.
If we ever had to shut Troth down, you'd get notice first, and a way to export everything in a form you could keep without us. We'd rather build that before we need it than promise it after.
What we haven't done yet
Nobody has audited us. We'll say so here when someone has.
The formal privacy policy isn't published yet. It will be before the app ships, and it will say the same things this page does, in more words.
Export isn't built yet. It's on the list before launch.
If any of this changes, the date at the top of this page will too.
What we ask of you
- Turn on Advanced Data Protection
Settings, your name, iCloud, Advanced Data Protection. Both of you. It's the one step that makes your room unreadable by anyone at all.
- Keep Face ID on the door
Troth locks itself. Leave it that way, and the room stays yours even when the phone is in someone else's hand.
- Ask us anything
If something on this page is unclear, or you think we've got it wrong, write to hello@jointroth.co. Clark reads every reply.
— Clark and Carrie