Legal

Privacy Policy

Effective: 2026-10-07 · Trove is currently in its testing phase

The short version

Trove is a personal finance tracker built by Vroe Labs, and right now it's in testing. Your financial data belongs to you: only you can see it, we don't sell it, and you can export or delete everything yourself, anytime, from Settings.

1. Where we are today

Trove is a young product being actively built and tested. That honesty matters for privacy too: features change quickly, and while we treat your data carefully, you shouldn't treat a testing-phase app as the only copy of anything important. What works today: manual transaction tracking with receipts, budgets, goals, subscription tracking, reports with PDF/CSV/Excel export, search, and profile settings like display currency and themes.

2. What we collect

• Account basics. Your email, name, and profile photo if you add one.
• Where you signed up from. If you reach sign-up from one of our own pages, such as the money map, we keep that page's name with your account, so we can count which pages lead to sign-ups. Nothing you entered on that page is kept.
• The financial data you enter. Transactions, budgets, goals, subscriptions, accounts, and receipt images you upload. Trove doesn't connect to your bank in this phase; everything in the app is data you added yourself.
• Basic traffic data. Aggregate page views via Cloudflare Web Analytics, which uses no cookies and does not fingerprint or track you across sites. On the public website only (never inside the signed-in app), Google Analytics 4 also counts visits, but only if you accept it in the cookie banner. There is no session-recording tool.

3. Who can see your data

You. Every table in our database enforces row-level security, a rule at the database layer that each row is only readable and writable by the account that created it. Your transactions, goals, and budgets are not visible to other users, and secret keys never leave our servers.

4. What we never do

• We never sell your data.
• We never share your data with advertisers.
• We never train AI models on your personal financial data.
• We never move money. Trove only records what you tell it.

5. Your controls

From Settings you can export all your transactions as a CSV file or permanently delete your account. Deletion is immediate and removes your profile, transactions, budgets, goals, subscriptions, and receipts.

6. Services we rely on

• Supabase. Database, sign-in, and receipt storage.
• Cloudflare. Hosting, DNS, CDN and cookieless traffic analytics.
• OpenRouter. When you use Ask, read a document, research a purchase, or estimate what something you own is worth (including the nightly refresh if you leave it on), the text of your question and the figures it needs are sent through OpenRouter to a language model. We ask OpenRouter to use only providers that do not train on or keep prompts. Nothing is sent otherwise.
• Google Analytics. Visit counts for the public website, loaded only after you accept. Google may process this data in the United States.

That is the whole list. Trove has no error-tracking vendor and no third-party email provider, and no analytics vendor reaches the signed-in app.

If we add anything new, like bank connections, we'll update this policy first.

Voice entry

You can add an expense by speaking it. Trove does not record, store or upload audio. Your own browser turns the words into text, and that text only fills in the form for you to check before saving.

One thing worth knowing, because it is your browser's choice rather than ours: Chrome and Edge transcribe speech by sending the audio to Google's servers. Safari and iOS do it on your device. If you would rather nothing left your device at all, type the expense instead. Every field works the same way.

7. Testing-phase caveats

During testing we may occasionally need to reset or migrate data as the product evolves. We'll warn you by email before anything destructive. Keep your own records for anything critical.

8. Cookies

Essential cookies keep you signed in. Analytics cookies are optional, set only on the public website and only if you accept them; you can change your mind at any time on the cookie policy page. A browser sending Global Privacy Control is treated as a refusal.

9. Children

Trove isn't for children under 13, and we don't knowingly collect their data.

10. Questions

Email hello@trove.cool. A real person reads it.