Privacy Policy

• No ads.
• We do not sell data.
• Household catalogs are private by default and visible only to signed-in household members and invited viewers.
• We do not create public child profiles or public household pages.

We collect the information needed to run a private catalog:

• Account information, such as email address and authentication identifiers.
• Household and catalog content, such as household names, collection names, item names, status, notes, ISBN or barcode metadata, and item metadata.
• Item photos uploaded by owners. These may include child-related belongings or, if you choose to upload them, images that include people.
• Invite and access data, such as household roles, invite links, and membership records.
• Basic usage, performance, analytics, security, and log data used to operate and improve the service.
• Support messages you send us, including privacy, deletion, or export requests.
• If paid plans are enabled, billing status from our payment processor. We do not store full payment card numbers in Our Trove.

• Authenticate users and keep sessions working.
• Create, sync, search, and display household catalogs.
• Store and serve item photos to authorized household members.
• Generate AI photo name suggestions when that feature is used.
• Manage invite links, household roles, and plan limits.
• Provide support, respond to requests, and troubleshoot errors.
• Protect the service from abuse and improve reliability.

We use service providers to operate Our Trove, such as hosting, database, authentication, storage, analytics, email, AI suggestion, support, and payment services. These providers may process household information only as needed to provide their services to Our Trove. This operational processing is not a sale of data.

We may also disclose information if required by law, to protect the service and users, or as part of a business transfer such as a merger, acquisition, financing, or sale of assets. In those cases, we would work to keep household catalog protections in place.

Item photos are stored in a private Supabase Storage bucket under household-specific paths. The app uses database access controls, storage policies, authenticated photo routes, and signed URLs so photos are available to household members without making the catalog public.

When photos are uploaded, the app creates a compressed original and smaller variants for faster loading. Client-side image processing is designed to strip EXIF metadata when possible.

When AI photo naming is available and a photo is submitted for a suggestion, a compressed copy of the image may be sent to Google Gemini to return a suggested item name or metadata. AI suggestions are convenience features; an owner can edit the item before saving.

Catalog data and photos are retained while the household or account is active. Owners can delete items and collections from the app. In-app deletion removes those records from active catalog views, but related files, backups, logs, and security records may take longer to remove.

For full household deletion, account deletion, photo deletion, or data export while self-serve export is not available, email support@ourtrove.app. We will verify the request before acting on household data, and we may decline or delay a request when needed to prevent unauthorized access, resolve an ownership conflict, protect the service, or comply with legal obligations.

Backups, logs, and security records may retain limited information for a reasonable period when needed for recovery, fraud prevention, security, legal, or accounting obligations.

Household owners control invite links and who can access a catalog. Invited viewers can search and view the household catalog but do not receive owner controls. Owners are responsible for inviting only people they trust with household catalog information and photos.

Our Trove is parent-directed, not child-directed. Children should not create accounts, manage households, or submit information directly to the service.

The FTC treats photos, videos, and audio containing a child's image or voice as personal information in COPPA-covered contexts. Our Trove's posture is to serve parents and caregivers, avoid child-directed features, avoid public child profiles, and keep catalogs private by default. See the FTC children's privacy guidance for general context.

Legal follow-up is still needed before broad public acquisition, child-directed marketing, school or organization use, richer child profiles, expanded analytics, advertising technology, or any feature that asks children to provide information directly.

• Owners can manage invite links and remove household members.
• Owners can edit or delete catalog content in the app.
• You can ask for access, correction, export, account deletion, household deletion, or photo deletion by emailing support@ourtrove.app.

We may update this policy as Our Trove changes. If a change materially affects how we use household data or photos, we will update this page and, when appropriate, provide additional notice in the app or by email.