Privacy policy

Strome is used by organizations to train their teams. Organizations sign up, and invite their people by phone number. This policy covers the people who run an organization on Strome and the people they invite.

When an organization uses Strome to train you, that organization decides what training you take and sees your training records. We process that information on its behalf.

• Your phone number, to sign you in with a one-time code sent by text message.
• Your name, and an email address if you choose to add one.
• What your organization's admins record about you: your job title, your stage (such as Trainee or Trainer) and tags.
• Your training activity: the pathways and blocks assigned to you, your progress, your quiz answers, and the photos and documents you upload as proof.
• Content organizations add: documents, training material and reference entries.
• Basic technical information our hosting providers log when you use the service, such as your IP address, browser or device type, and the time of a request.

The Strome app asks to use your photo library, camera or files only when you choose to upload proof. It does not collect your location or your contacts.

• To sign you in and keep you signed in.
• To run the service: show you your training, record your progress, and show your organization's admins and trainers what you have completed.
• To draft training material with AI when an admin asks for it (see below).
• To keep the service secure, fix problems and answer your questions.
• To meet legal obligations.

We do not sell your information, share it for advertising, or use it to build advertising profiles.

Strome sends text messages only to deliver sign-in codes, when you ask for one. We do not send marketing texts. Message frequency depends on how often you sign in. Message and data rates may apply. Reply STOP to stop messages, or HELP for help.

Your mobile number is not shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties.

When an admin asks Strome to draft a pathway or training material, the documents and instructions they provide are sent to an AI model provider through OpenRouter to produce the draft. Admins review and edit drafts before anyone is trained on them.

Your own training records, quiz answers and proof photos are not sent for AI drafting.

• Your organization's owners, admins and trainers see your training records, uploads and the details recorded about you.
• Active people in your organization see your name, job title, stage, role and phone number in its directory, so colleagues can reach each other.

We use a small number of providers to run Strome, each only for its part of the service:

• Supabase, for our database, sign-in and file storage.
• Vercel, to host the website and web app.
• Twilio, to deliver sign-in codes by text message.
• OpenRouter and the AI model provider it routes to, for AI drafting.

We may also disclose information if the law requires it, or to protect the rights and safety of our users and the public.

We use cookies only to keep you signed in and to remember small settings, such as whether the app's sidebar is open. We do not use analytics or advertising cookies.

We keep your information while your organization uses Strome. If an admin deactivates you, your training record stays with the organization so it keeps a record of who was trained. When an organization closes its account, we delete its information within a reasonable time, except where we must keep it by law.

You can see and update your name and email in the app, and delete your account in the app's settings or at strome.io/delete-account. To ask for a copy of your information, or for it to be corrected, write to us at colton@strome.io. If your request concerns training records your organization keeps, we may refer you to your organization.

Depending on where you live, you may have further rights under local law. We will respond to requests as the law requires.

We protect information with access controls so that each organization sees only its own data, and with encryption in transit. No service is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Strome is a workplace tool and is not meant for anyone under 16.

If we change this policy, we will post the new version here with a new effective date, and tell organizations about significant changes.

Questions about privacy: colton@strome.io, or by mail to RouteSchool Inc., 306 Clifton Place, Unit 4, Brooklyn, NY 11216, United States.