Privacy Policy
Last updated: February 2026
Your Data, Your Control
You decide who sees your photos. Revoke access anytime.
No AI Training
Your photos never train AI models. Ever.
On-Device Face Recognition
Biometric data never leaves your device.
Secure Storage
Token-authenticated CDN with encryption at rest.
Right to Delete
Export or delete all your data anytime.
Our Commitment to Privacy
Trove is built by parents, for parents. We understand that your family photos are among your most precious possessions. We take their protection seriously.
What We Collect
- Account information (email, name)
- Photos and videos you upload
- Captions and text you provide
- Child profile information you create
- Usage analytics (anonymized)
What We Don't Do
- We never sell your data
- We never use your photos to train AI models
- We never share your content with advertisers
- We never mine your photos for marketing purposes
Data Storage
Your media is stored on secure, token-authenticated CDN infrastructure. Only family members you invite can access your content. We use encryption in transit and at rest.
AI Features
Our AI search features process your photos to enable natural language search. This processing happens on our secure servers. Your photos are never used to train external AI models or shared with third parties.
Biometric Data (Face Recognition)
Trove offers an optional face recognition feature to help you organize photos by family member. If you choose to enable this feature:
- Opt-in only: Face recognition is disabled by default. You must explicitly enable it in Settings.
- On-device processing: All facial geometry analysis and embedding generation happens entirely on your device using Apple's Vision framework.
- No server transmission: Biometric data (face embeddings) is never transmitted to our servers or stored in the cloud. It remains exclusively on your device.
- Parental consent: Parents provide consent on behalf of their children when enabling face recognition for child profiles.
Biometric Data Retention
Face embeddings stored on your device are automatically deleted when:
- You remove a family member profile from Trove
- You delete your Trove account
- You use the "Clear Local Face Data" option in Settings
- You uninstall the Trove app
To manually delete face recognition data at any time, go to Settings → Face Recognition → Clear Local Face Data.
Your Rights
You can export all your data at any time. You can delete your account and all associated data at any time. We comply with GDPR and CCPA.
Children's Privacy
Trove is designed for parents to document their children. We do not knowingly collect information from children under 13. All child profiles are created and managed by parents.
Contact
Questions? Email us at [email protected]