Trolly · Money Lat

Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how Money Lat SpA ("we", "us", or "our") collects, uses, stores, and protects personal information in connection with the Trolly mobile application (the "App"), a service that lets you send pre-recorded, scripted humorous phone calls to people you personally know and who have consented to receive them. By using the App, you agree to the practices described in this policy.

Two people are involved in every call: the user who sends the call, and the recipient who receives it. This policy explains what we handle for both, and the responsibilities you accept as the sender.

1. Information We Collect

Account information (to create and secure your account):

To use the App you must sign in with your Apple or Google account. From that sign-in we receive an authentication identifier and, depending on the provider and your settings, an email address (which may be a private relay address) and/or display name
An authentication identifier assigned to your account by our backend

Recipient information (provided by you, the sender):

The phone number of the person you want to call
An optional name or label you assign to that number

Call activity and content:

The call audio you selected from our catalog and the call's status (delivered, no answer, voicemail, failed)
The Caller ID displayed on the call — this is selected automatically by our backend from numbers that Money Lat owns; users cannot enter, choose, or spoof a Caller ID
An audio recording of every call, so you can hear the recipient's reaction in the App (see Section 5). Some call scenarios use computer-generated ("AI") voices
Basic technical metadata: call duration, timestamps, destination country, and error codes

Purchase information:

Your coin balance and purchase history for consumable coin packs. Payments are processed entirely by the Apple App Store or Google Play — we never see or store your payment card details.

Device and diagnostic information:

Device type, operating system version, app version, IP address, approximate region (derived from IP), push-notification token, and crash/diagnostic logs

We do not collect your precise GPS location, and we do not upload your address book. If you pick a contact to call, only the single number you select is sent to us for that call.

2. How We Use Your Information

Create and secure your account through your Apple or Google sign-in
Originate the call you requested and display the appropriate local Caller ID
Detect voicemail/answering machines so unanswered calls are not charged a coin
Record and store each call so you can play back the reaction in the App
Manage your coin balance and purchases
Enforce safety controls: blacklists, per-user rate limits, blocking of emergency and protected numbers, and fraud/abuse monitoring
Provide customer support and comply with legal obligations

We do not sell your personal information, and we do not use it for third-party advertising.

3. Third-Party Services

The App relies on a small number of trusted providers to function:

Service	Purpose
Sign in with Apple / Google Sign-In	Authenticating you when you log in to the App
Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions)	Managing your authenticated session, secure storage of account, call records and recordings, and backend logic
Telephony / VoIP carrier (SIP trunk provider, e.g. DIDWW)	Placing the outbound call over the public telephone network
Firebase Cloud Messaging	Push notifications (e.g. "your call is ready")
Apple App Store (StoreKit) / Google Play Billing	Payment processing for consumable coin packs
RevenueCat	Recording and monitoring coin purchases; does not receive payment card details
Crash & analytics tooling (e.g. Firebase Crashlytics)	Diagnosing crashes and improving reliability

These providers only receive the data strictly necessary to perform their function and are bound by their own privacy commitments. You can review Firebase's privacy practices at firebase.google.com/support/privacy.

4. Legal Basis and Your Responsibility as Sender

Because a call involves a third party (the recipient), you are responsible for using the App lawfully and only calling people who you reasonably believe will not be harmed, harassed, or distressed. When you send a call you confirm that:

You are at least 13 years old (and, if under the age of majority where you live, you have a parent's or guardian's consent to use the App);
You have a good-faith relationship with the recipient and any consent required by the laws that apply to you and to the recipient;
You will not use the App to threaten, defraud, harass, or repeatedly disturb anyone, or to call emergency, government, healthcare, or other protected lines.

Where the GDPR or similar laws apply, we process account data to perform our contract with you, and we process safety, security, and legal-compliance data under our legitimate interests and legal obligations.

5. Call Recording and Consent

Every call is recorded so you can hear the recipient's reaction in the App. Some countries and U.S. states require that all parties consent before a call is recorded. By sending a call, you represent and warrant that you have obtained any consent required by law from the recipient. You — not Money Lat — are responsible for obtaining that consent.

The recording is stored securely so you can listen to it in the App. You may delete a recording at any time, and recordings are removed when you delete your account (see Section 7).

6. Data Storage and Security

Your data is stored securely on Google Firebase infrastructure (Google Cloud Platform). Data is encrypted in transit (TLS) and at rest. Access is restricted by security rules so that only you — authenticated with your own account — can read your account, calls, and recordings.

7. Data Retention and Account Deletion

We keep your data only for as long as you maintain an account, plus any period required by law.

You can permanently delete your account at any time, directly in the App:
Profile → Settings → Delete account.

Deleting your account permanently and irreversibly removes your authentication account, your profile, your call history, and every call recording associated with your account.

If you are unable to access the App, you may request deletion by emailing lukas@moneylat.com and we will complete the request within 30 days.

Recipients: block your number. Any person who received a call can ask us to block their number from ever receiving another call through the App, by emailing lukas@moneylat.com or using the block request on our support page. Blocked numbers are rejected by our servers before any call is placed. A number on the block list is stored only as a one-way hash, so we keep no readable copy of it.

8. Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data (see Section 7)
Object to or restrict certain processing
Receive a portable copy of your data
Opt out of the "sale" or "sharing" of personal data (we do not sell or share it)

To exercise any of these rights, contact us at lukas@moneylat.com. This includes residents of the EU/EEA/UK (GDPR), California (CCPA/CPRA), and Chile (Ley N° 19.628 sobre Protección de la Vida Privada).

9. Children's Privacy

The App is not directed to children under the age of 13. In compliance with the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws, we do not knowingly collect personal information from any child under 13. We ask that children under 13 do not use the App. If a child under 13 has provided us with personal information, a parent or guardian may contact us at lukas@moneylat.com and request that such information be deleted from our records, and we will delete it.

If you are between 13 and the age of majority in your country (typically 18), you may only use the App with the involvement and consent of a parent or legal guardian, who is responsible for your use of the App, including any purchases. You must not send a call to any person who has not consented where consent is required.

10. International Users

The App is operated from, and its servers may be located in, jurisdictions outside your country of residence, including the United States and the European Union. Wherever your data is processed, we apply the protections described in this policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated within the App.

12. Contact Us

For any privacy-related questions or requests, contact us at:
lukas@moneylat.com