Privacy Policy

Last updated: September 2026

Your Data, Your Control

You decide who sees your photos. Revoke access anytime.

No AI Training

Your photos never train AI models. Ever.

On-Device Face Recognition

Biometric data never leaves your device.

Secure Storage

Token-authenticated CDN with encryption at rest.

Right to Delete

Export or delete all your data anytime.

Our Commitment to Privacy

Trove is built by parents, for parents. We understand that your family photos are among your most precious possessions. We take their protection seriously.

What We Collect

  • Account information (email, name)
  • Photos and videos you upload
  • Captions and text you provide
  • Child profile information you create
  • App usage analytics, including periodic screenshots of the app (see below). You can turn this off at any time.

App Usage Analytics and Screenshots

To find out where Trove is confusing or broken, and to fix it, the Trove iPhone app records how the app is used and sends it to us. This includes:

  • Which screens you visit, and for how long
  • Where on the screen you tap, and how far you scroll
  • Which features you use, such as creating a memory or sending an invite
  • Errors, failed requests and app crashes
  • Screenshots of the app: on each screen while you set up your family, and after that occasionally as you use the app
  • Your app version, iOS version and device model

Screenshots show whatever the app is showing at that moment, which may include your family's photos, names, anything you have typed and other content. We never capture payment screens.

This data is linked to your account so we can see where a problem happened. Only a small number of Trove staff can view it, and only to improve and support the app. It is never sold, never shared with advertisers and never used to train AI models. We delete it automatically after 90 days, and straight away if you delete your account.

You can turn this off at any time in the app under You → Privacy → Share usage analytics. When you turn it off, anything not yet sent is deleted from your phone and nothing more is collected.

What We Don't Do

  • We never sell your data
  • We never use your photos to train AI models
  • We never share your content with advertisers
  • We never mine your photos for marketing purposes

Data Storage

Your media is stored on secure, token-authenticated CDN infrastructure. Only family members you invite can access your content, apart from the app screenshots described above. We use encryption in transit and at rest.

AI Features

Our AI search features process your photos to enable natural language search. This processing happens on our secure servers. Your photos are never used to train external AI models or shared with third parties.

Biometric Data (Face Recognition)

Trove offers an optional face recognition feature to help you organize photos by family member. If you choose to enable this feature:

  • Opt-in only: Face recognition is disabled by default. You must explicitly enable it in Settings.
  • On-device processing: All facial geometry analysis and embedding generation happens entirely on your device using Apple's Vision framework.
  • No server transmission: Biometric data (face embeddings) is never transmitted to our servers or stored in the cloud. It remains exclusively on your device.
  • Parental consent: Parents provide consent on behalf of their children when enabling face recognition for child profiles.

Biometric Data Retention

Face embeddings stored on your device are automatically deleted when:

  • You remove a family member profile from Trove
  • You delete your Trove account
  • You use the "Clear Local Face Data" option in Settings
  • You uninstall the Trove app

To manually delete face recognition data at any time, go to Settings → Face Recognition → Clear Local Face Data.

Your Rights

You can export all your data at any time. You can delete your account and all associated data at any time. We comply with GDPR and CCPA.

Children's Privacy

Trove is designed for parents to document their children. We do not knowingly collect information from children under 13. All child profiles are created and managed by parents.

Contact

Questions? Email us at [email protected]