Privacy Policy

Effective date: July 5, 2026

Trove AI ("we," "our," or "the app") is operated by Ashray Chowdhry. This policy explains what data we collect, why, and how we protect it.

1. Data We Collect

Account information. When you sign in with Apple or Google, we receive your name and email address. These are used solely for authentication and to identify your account.

Saved content. When you share a video URL to Trove AI, we store:

• The URL you shared
• Metadata extracted from the link (title, thumbnail, platform, creator name)
• AI-generated summaries, tags, categories, action items, and a TL;DR
• Transcript text (fetched from captions or generated via on-device speech recognition)

User-created content. Notes, collections, and organization choices you make within the app.

Search queries. When you search within Trove AI or use Ask Trove, your queries are processed to return results. Search history is stored locally on your device. Ask Trove queries are sent to our AI services to generate responses.

Clipboard. With your permission, Trove AI may detect video URLs you have copied to your clipboard. Clipboard contents are checked locally on your device and are only processed if they contain a supported video link. Non-URL clipboard contents are never stored or transmitted.

Usage analytics. We collect anonymous usage events (e.g., videos saved, features used) tied to a random device identifier — not your Apple ID or advertising identifier. These help us understand which features are valuable and improve the app.

Approximate location (optional). If you turn on reminders and grant location permission, Trove AI uses your approximate location — rounded to roughly city level (about two decimal places of latitude/longitude), never your precise GPS coordinates. It powers optional, contextual reminders: surfacing places you've already saved when they're relevant (for example "you're near that coffee shop you saved" or "welcome to San Francisco — here are some saved spots nearby"), weather-aware nudges, and regional Explore content. With the default "While Using the App" permission this happens only while Trove is open; if you separately opt in to "Always" location (a setting you control in the app), Trove can also send an arrival reminder when you reach a saved place or a new city even when the app is closed. Your precise location never leaves your device. When you are signed in and reminders are on, your approximate (city-level, ~1 km precision) coordinates are sent to our server and stored with your push registration so we can pick relevant reminders and add weather context; they are overwritten on each update and deleted with your account. Location is never used to track you, never linked to advertising, and never shared with third parties for their own purposes. You can decline it entirely and keep using every other feature; declining only turns off the location-based flavor of reminders.

Notifications. If you grant notification permission, we register a device push token with the Apple Push Notification service so we can deliver the reminders you opt into. You can turn notifications off at any time in iOS Settings.

What we do NOT collect. We do not collect your contacts, photos, precise/GPS location, health data, or advertising identifiers. We do not use Apple's App Tracking Transparency framework because we do not track you across other apps or websites.

2. How We Use Your Data

• On-device analysis. When you save a link, Trove AI performs instant on-device analysis using Apple's NaturalLanguage framework to generate tags, categories, and a preliminary summary. This processing happens entirely on your device — no data is sent to any server for this step. On-device speech recognition (Apple Speech framework) may also be used to transcribe audio — this audio is never sent to our servers.
• Content extraction. The public URL you save is sent to content-extraction services to fetch the link's publicly available metadata, caption, and transcript.
• Server-side AI processing. Video URLs and metadata are sent to our server to generate enhanced summaries, tags, and action items using large language models (Anthropic Claude and OpenAI). Transcripts may also be generated server-side using OpenAI Whisper. We also create numerical embeddings of your saved content (via OpenAI) to power meaning-based ("semantic") search across your library. To keep processing efficient, the anonymous AI analysis of a publicly identical link may be reused across users; it is derived only from the link's public content and never contains your notes, profile, or identity.
• Cloud sync. Your saved videos and account data are stored in Supabase (hosted on AWS) so they persist across devices.
• Personalization. We use your save history to power features like Rediscover, Explore recommendations, and Ask Trove (AI chat).
• On-device preference profile ("What Trove has noticed"). To make reminders and recommendations feel more like you, Trove learns a few coarse preferences entirely on your device from your own saves — things like a dietary lean (e.g. mostly vegetarian), a general budget band, a few favorite brands, the hours you tend to save, and the general areas your saved places cluster around. Each signal appears only once there is enough evidence for it, and the whole profile lives on your device — it is never uploaded to or stored on our servers. We never infer your clothing or shoe size. You can see exactly what Trove has noticed, correct it, or clear any or all of it in More > Privacy & Data > "What Trove has noticed"; your edits always win over what the app inferred, and a cleared signal stays off until you turn it back on. When the app requests personalized reminder suggestions, it may attach a small non-sensitive slice of this profile (dietary lean, budget band, up to three brands, and a preferred hour — never locations, areas, or anything precise) to that one request; the server uses it transiently to pick suggestions, never stores it, and it never influences the shared AI results or content other users see.
• Community Explore. An anonymized record of a save's public details (title, thumbnail, tags, category, and the AI summary — never your name, email, notes, or account identifier) may be added to an aggregate community feed that other users can see as trending content. Shared records are screened by automated content moderation, and any user can report content to have it hidden. Deleting your account removes your contributions from the feed (records from before July 2026 carry no account link at all and cannot be attributed to you). To have specific content removed, use the in-app Report action or email support@aitrove.app.
• Product improvement. Anonymous usage analytics help us prioritize features and fix issues.

3. Third-Party Services

We share data with the following services, only as needed to operate the app:

• Supabase (privacy policy) — receives your email, name, user ID, saved URLs, metadata, summaries, and tags for authentication, database storage, and cloud sync
• Anthropic (privacy policy) — receives video metadata, transcripts, and user prompts (for Ask Trove chat) for AI-powered summarization
• OpenAI (privacy policy) — receives video metadata and transcripts for AI-powered summarization and speech-to-text transcription
• Cloudflare (privacy policy) — all API traffic passes through Cloudflare for hosting and content delivery
• Content-extraction providers (ScrapeCreators, Apify) — receive the public video/post URL you save in order to fetch its public metadata, caption, and transcript
• Fly.io (privacy policy) — hosts our content-extraction service; processes every saved URL and the public metadata, captions, and transcripts extracted from it
• ScrapFly (privacy policy) — receives saved Instagram URLs to fetch their public metadata and captions
• Jina AI (privacy policy) — receives saved article URLs to fetch their readable text
• Voyage AI (privacy policy) — receives thumbnail and carousel images from saved posts to create visual-search embeddings
• Open-Meteo (terms) — receives only your approximate coordinates (no name, email, or identifier) to add weather context to optional reminders
• Apple Push Notification service — receives a device push token to deliver the reminder notifications you opt into
• Google Sign-In — receives authentication tokens only (if you choose Google sign-in)
• Apple Sign-In — receives authentication tokens only (if you choose Apple sign-in)

Each third-party service processes data under its own privacy policy linked above. We have data processing agreements in place where required. We do not sell your data to anyone. We do not share your data with advertisers.

4. Data Storage and Security

Your data is encrypted in transit (TLS/HTTPS) and at rest (Supabase database encryption). On your device, data is stored in SwiftData's local database and protected by iOS's built-in data protection.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed from our servers within 30 days. Locally stored data is deleted immediately upon account deletion.

6. Your Rights

You can:

• Access your data — all your saved videos, summaries, and categories are visible in the app
• Delete individual saves — swipe to delete any saved video at any time
• Delete your account — go to Settings > Delete Account to permanently remove all your data from our servers and your device
• Export your data — use the export feature to download your saves

7. International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful basis. We process your data based on: (a) contract performance (providing the service you subscribed to), (b) legitimate interest (product improvement via anonymous analytics), and (c) consent (for optional features like clipboard detection).
• Data transfers. Your data is transferred to and processed in the United States via Supabase (AWS infrastructure), Cloudflare, Fly.io, and AI/processing providers (Anthropic, OpenAI, Voyage AI, ScrapeCreators, Apify, ScrapFly, Jina AI). These transfers are governed by Standard Contractual Clauses (SCCs) adopted by each provider.
• Right to rectification — you can edit your notes and collections at any time within the app.
• Right to restriction of processing — contact us to request limited processing of your data.
• Right to data portability — use the export feature to download your data in a portable format.
• Right to lodge a complaint — you may file a complaint with your local data protection authority.

For GDPR-related requests, contact us at support@aitrove.app.

8. California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used (see Sections 1 and 2 above).
• Delete your personal information (Settings > Delete Account).
• Opt out of sale. We do not sell your personal information to third parties. We do not share your data for cross-context behavioral advertising.
• Non-discrimination. We will not discriminate against you for exercising your CCPA rights.

9. Children's Privacy

Trove AI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by email. The "effective date" at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this privacy policy or your data, contact us at:

support@aitrove.app