Trove Notes is built around a simple principle: your notes are yours, and only you can read them. This policy explains exactly what the app does and does not do with your data.
In short: We do not collect, store, or have access to your notes, your passwords, or your personal content. Your encryption password never leaves your device and is never stored anywhere — not by us, not by Apple.
1. Your notes and passwords
Every note is encrypted on your device using AES-256-GCM, with a key derived from your password via PBKDF2 (600,000 iterations).
Your password is never stored — not on your device, not in the iCloud Keychain, and not on any server. It exists only in your memory. If you forget it, the note cannot be recovered by anyone, including us.
We never see, transmit, or have access to the plaintext content of your notes.
2. Where your notes are stored
iCloud Drive (optional): If you choose iCloud sync, your encrypted notes are stored in your own private iCloud container, managed by Apple under your Apple ID. We have no access to it. Apple only ever sees encrypted data.
Local only (optional): If you choose local storage, notes stay on your device and are removed if you delete the app.
In both cases, the data at rest is ciphertext — useless without your password.
3. Voice dictation
If you use voice input to create a note, transcription is performed entirely on your device using Apple's on-device Speech framework. Your audio is never sent to Apple, to us, or to any server. Microphone access is used only while you are actively dictating.
4. Purchases (subscriptions)
Subscriptions are processed by Apple. We use RevenueCat to manage subscription status (whether your subscription is active). RevenueCat may process a non-personal subscriber identifier and purchase events. This is used solely to unlock premium features and restore purchases. See RevenueCat's privacy policy.
Data type collected: Purchase history, linked to a random subscriber ID.
We do not link purchases to your name, email, or notes.
5. What we do NOT do
No analytics or usage tracking.
No crash reporting SDKs.
No advertising, no ad identifiers (IDFA), no App Tracking Transparency prompt.
No third-party data sharing beyond Apple (iCloud, App Store) and RevenueCat (subscription status).
No accounts, no sign-up, no email collection.
6. Data retention & deletion
Because we don't store your notes or personal data on our servers, there is nothing for us to retain or delete. To remove all local data, delete the app. To remove iCloud copies, delete the files from your iCloud Drive.
7. Children's privacy
Trove Notes is not directed at children under 13 and does not knowingly collect personal information from them.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date above reflects the latest revision.