For UK and European Economic Area (EEA) data protection law, Troott Technologies is the data controller for personal data processed through the Troott listener app.

Contact: hello@troott.com

This page supplements our Privacy Policy for listeners in the UK and EEA. It describes your rights under the UK GDPR and EU GDPR where applicable.

Ministers using Troott Studio should read Minister GDPR information.

We process personal data on the following bases:

• Contract (Art. 6(1)(b)) — account registration, streaming, library sync, playlists, and subscriptions you request.
• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, service improvement, and recommendations, balanced against your rights.
• Consent (Art. 6(1)(a)) — optional marketing emails and push notifications where required.
• Legal obligation (Art. 6(1)(c)) — retention and disclosure required by law.

Subject to applicable law, you may have the right to:

• Access (Art. 15) — obtain confirmation and a copy of your personal data.
• Rectification (Art. 16) — correct inaccurate data.
• Erasure (Art. 17) — request deletion in certain circumstances.
• Restriction (Art. 18) — limit how we use your data.
• Portability (Art. 20) — receive data in a structured, machine-readable format.
• Object (Art. 21) — object to processing based on legitimate interests or direct marketing.
• Withdraw consent — where processing is consent-based, without affecting prior lawful processing.

Email hello@troott.com from your registered address with the right you wish to exercise. We may ask you to verify your identity.

You can deactivate your account in the app (About Troott). Self-serve data export is not yet available — request a copy by email.

We aim to respond within one month of receiving a valid request. Complex requests may be extended by up to two additional months where permitted by law; we will inform you if an extension is needed.

We use processors including AWS, MongoDB, Redis, Paystack, Bugsnag, PostHog (when enabled), Google/Apple OAuth, and email providers. Each processes data on our instructions for the purposes described in our Privacy Policy.

A detailed subprocessor list is available on request at hello@troott.com.

Personal data may be processed outside the UK/EEA, including in the United States (AWS, analytics, crash reporting). Where required, we use appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

You may lodge a complaint with your local supervisory authority. We encourage you to contact us first at hello@troott.com so we can address your concern.

UK residents may contact the Information Commissioner's Office (ICO). EEA residents may contact their member-state authority.

Data protection enquiries: hello@troott.com.