Privacy Policy
Effective Date: March 13, 2026 • Last Updated: March 13, 2026
Trostrum ("we", "our", or "us") operates the website at trostrum.com and publishes the Khareed mobile application for Android. This Privacy Policy explains how we handle your information across all of these products.
We do not sell your data, use it for advertising profiling, or share it with AI companies. Please read the relevant section below for the product you are using.
Contents
1. Trostrum Website (trostrum.com)
No Personal Data Collected
The trostrum.com website does not collect, store, process, or share any personal data from visitors. This includes, but is not limited to:
- Names, email addresses, phone numbers, or postal addresses
- IP addresses or device identifiers
- Browser fingerprints or user agent strings
- Cookies used for tracking or profiling
- Behavioral or clickstream data
- Form submissions that are retained on our servers
Third-Party Services on the Website
This website loads resources from the following third-party services, which operate under their own privacy policies:
- Google AdSense: We display ads through Google AdSense, which may use cookies to serve relevant ads. You can opt out via Google Ad Settings.
- Google Fonts / CDN Libraries: Fonts and icon libraries may be loaded from external CDNs. These requests may log your IP address per the CDN provider's standard access logs.
2. Khareed App — Commodity Price Tracker
This section applies to users of the Khareed Android application.
What is Khareed?
Khareed is a commodity price tracking application for Android. It allows users to browse, search, and report prices of everyday goods — including food, vegetables, and household commodities — across districts in Pakistan. The app displays government-issued official price rates sourced from DC rate sheets and the Punjab PSBA portal, alongside prices submitted by vendors and community contributors. Anonymous usage is fully supported. Google Sign-In is optional and required only for contributing data.
Authentication and User Accounts
Khareed signs users in anonymously by default. No personal information is required to browse prices or use the app. If you choose to submit a price report or contribute data, you will be prompted to link a Google account or sign in with an email address and password.
When a Google account is linked, the following information is stored in our database:
- Google display name
- Google account email address
- Profile photo URL
Authentication is handled entirely by Firebase Authentication, a service operated by Google. We do not store passwords.
Data Collected by the App
The following data may be collected depending on how you use the app:
| Data | When Collected | Purpose |
|---|---|---|
| Unique device identifier | On first app launch | Prevent duplicate price submissions |
| Google display name, email, photo URL | When Google Sign-In is used | User profile and attribution |
| Commodity name, price, vendor name/location, district, timestamp | When a price report is submitted | Price database and public display |
| Submission count and achievement data | After each submission | Leaderboard and achievements |
| Location (latitude/longitude) | Only when placing a vendor pin on the map | Vendor location on the price map |
| Firebase Cloud Messaging device token | On app install | Push notifications only |
Location data is accessed only at the moment of submission and is not continuously tracked or stored in the background.
Where Data is Stored
All cloud data is stored in Google Firestore, operated by Google Cloud Platform in the asia-south1 region (Mumbai, India). This includes commodity price records, vendor profiles, user profiles, achievements, and price reports. Submitted prices go through an administrator moderation queue and are marked as approved, flagged, or rejected before becoming publicly visible. Cached price data is also stored locally on your device for offline use.
Offline Functionality
Khareed caches price data on your device so the app remains usable without an internet connection. Price reports submitted while offline are stored in a local queue and automatically synced to the server when connectivity is restored.
Push Notifications
Khareed uses Firebase Cloud Messaging (FCM) to deliver push notifications about price updates or announcements. A device token is registered with Firebase when the app is installed. This token is used solely for the purpose of delivering notifications and is not used for tracking or advertising. You can manage notification permissions at any time through your device settings.
Third-Party Services Used by Khareed
- Firebase Authentication (Google) — anonymous sign-in, Google Sign-In, and email/password authentication
- Google Firestore (Google Cloud Platform) — cloud database for all app data
- Firebase Cloud Functions (Google) — server-side logic and moderation
- Firebase Cloud Messaging (Google) — push notifications
- Google Maps — displaying the price map and vendor locations
- Google Sign-In — optional account linking
All third-party services listed above are operated by Google and are subject to Google's Privacy Policy.
Deleting Your Data
You can delete your account and associated profile data through the profile screen within the Khareed app. Submitted price reports are tied to the public commodity record and may be retained in anonymized form after account deletion, as they form part of the shared price database.
3. No Use of Data for AI or Machine Learning
Trostrum does not use any data — from the website or from any of our apps including Khareed — for Artificial Intelligence (AI) training, machine learning, or automated profiling. Specifically:
- No user data is fed into AI or ML models.
- No behavioral data is analyzed by automated systems for profiling.
- No data is sold or licensed to AI companies or data brokers.
- Your use of this website or any Trostrum app will never be used to train an AI system.
5. Children's Privacy
Neither this website nor the Khareed app is directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided personal information through the Khareed app, please contact us and we will delete it promptly.
6. Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data including the right to access, correct, or delete it. For the trostrum.com website, we collect no personal data, so there is nothing to retrieve or delete on our end.
For the Khareed app, you can delete your account and profile data directly through the app's profile screen. For any other requests, please contact us using the details below.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
8. Contact
If you have any questions about this Privacy Policy, or wish to exercise your data rights, you can reach us at:
3. Legocraft Minecraft Network
This section applies to players who connect to the Legocraft network and its associated Discord servers.
Data Collected
When you connect to the Legocraft network or associated web infrastructure, we log and store the following:
| Data | Purpose |
|---|---|
| Minecraft UUID and username | Player identification and ban enforcement |
| Discord ID (if linked) | Account linking and moderation |
| IP address and connection timestamps | Ban evasion detection, DDoS mitigation, security |
| Geolocation data (derived from IP) | Network security and region-based moderation |
| Chat logs and command history | Rule enforcement and moderation |
| Gameplay data (inventory, coordinates, economy balance, block placement history) | Server functionality and anti-grief rollbacks |
How We Use This Data
- Moderation: Chat logs and IP addresses are used to enforce the Terms of Service, detect ban evasion, and take action against rule violations.
- Server Functionality: Gameplay data is stored to ensure the server functions correctly and to enable rollbacks of griefing or data loss.
- Security: Network data is monitored to mitigate DDoS attacks, bot raids, and unauthorized access attempts.
Data Sharing
We do not sell your data to advertisers or third-party brokers. Your data remains on our private infrastructure. However, we will provide IP addresses, UUIDs, and chat logs to law enforcement agencies or internet service providers if you use the server to facilitate illegal activities, make credible violent threats, or launch cyberattacks.
Data Retention
Your data is retained for as long as necessary for moderation and server operations. Banned player data — including IP addresses and UUIDs — is kept indefinitely to prevent ban evasion. A data deletion request cannot be used as a mechanism to circumvent an active network ban.
See also: Terms of Service