Privacy Policy

• Your account: your email, your password (only as a secure hash, never the password itself), your name, country and time zone (taken from your device), and how you heard about us, if you tell us.
• If you continue with Google: your Google account's ID, email address (and whether Google has verified it) and name. Nothing else from your Google account (Google user data).
• What you keep here: your notes, your journal entries and the images, audio and video you add to them (including voice notes you record), your to-dos, the tags you give any of them, the text, links and images you send to our Telegram bot, and what AI made of your images and voice notes (a title, a summary, key points, the text in an image, a voice note's words), which is kept with them.
• Your photos' and videos' details: before a photo or video you add is uploaded, your browser makes it smaller and removes the details stored inside it. We keep some of them alongside it: when it was taken, the camera or phone (and a photo's lens), and where it was taken (its GPS location). You can stop keeping locations in Settings (Photo locations); photos and videos added after that keep no location.
• Your chats: the questions you ask in Chat, the replies, what each model showed of its thinking, which model wrote each one, how many tokens it used, the web pages a search found for it, and what it did with your to-dos.
• The browser extension: if you connect it, the articles and YouTube videos you save with it (their address, title, site, author, date, image, description and text, or the video's transcript), and when you connected it and last used it. Its key is kept only as a one-way hash.
• Replies you report: when you report a reply in Chat, why, anything you add, and which reply and chat it was, so we can read that chat to see what went wrong and make replies better.
• Security records: when you sign in and out, and from which device (browser and system), IP address and country, so you can see your devices and we can stop abuse.
• Usage records: how many requests and tokens AI used for you, and how much storage your files take. Never what was sent to AI or its reply.
• Keys you add: AI keys you bring (in Settings or while setting up), each with its provider and the models you chose, are stored encrypted, and only their last 4 characters are shown again. They're used only for Chat, and only when you pick one of those models.
• If you connect Telegram: your Telegram ID, username and first name.

Only the ones signing in needs: one that keeps you signed in (for 7 days), one that remembers your email while you verify it (for a day), and one for a few minutes while you continue with Google. On the site's public pages (the home page, the changelog, these policies, and signing in or up), Google Analytics sets its own cookies to count visits; it never runs inside your trove. There are no advertising cookies. Cloudflare may set its own, to protect the site. Your browser also remembers whether you turned on focus mode, and whether you folded away Chat's list of chats, on your device only.

• Groq

  If AI is on, reads the images you save (with the words you sent with them) to write their title, summary, key points and text; reads the images in your journal (the image alone, not your entry); and writes down what's said in your journal's audio and voice notes. It gets each image through a link that works for 10 minutes, and each audio file itself. Videos, your notes, your to-dos and your journal's words are never sent. With AI off, nothing is sent to it.

• Google (Gemini), Mistral, Cohere, Inception, OpenRouter and Token Harbor

  If AI is on: whichever one offers the model you pick in Chat (or last picked, for the Telegram bot's /ask) gets that chat's messages (your questions and its earlier replies) to write the next reply, and the to-dos it looks up when a question needs them (their title and description, the day and time they're due, their priority and whether they repeat, and when they were added and done). It can add, change, tick off, cancel or delete (into the bin) a to-do when you ask; each change shows above its reply. OpenRouter and Token Harbor are go-betweens: the company that runs the model may get all this too (OpenRouter's Nemotron is run by NVIDIA, for example). Your notes, journal and saves are never sent to them. With AI off, Chat sends nothing.

• Your own AI providers (OpenRouter, Groq, OpenAI or Google), if you add a key

  When you pick one of your own models in Chat (or last picked it, for /ask), the same as above goes to that provider, on your key and your account, under your agreement with them. When you add a key, or open its models, we ask them for their list of models (nothing of yours is sent).

• Exa

  When you turn on Search in Chat: it gets your question (only that) to search the web, and the pages it finds go to the model with your question, and are kept with the reply as its sources.

• Cloudflare

  Stores your images and your journal's files (R2), carries traffic to the site, and checks that you're a person when you sign up, sign in or reset your password (Turnstile).

• Joy Services

  Keeps encrypted copies of our database (backups), taken every 3 hours and kept for 30 days, in case we need to restore it: your account and everything in your trove except the files themselves (images, audio and video), which stay with Cloudflare.

• Brevo

  Sends our emails (verification and password reset links), so it gets your email address.

• Google

  Signs you in, if you continue with Google (only your account's ID, email and name: see Google user data below). Google Analytics also sees visits to the site's public pages (the page's address, your browser and device, and roughly where you are), to tell us how people find and use the site. It never sees your trove. Every page loads its typefaces from Google Fonts, and a web search's sources show their sites' icons from Google: so Google sees that you opened the site (your IP address and browser, not which page or what's on it) and the web addresses of those sources, but nothing you keep here, nor your questions or replies.

• Jina AI (Jina Reader)

  When you save an article with the browser extension, your browser sends the page's address to Jina Reader, from your own internet connection (not through us), and Jina fetches the page itself to return its text. So it gets the address and your IP address, and sees what anyone not signed in to that site would. YouTube transcripts are read from the page in your browser, without Jina.

• Telegram

  Carries what you send to the bot (saves, to-dos, journal entries, questions for the AI), and the notes, saves, to-dos, journal entries and answers the bot shows you in the chat.

We don't sell your data or use it for advertising.

• What we get: when you continue with Google, Trova asks Google only for basic sign-in (the openid, email and profile scopes). From it we keep your Google account's ID, your email address, whether Google has verified it, and your name. We don't keep your profile photo, and Trova can't see your Gmail, Drive, Contacts, Calendar or anything else in your Google account.
• How we use it: only to create your Trova account, sign you in, show your name and email in Settings, and send you emails about your account. Never for advertising, never sold, and never used to train or improve AI models.
• Who sees it: it's kept in our database, on our own server, and in its encrypted backups (Joy Services); Brevo gets your email address only to send your account's emails. We don't share it with anyone else, unless the law requires it. Nobody at Trova looks at it, except to help you when you ask, to keep the service secure, or to obey the law.
• How long: until you delete your account (Settings, Delete account), which deletes it straight away; it leaves our backups within 30 days. You can also remove Trova's access to your Google account at any time at myaccount.google.com/connections: that stops signing in with Google, and your account stays until you delete it.
• Trova's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Notes, saves, chats and to-dos: until you delete them. They go to the bin, and are deleted for good, with their images, after 30 days, or straight away if you empty it. A cancelled to-do is kept, like a done one.
• Journal entries (with their files): until you delete them, which deletes them straight away.
• Reports of replies: until the chat they're in is deleted for good.
• A browser extension's connection: until you disconnect it, in the extension or in Settings.
• Files added to a journal entry that's never saved: deleted after a day.
• Security records: 30 days. A device's sign-in is kept for 30 days after it ends.
• Accounts whose email is never verified: deleted after 7 days.
• Your account: until you delete it in Settings (Delete account), which deletes it straight away, with everything in it and its files.
• Backups of our database: 30 days. So something you delete, or a deleted account, can stay in them for up to 30 days after.

• Turn AI off in Settings at any time.
• Delete notes, saves, chats and to-dos, and empty the bin.
• Sign out other devices, disconnect Telegram, and remove a key you added, in Settings.
• Delete your account, with everything in it, in Settings.

• Everything between you and Trova travels encrypted (HTTPS).
• Passwords are kept only as a secure one-way hash (Argon2), and AI keys you add are encrypted (AES-256).
• Our database can't be reached from the internet, and its backups are encrypted (AES-256) before they leave our server.
• Your files are private: they open only through links that stop working within an hour.
• If something ever goes wrong with your data's safety, we'll tell you by email.

Trova isn't meant for children under 13, and we don't knowingly keep data about them. If you think a child has made an account, write to us and we'll delete it.

When what we keep or who sees it changes, we update this page and the date at its top before the change happens. If a change matters to you, we'll also tell you by email or in the app.

Questions about your data, or a request to see, correct or delete it: write to [email protected]. Trova is run by Techmedok.