Privacy Policy

TroveFolio ("TroveFolio," "we," "us," or "our") provides a mobile application for logging, identifying, organizing, tracking, and valuing precious-metal, coin, bullion, jewelry, and other collectible assets (the "App").

This Privacy Policy explains what information we collect, how we use and share it, how long we retain it, and the choices and rights available to you.

Please read this Privacy Policy together with our Terms of Service.

When creating or accessing a TroveFolio account, you may be asked to review and accept our Terms of Service and acknowledge this Privacy Policy. Where applicable law requires separate consent for a particular type of processing, we will obtain that consent separately.

1. Eligibility

TroveFolio is intended only for individuals who are at least 18 years old.

You may not create an account, use the App, or use TroveFolio's AI scanning features if you are under 18.

We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from someone under 18, we will take reasonable steps to delete it.

If you believe that an individual under 18 has provided personal information to TroveFolio, please contact us at support@trovefolio.ai.

2. Information We Collect

Account Information

When you create an account, we may collect information such as your:

• Email address;
• Name, if provided;
• Account identifier;
• Authentication information; and
• Information provided by Apple, Google, or Facebook if you use their sign-in services.

If you use Sign in with Apple, Apple may provide TroveFolio with a private relay email address rather than your personal email address.

We do not receive your Apple, Google, or Facebook account password.

If you sign in with Facebook, Facebook may provide TroveFolio with basic profile information such as your name and, where available, your email address, according to your Facebook settings and permissions. If no email address is available, we may identify your account by your TroveFolio username.

Collection and User-Generated Content

We collect information that you choose to add to your collection when the information is stored or synchronized through TroveFolio.

This may include:

• Photographs of coins, bullion, bars, rounds, jewelry, and other collectibles;
• Item names and descriptions;
• Metal type;
• Weight;
• Purity or fineness;
• Mint, country, denomination, year, and similar identifying information;
• Purchase price;
• Estimated or calculated value;
• Quantity;
• Acquisition information;
• Certification or grading information;
• Serial numbers, if entered or visible in an image;
• Personal notes; and
• Other information you choose to associate with an item.

Because TroveFolio is designed to track valuable assets, collection information may reveal the existence or approximate value of assets owned by a user. We treat this information as security-sensitive and seek to limit unnecessary access to it.

Community Content and Activity

If you use TroveFolio's community features, we collect the content you publish and information about your activity, including:

• Your username and profile photo;
• Posts, including their photos, titles, text, and tags;
• Comments, including any images;
• Likes, follows, and mentions;
• Collections and items you choose to make visible, and share links you create;
• Reports you submit about content, including the reason and any note;
• Users you block;
• Your notification settings; and
• Your acceptance of the Community Guidelines.

We also keep records of moderation, including automated screening results, whether content was hidden or removed, warnings, and account restrictions.

Messages With the TroveFolio Team

The App lets you send a private message to the TroveFolio team, and lets us reply. If you use it, we collect and store the text of your messages, any photos you attach, and the times messages were sent and read.

TroveFolio administrators and moderators can read these conversations. Other members cannot. Each conversation is private between you and the team, and the App does not offer messaging between members.

What Other People Can See

Your username, profile photo, badges, posts, comments, and the collections or items you choose to make visible can be seen by other TroveFolio users. Badges can show whether you are a TroveFolio Pro member.

Share links can be opened by anyone who has the link. A share link shows the item's name, metal, weight, fineness, quantity, photos, and an estimated melt value. It does not show the price you paid, your notes, or your account details.

Please be careful about what your photos show. Serial numbers, certification numbers, receipts, and backgrounds can reveal more than you intend.

AI Scan Information

When you use TroveFolio's AI scanning or identification features, we may collect and process:

• Images you submit;
• AI-generated descriptions and identification results;
• Extracted or inferred item attributes;
• Catalog matches;
• Confidence or matching information;
• Scan timestamps;
• Corrections, confirmations, or edits you make to AI results; and
• Technical information necessary to process and troubleshoot the scan.

Submitted images may be processed by third-party artificial intelligence providers as described below.

Subscription and Purchase Information

If you purchase a subscription or paid feature, we may receive information concerning your purchase, subscription status, product entitlement, renewal status, and related transaction identifiers.

Payment information is generally processed by Apple, Google, and/or their applicable payment systems. TroveFolio does not ordinarily receive your complete payment card number.

Usage and Technical Information

We may automatically collect limited technical and operational information when you use the App, including:

• IP address;
• Device and platform information;
• App version;
• Operating system;
• Authentication and session identifiers;
• Scan counts;
• Usage-limit and rate-limit information;
• Request timestamps;
• Error information;
• Crash and diagnostic information;
• Performance information;
• API and server logs;
• Subscription entitlement information; and
• Security-related information;
• Push notification tokens, if you allow notifications.

We may also store information locally on your device to support features such as offline access, preferences, and caching. Collection information you save is stored on your device so the App can work offline, and is also synchronized to your account.

3. How We Use Information

We may use information collected through TroveFolio to:

• Provide, operate, and maintain the App;
• Allow you to organize and manage your collection;
• Calculate estimated melt values and portfolio values;
• Identify and classify items using AI;
• Match scanned items against third-party catalog information;
• Synchronize collections across devices;
• Back up collection information for signed-in users;
• Provide subscription and account functionality;
• Enforce usage limits, scan limits, and account restrictions;
• Authenticate users;
• Protect the security and integrity of TroveFolio;
• Detect, investigate, and prevent fraud, abuse, unauthorized access, or misuse;
• Diagnose technical problems;
• Monitor and improve performance;
• Communicate with you regarding your account, transactions, security, or material service changes;
• Evaluate, train, test, and improve TroveFolio's item-identification systems as described in Section 5;
• Operate community features, including showing content you publish to other users;
• Screen posts, comments, profile photos, and share links for harmful or off-topic content, and enforce our Terms and Community Guidelines;
• Send notifications you have turned on, such as when someone comments on, likes, or mentions your content;
• Comply with applicable law; and
• Establish, exercise, or defend legal rights.

We do not sell your personal information.

We do not share personal information for cross-context behavioral advertising.

4. Third-Party Service Providers

We use third-party companies and services to operate TroveFolio.

These providers may process information only as necessary to provide their respective services, subject to their contractual terms, privacy practices, and applicable law.

We share personal information only with service providers that help us run TroveFolio, such as hosting, coin identification, content moderation, email delivery, and payment processing. They may use it only to provide their services to us, and we require them to protect it with the same or equal protection as we do.

Supabase

TroveFolio uses Supabase for services that may include:

• Database hosting;
• Authentication;
• File and image storage;
• Server-side functions; and
• Backend infrastructure.

For signed-in users, account information, collection information, and submitted images may be stored or processed through Supabase.

Google Gemini

TroveFolio uses Google's Gemini artificial intelligence services to assist with visual identification and analysis of submitted items.

When you use AI Scan, images and associated scan inputs may be transmitted to Google for processing.

TroveFolio intends to use Google's paid API or cloud-based services for production AI processing. Under the applicable paid-service arrangement, information submitted through TroveFolio is processed to provide the requested AI service and is subject to Google's applicable contractual and data-processing terms.

TroveFolio does not authorize Google to use TroveFolio users' submitted images for unrelated advertising purposes.

TroveFolio also uses Gemini to check whether images published through the community features are related to collecting. This helps our moderators find off-topic content. Images you publish in posts or comments may be transmitted to Google for this purpose.

If another user uses an identification feature on an image you have published, that image may be transmitted to Google for identification.

Numista

TroveFolio may use Numista or similar catalog services to identify, match, or enrich information concerning coins and collectibles.

Search parameters such as denomination, country, year, metal, or other item characteristics may be transmitted to the catalog provider.

We do not intentionally transmit your TroveFolio account credentials or personal account profile information to Numista for catalog searches.

MetalpriceAPI

TroveFolio may use MetalpriceAPI or similar market-data providers to retrieve precious-metal spot prices and other valuation information.

TroveFolio does not intentionally transmit personal account information to these providers solely for the purpose of retrieving market prices.

Apple, Google, and Facebook Sign-In

If you choose to sign in using Apple, Google, or Facebook, those companies process authentication information according to their own terms and privacy policies.

RevenueCat

TroveFolio may use RevenueCat to manage subscriptions, purchase entitlements, and subscription status.

RevenueCat may process information relating to subscription products, transactions, user or device identifiers, entitlement status, and related subscription activity.

OpenAI

TroveFolio uses OpenAI's content moderation service to screen community content for harmful material, such as sexual, violent, hateful, harassing, or self-harm content.

When you publish a post or comment, upload a profile photo, or create a share link, the text and images involved may be transmitted to OpenAI for this screening. The result is used to decide whether that content may be shown to other users.

Photos you attach to a private message to the TroveFolio team are also transmitted to OpenAI for this screening, before any member of our team can see them. The text of your messages to the team is not sent to OpenAI.

TroveFolio does not authorize OpenAI to use users' content for unrelated advertising purposes. This processing is subject to OpenAI's applicable API terms and data processing commitments.

Resend

TroveFolio uses Resend to send the optional Weekly Recap email.

If you choose to receive it, your email address, your TroveFolio username, and the collection summary shown in the email are transmitted to Resend so it can deliver the email. You can turn the Weekly Recap off at any time in the App or with the unsubscribe link in each email.

Expo

TroveFolio uses Expo's services to deliver push notifications and app updates.

If you allow notifications, a push token for your device and the content of each notification are transmitted to Expo, which passes them to Apple's or Google's push notification service for delivery.

When the App checks for or downloads an update, your device contacts Expo's servers, which receive technical information such as your IP address, platform, and App version.

Cloudflare Web Analytics

Our website, trovefolio.ai, uses Cloudflare Web Analytics to count visits to its pages. It does not use cookies and does not track you across other websites.

When you visit a page on our website, Cloudflare receives basic technical information such as the page visited, the page that referred you, your browser and device type, and your approximate country based on your IP address. We use this only to understand how many people visit our website and which pages they view. The App does not use Cloudflare Web Analytics.

Other Infrastructure Providers

We may use additional hosting, monitoring, security, analytics, crash-reporting, communications, or infrastructure providers as TroveFolio develops.

Where required, we will update this Privacy Policy and applicable App Store or Google Play privacy disclosures to reflect material changes in the services we use or information we collect.

5. AI Training and Model Improvement

TroveFolio's AI scanning system may improve over time using information generated through user scans.

Information Used for Improvement

We may retain and use information from AI scans, including:

• Submitted item images;
• AI-generated identification results;
• Item characteristics derived from scans;
• Catalog matches;
• User corrections;
• User confirmations; and
• Other information relevant to evaluating or improving item-identification accuracy.

This information may be used to train, test, evaluate, validate, and improve TroveFolio's proprietary identification systems, algorithms, datasets, and related technology.

AI Scanning and Model Improvement

Use of scan information to evaluate and improve TroveFolio's identification technology is part of the AI Scan feature.

If you do not want images submitted to TroveFolio to be retained or used for model-improvement purposes, you should not use the AI Scan feature.

You may still use available manual collection-management features without using AI Scan.

Where applicable law requires a separate consent or provides a right to object to this processing, TroveFolio will honor those requirements.

De-Identification

When information is retained for model improvement after an account is deleted, TroveFolio will take reasonable steps to de-identify the retained training information by removing or severing direct account identifiers and links between the retained information and your TroveFolio account.

De-identification does not necessarily mean that an image is completely anonymous.

For example, an image submitted by a user may unintentionally contain:

• A person's face;
• A reflection;
• A mailing label;
• An address;
• A receipt;
• A certificate containing personal information;
• A uniquely identifiable serial number;
• Documents visible in the background;
• Personal belongings; or
• Other identifying information.

Although TroveFolio may take reasonable steps to remove account associations and unnecessary metadata, we cannot guarantee that every submitted image is incapable of identifying an individual or location based solely on its visual contents.

You should avoid including people, addresses, private documents, confidential information, or unrelated personal information in images submitted through AI Scan.

Where technically practical, TroveFolio may remove unnecessary image metadata, including location-related metadata, before retaining images for model-improvement purposes.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the App, maintaining security, complying with law, resolving disputes, and enforcing our agreements.

Active Accounts

Account and synchronized collection information is generally retained while your account remains active.

Messages between you and the TroveFolio team, and any photos attached to them, are kept until you delete your account.

Operational Data

Operational information such as security records, scan counts, usage-limit information, API logs, and diagnostic information may be retained for a limited period based on operational, security, fraud-prevention, or legal needs.

Retention periods may vary depending on the nature and purpose of the information.

Account Deletion

When you request account deletion, TroveFolio will delete or de-identify personal account and collection information from its active systems within a commercially reasonable period, generally within 30 days, unless a longer period is required or permitted by law.

Certain information may temporarily remain in:

• Encrypted backups;
• Security records;
• Fraud-prevention records;
• System logs;
• Transaction records;
• Service-provider systems; or
• Other systems where immediate deletion is technically impractical.

Such information will be deleted, overwritten, de-identified, or otherwise handled according to applicable retention schedules.

Community Restrictions

If your account is restricted or banned from the community features for violating our Terms or Community Guidelines, we may keep a limited record of the restriction, such as the email address associated with the banned account, after your account is deleted. This record is kept only to enforce the restriction and prevent a banned user from returning to the community features, and is not used for any other purpose.

AI Training Data

Information previously retained for AI training, testing, or model-improvement purposes may be retained after account deletion in de-identified form as described in Section 5.

Once information has been de-identified and the connection to your TroveFolio account has been permanently removed, TroveFolio may be unable to locate or associate that information with a later deletion request.

De-identified AI-training information may be retained for as long as reasonably useful for research, evaluation, security, or improvement of TroveFolio's identification technology.

7. Account Deletion and Privacy Rights

Deleting Your Account

You may request deletion of your TroveFolio account from within the App through the applicable account or settings menu.

You may also request account deletion through our website at trovefolio.ai/delete-account.

Deleting your account generally removes:

• Your account profile;
• Synchronized collection information;
• Stored collection images associated with your account;
• Your profile photo, posts, comments, likes, and follows;
• Share links you created, which stop working; and
• Other personal information associated with the active account,

subject to the exceptions described in this Privacy Policy.

Deleting the App from your device does not automatically delete a TroveFolio account.

Access, Correction, and Other Requests

Depending on where you live, you may have rights relating to your personal information.

These rights may include the ability to:

• Request access to personal information;
• Request information about how personal information is processed;
• Request correction of inaccurate information;
• Request deletion;
• Request a portable copy of certain information;
• Object to certain processing;
• Request restriction of certain processing;
• Withdraw consent where processing is based on consent; and
• Appeal certain privacy decisions where applicable.

To submit a privacy request, contact us at support@trovefolio.ai.

We may take reasonable steps to verify your identity before completing a request.

Certain rights may be subject to exceptions under applicable law.

8. California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, if and to the extent those laws apply to TroveFolio.

Depending on applicable law, these rights may include:

• The right to know what categories and specific pieces of personal information we collect;
• The right to know the sources and purposes for which information is collected;
• The right to know categories of third parties to whom information is disclosed;
• The right to request deletion;
• The right to request correction of inaccurate information;
• The right to obtain certain information in a portable format;
• The right to opt out of the sale or sharing of personal information where applicable;
• The right to limit certain uses of sensitive personal information where applicable; and
• The right not to receive discriminatory treatment for exercising applicable privacy rights.

TroveFolio does not sell personal information.

TroveFolio does not share personal information for cross-context behavioral advertising.

If our practices change, we will update this Privacy Policy and provide any legally required choices.

9. European Economic Area and United Kingdom

If the GDPR, UK GDPR, or similar data-protection law applies to our processing of your information, TroveFolio will process personal information only where an appropriate legal basis exists.

Depending on the processing activity, our legal bases may include:

Performance of a Contract

We may process information where necessary to provide services you request, including:

• Maintaining your account;
• Synchronizing your collection;
• Providing AI scans;
• Managing subscriptions; and
• Providing other App functionality.

Legitimate Interests

We may process information where reasonably necessary for legitimate interests such as:

• Securing the App;
• Preventing fraud or abuse;
• Enforcing usage restrictions;
• Diagnosing technical problems;
• Improving performance; and
• Developing and improving TroveFolio,

provided those interests are not overridden by your rights and interests.

Consent

Where applicable law requires consent for a particular activity, we will request that consent separately.

If processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing performed before withdrawal.

Legal Obligations

We may process information where necessary to comply with applicable laws, legal processes, regulatory obligations, or lawful governmental requests.

Individuals covered by applicable European or UK data-protection law may also have rights to access, correct, erase, restrict, object to processing, and obtain certain information in a portable format.

You may also have the right to lodge a complaint with the applicable data-protection or supervisory authority.

10. International Data Transfers

TroveFolio and its service providers may process or store information in countries other than the country in which you live, including the United States.

Privacy and data-protection laws in those countries may differ from the laws in your jurisdiction.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information, which may include contractual safeguards, Standard Contractual Clauses, recognized data-transfer frameworks, or other lawful transfer mechanisms.

11. Photos and Incidental Personal Information

TroveFolio is designed to process photographs of collectible items rather than photographs of people or personal documents.

However, photographs may inadvertently contain information unrelated to the collectible, including:

• Faces;
• Reflections;
• Addresses;
• Shipping labels;
• Receipts;
• Documents;
• Computer screens;
• Vehicle information;
• Personal belongings; or
• Other potentially identifying information.

You should review images before uploading them and avoid submitting unnecessary personal, confidential, or sensitive information.

TroveFolio may take reasonable technical steps to minimize unnecessary metadata or unrelated information, but we cannot guarantee that every identifying detail will automatically be detected or removed.

12. Data Security

TroveFolio uses reasonable administrative, technical, and organizational measures intended to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• Authentication controls;
• Per-user database access restrictions;
• Restricted storage permissions;
• Server-side handling of external API credentials;
• Encryption in transit;
• Controlled access to backend systems;
• Logging and security monitoring; and
• Data-minimization practices.

Because collection information may reveal ownership of valuable and portable assets, TroveFolio seeks to limit unnecessary access to collection information and does not require precise home-location information as part of normal collection tracking.

No storage or transmission system is completely secure. Accordingly, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for securing devices through which you access TroveFolio.

13. Legal Disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, subpoena, court order, or legal process;
• Respond to lawful requests from governmental authorities;
• Enforce our Terms of Service or other agreements;
• Investigate fraud, abuse, unauthorized access, or security incidents;
• Protect the rights, property, safety, or security of TroveFolio, our users, or others; or
• Establish, exercise, or defend legal claims.

Where legally permitted and reasonably appropriate, we may seek to limit or challenge requests for user information that we believe are overly broad or improper.

14. Business Transfers

If TroveFolio is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, corporate transaction, or similar event, information may be disclosed or transferred as part of that transaction.

Any successor entity's use of personal information will remain subject to applicable law and the privacy commitments applicable to the information at the time of transfer, unless users are notified otherwise as required by law.

15. Third-Party Links and Services

The App may contain links to, integrations with, or information obtained from third-party services.

TroveFolio is not responsible for the privacy, security, accuracy, or practices of third-party websites or services that operate independently from TroveFolio.

You should review the privacy policies and terms of those services before providing information directly to them.

16. AI and Valuation Information

Although this Privacy Policy primarily concerns how information is handled, users should understand that TroveFolio's AI-generated item identification, catalog matching, and valuation features may be incomplete, delayed, or inaccurate.

AI scan results should not be treated as professional authentication, certification, appraisal, or investment advice.

Additional terms concerning AI results, valuations, ownership of uploaded content, and use of submitted information are contained in the TroveFolio Terms of Service.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• The App;
• Our data practices;
• Our service providers;
• Applicable law; or
• Our business operations.

When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

Where required by law, or where changes are material, we may provide additional notice through the App, by email, or through another appropriate method.

If a change requires renewed agreement or consent under applicable law, we will request it before applying the relevant processing.

18. Contact Us

If you have questions about this Privacy Policy, TroveFolio's privacy practices, or your personal information, or if you wish to exercise an applicable privacy right, contact us at:

TroveFolio Email: support@trovefolio.ai