Trove ("we", "us") is a household finance tool. This policy explains what data we collect when you use Trove at householdtrove.com, how we use it, and the choices you have. We've tried to write it in plain English.
Trove is operated as a sole-proprietor service based in Canada. For any privacy queries you can reach us at support@householdtrove.com.
Card details, billing addresses, and payment history are handled entirely by our payment processor. We never see or store your card number. We only see a customer ID and your current subscription state.
Our hosting provider keeps short-lived logs of requests to our service — IP address, user agent, request URL, response status, and timestamp. These are retained for up to 7 days and are used to debug errors and prevent abuse.
The data we hold is used solely to:
We do not sell your data, share it for advertising, or use it to build behavioural profiles.
Trove only sends transactional email — sign-in links, payment receipts, and essential account notices. We don't run a marketing list and don't send promotional or advertising emails.
To run Trove we rely on a small set of trusted third-party services. We don't list specific vendors here because we may switch providers from time to time, but each falls into one of the following categories — and each is bound by its own privacy policy and applicable data-protection laws.
drive.file) is the narrowest scope Google offers — it grants Trove access only to files the app itself created in your Drive. We cannot see, list, or read any other file in your Drive, and we never receive a copy of the JSON file on our servers.If you'd like to know which specific vendors we currently use, email us and we'll tell you.
When Trove's built-in parsers can't read your PDF statement, we offer an optional AI-parsing fallback. This feature never runs automatically — you must click "Use AI parsing" to trigger it, per statement.
When you opt in for a given PDF:
If you'd rather not use AI parsing, use Trove's manual bank/credit-card parser or import a CSV instead. The AI fallback is opt-in per statement, never on by default, and can be skipped at any time.
Trove does not use tracking cookies. We use your browser's localStorage to keep your settings, categories, and (if you haven't enabled cloud sync) your transactions. A small authentication token is stored locally so you don't have to sign in on every visit.
We use Cloudflare Web Analytics to understand aggregate site usage, such as page views and traffic sources. It is privacy-first and cookieless: it sets no cookies, does not fingerprint your device, does not track you across other websites, and does not collect personal information.
Under Canadian privacy law (PIPEDA) and equivalent laws elsewhere, you have the right to:
To exercise any of these rights, email support@householdtrove.com. We'll respond within 30 days. If you're not satisfied with how we handle your request, you may also complain to the Office of the Privacy Commissioner of Canada.
If you are in the United Kingdom or the European Economic Area, the UK GDPR and EU GDPR also apply to you. Our legal bases for processing are the performance of our contract with you (running your account and subscription) and our legitimate interests (keeping short-term technical logs to debug problems and prevent abuse). In addition to the rights listed above, you have the rights to restriction of processing, objection, and data portability, and you may lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ICO).
Trove is served exclusively over HTTPS. Authentication tokens are stored only in your browser. Our database uses row-level security so account records can only be read by their owner. We don't pretend security is ever absolute — but the surface area is small because the sensitive parts of your data never leave your device.
Breach notification. If a security breach affects your personal information and creates a real risk of significant harm, we will notify the affected users and the Office of the Privacy Commissioner of Canada without undue delay, as required by PIPEDA, and explain what happened and the steps you can take.
Some of our service providers operate in the United States and elsewhere. By using Trove, you consent to your data being processed outside Canada.
Trove is intended for adults managing a household's finances and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a minor has created an account or provided us personal information, contact us at support@householdtrove.com and we'll delete it.
If we make material changes, we'll update the "Last updated" date and, where appropriate, notify you by email. Continued use after changes constitutes acceptance.
Questions about this policy or your data: support@householdtrove.com.