Privacy Policy

Signer Labs ("we," "us," or "our") operates the Trovy iOS application (the "App"). This Privacy Policy explains how we collect, use, and protect your information.

1. Overview

Trovy is a home inventory app that helps you keep track of your belongings — organize items into rooms and containers, snap a photo to add an item in seconds, and find anything with a quick search. You can use the App anonymously, without creating a personal account. We are committed to protecting your privacy, collect only the data needed to provide these features and to measure our advertising (see Section 5), and never sell your data.

2. Information We Collect

2.1 Information You Provide

• Item Information — Details you enter about your belongings, such as name, category, quantity, notes, and optional purchase details (brand, model, serial number, purchase date, price, and place of purchase).
• Rooms and Containers — The rooms and storage containers you create to organize your items.
• Photos — Photos you take of your items and rooms. Item photos are processed on your device to extract the subject (see Section 3), then stored privately in our cloud storage and associated with your account.
• Receipts (Optional) — If you use receipt scanning, the receipt photo you take is stored privately with the related item as your proof of purchase, and the purchase details read from it (store, date, price, and the line item you select) are saved to that item. Receipts you scan may contain other purchases; only the photo and the fields shown to you are stored.

2.2 Account and Identity

• Anonymous Account — By default, the App can sign you in anonymously through Supabase Auth. This lets us store your inventory without requiring any personal credentials.
• Sign in with Apple (Optional) — You may optionally sign in with Apple. This enables backup and recovery so you can restore your inventory when you switch or reset your device. Authentication is handled by Apple; we receive only the identifiers needed to link your account, and your email address if you choose to share it.

2.3 Information We Do NOT Collect

• We do not require your name, email, or phone number to use the App
• We do not collect your location
• We do not access your photo library without your action — only photos you actively take or pick are used
• We do not use cookies or tracking pixels
• Aside from the ad attribution described in Section 5, we do not use any third-party analytics or advertising services

3. Photos and AI Recognition

• On-Device Subject Extraction — When you photograph an item, the subject is cut out from the background directly on your device using Apple's Vision framework. This processing never leaves your phone.
• AI Item Recognition — To suggest a name and category for a new item, a small, downscaled copy of the extracted subject image is sent through our server to Google's Gemini API. The image is used only to produce the suggestion, is not stored by our server for this purpose, and is processed by Google under Google's API terms, under which paid API data is not used to train Google's models. Recognition is optional in effect — if it fails or is unavailable, you simply type the name yourself.
• AI Receipt Scanning — When you scan a receipt, the receipt image is sent through our server to Google's Gemini API to read the store, date, price, and line items, under the same Google API terms as above. The receipt photo is then stored privately with the related item as your proof of purchase, and the fields you confirm are saved to that item. Receipt scanning is entirely optional — you can always enter purchase details by hand.

4. How We Use Your Information

• Storing and displaying your rooms, containers, and items
• Rendering your item photos as stickers in the App
• Suggesting item names and categories from photos
• Reading purchase details from receipts you scan and keeping the receipt photo as your proof of purchase — useful for insurance documentation
• Powering search so you can find where things are
• Backing up and restoring your inventory when you sign in with Apple
• Processing your Trovy Pro purchase and determining your subscription status

5. Data Sharing and Third-Party Services

We do not sell, trade, or rent your personal information. Your inventory — items, rooms, photos — is never shared with any advertising partner. We use the following third-party services to provide the App and measure our advertising:

• Supabase — For authentication and database storage of your inventory. Data is hosted in the United States (us-east-1).
• Cloudflare — Our backend runs on Cloudflare Workers, and your photos are stored in a private Cloudflare R2 bucket. Photos are never publicly accessible; every photo request is authenticated and verified against your account.
• Google Gemini API — For optional item recognition, as described in Section 3.
• Sign in with Apple — For optional account linking, backup, and recovery. Authentication is handled by Apple.
• RevenueCat — For processing and managing Trovy Pro purchases and subscriptions. RevenueCat receives your purchase receipt from Apple, an anonymized app user identifier, and basic device information to validate transactions and determine your subscription status. It never receives your items, rooms, or photos. See the RevenueCat Privacy Policy.
• TikTok Business SDK (TikTok / ByteDance) — For measuring the effectiveness of our ad campaigns (ad attribution). On first launch, iOS asks for your permission via the App Tracking Transparency prompt. If you allow tracking, the SDK may share your device's advertising identifier (IDFA) and app events (install, launch, sign-up, purchase — never your items, rooms, or photos) with TikTok to attribute your install to an ad. If you decline, no cross-app identifier is used and attribution falls back to Apple's privacy-preserving SKAdNetwork, which reports only anonymous, aggregated conversion counts. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. Data handling by TikTok is described in the TikTok Partner Privacy Policy.

6. Data Storage and Security

Your inventory data is stored in Supabase (Postgres), hosted in the United States. Access to your data is protected by Supabase Row Level Security (RLS), which ensures that records are accessible only to your account. Photos are stored in a private Cloudflare R2 bucket and served exclusively through our authenticated backend. All data is transmitted over HTTPS and stored with industry-standard encryption.

7. Your Rights

You have the right to:

• Delete your account at any time directly within the App (Settings → Delete Account). This permanently and irreversibly removes all of your data, including rooms, items, and photos, via a cascading deletion
• Use the App anonymously without signing in with Apple
• Choose whether to sign in with Apple for backup and recovery
• Decline or revoke ad tracking at any time (iOS Settings → Privacy & Security → Tracking) — all App features work identically either way
• Request assistance with your data by contacting us

8. Children's Privacy

Our App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: [email protected]
• Address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA