Privacy

Your trove is yours. We treat it that way.

Trovfolio is a private catalog of what you own. This page explains, in plain language, what we collect, what we never do with it, and the controls you hold over everything in your account.

Last updated: June 14, 2026 · Operated by Fistbumplabs, LLC ("Trovfolio," "we," "us")

Private by default

Your inventory, photos and values are visible only to your account. Nothing is public, and nothing is shared until you export it.

Never sold

We don’t sell your data or your photos, and we don’t run ad networks. Our business is the subscription, not your collection.

Yours to export

Download your full catalog — items, photos and reports — any time. Delete your account and we erase your data for good.

Encrypted

Data is encrypted in transit and at rest. Photos are stored in private buckets that require a signed, expiring link to open.

This policy explains what we collect, how we use it, and your choices. By using Trovfolio you agree to this policy.

01

Information we collect

Information you provide: account data (name, email, plan status); item content (photographs, and details you enter — category, brand, model, condition, purchase price, receipts, appraisals, notes, and beneficiary designations you choose to add); support communications.

Information generated by the Service: valuations and metadata (estimated values, value types, sources, confidence levels, timestamps); usage and device data (app interactions, refresh activity, device/OS, diagnostics).

Information from third parties: payment status from app stores/processors (we do not store full card numbers); market data used to generate estimates (about items, not about you).

We do not intentionally collect special-category data, and we ask that you not upload government IDs, full financial account numbers, or others' personal information.

02

How we use information

  • To provide the Service — store your catalog, generate and refresh valuations, display your portfolio;
  • To operate paid plans — manage subscriptions, enforce plan limits and refresh guardrails, and prevent abuse;
  • To improve and secure the Service — analytics, debugging, fraud prevention, aggregate/de-identified analysis;
  • To communicate service messages and (with consent where required) product updates;
  • To comply with law and enforce our Terms.

We do not sell your personal information, and we do not use your photos or item content to train third-party AI models for purposes unrelated to serving you.

03

How valuations work and what is shared

To generate a valuation, the Service transmits relevant data — such as an item photograph and the attributes needed to identify it — to third-party AI providers and queries third-party market-data sources. We send the minimum reasonably necessary.

04

Third-party processors

We use service providers ("sub-processors") to run Trovfolio:

PurposeProvider (example)
Hosting, database, authenticationGoogle Firebase / Cloud
AI valuation (vision + reasoning)Anthropic / others
Market & comparables dataeBay and other marketplaces
Payments & subscriptionsApp Store / Google Play / Stripe
Analytics & crash reportingGoogle Analytics for Firebase
05

Data retention

We retain your account and item data while your account is active. After you delete an item or your account, we delete or de-identify associated personal data within 30 days, except where we must retain limited records to comply with law. Raw usage logs are retained for ~90 days then aggregated or deleted.

06

Your choices and rights

  • Access, edit, delete — view and edit your items in-app and delete items or your entire account at any time.
  • Export — export your data from Profile.
  • Regional rights — depending on where you live (e.g., EU/UK, California), you may have rights to access, correct, delete, port, or restrict processing, and to complain to a regulator. Reach us through our contact form.
07

Security

We use reasonable technical and organizational measures (encryption in transit, access controls). No system is perfectly secure.

08

International transfers

Your data may be processed in countries other than your own, including the United States, with appropriate safeguards where required.

09

Children

The Service is not directed to and may not be used by anyone under 18. We do not knowingly collect data from children. If a child has provided us data, contact us and we will delete it.

10

Changes

We may update this policy. Material changes will be notified in-app or by email.

11

Contact

Privacy questions: reach us through our contact form · Fistbumplabs, LLC