Privacy Policy
Last updated 1 October 2026
Trove is a file manager that runs on your computer. Your files stay on your computer. We do not have a copy of them, we cannot see them, and the licensing service does not receive your file contents or file-browsing activity.
The short version. The app reads your files locally to show and preview them. When you connect a remote service — a server, an object store or a cloud drive — the app talks to that service directly from your machine. Nothing is routed through us. The app can send optional daily usage and reliability summaries, described below. The subscription service keeps the account and activation records needed to manage licences; those records do not include your files.
What the app does on your device
Trove lists, previews, moves and copies files on your computer. All of that happens locally. File contents, file names, folder structure, thumbnails and search indexes are never transmitted to us.
Preferences — window layout, favourites, tags, connection settings — are stored on your own machine.
Connections to other services
You can connect Trove to services you already use, including SFTP and FTP servers, SMB shares, Amazon S3, Google Cloud Storage, Azure Blob Storage, OneDrive, Dropbox and Google Drive. When you do:
- The app connects to that service directly from your device. Your files do not pass through our servers, because there are no servers in that path.
- Credentials — passwords, access keys and authorisation tokens — are stored in your operating system's keychain (Keychain on macOS, Credential Manager on Windows), not in a plain file and not with us.
- What that service does with your data is governed by that service's own privacy policy, not this one.
Google user data
If you connect a Google Drive account, Trove asks Google for your permission and then acts on your behalf, from your device.
What we access, and why
- Your Drive files and folders — to list them, show their names, sizes and dates, open them, and let you copy, move, rename or delete them, which is what a file manager does.
- Your account's email address — only to label the connection in the app, so you can tell two accounts apart.
Where it goes
Nowhere except between your device and Google. Drive content is not sent to us, not stored by us, not logged by us and not used to train any model. A file is downloaded only when you ask for it, and only to your own computer.
Trove's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Taking it back
Remove the connection in Trove, which deletes the stored authorisation from your keychain. You can also revoke Trove's access at any time from your Google account at myaccount.google.com/permissions. Revoking takes effect immediately and does not touch your files.
This website
grabtrove.com serves its own fonts and scripts. There is no visitor tracking service, no advertising network, no social media pixel and no tracking cookie. Our hosting provider keeps standard server logs, which include IP addresses, for security and reliability.
Buying a licence
Payments are handled by Stripe. Your card details go to Stripe and never to us — we do not see or store them. Stripe tells us that a payment succeeded and gives us the email address you entered.
Account sign-in codes are delivered through Resend.
Accounts, subscriptions and computer registrations
We use Supabase to store your verified email address, account and licence identifiers, trial and paid-access dates, payment status, and your computer registrations. A registration includes the computer name, operating-system type, activation and last-connection times, and a hashed device identifier. Raw hardware identifiers remain on your computer. These records enforce the five-computer limit and let you replace devices.
Sign-in cookies are necessary for account access and security. They are not advertising cookies. Activation credentials are protected in server storage and the operating-system keychain. We retain account, registration and billing records while needed to provide access, prevent trial resets, resolve payment disputes and meet recordkeeping obligations. Contact support to request account deletion.
We may compare trials with and without an upfront payment card. We record the offer assigned to your licence, when the shared trial starts, and whether a paid subscription begins. We do not collect file contents or file-browsing activity. Your assigned offer remains unchanged when we adjust an experiment.
After activation, the app works offline until the expiration recorded on its signed licence. It reconnects to verify a renewal after that date. When online, activation checks update the last-connection time and apply remote deactivation. Removing a computer frees its registration immediately; an offline installation receives that change only on reconnection or at its recorded expiration.
Optional app analytics
Analytics is enabled by default on each computer in versions that support it. In Settings → General → Privacy & analytics, you can turn off future collection and uploads for that computer. Unsent summaries are discarded. Previously received reports are retained indefinitely. Other OS profiles sharing that computer registration receive the preference when they reconnect. Your family's other computers have separate preferences.
We receive daily feature counters, broad operation outcomes, duration ranges, app version, OS version, processor architecture, and yes/no flags showing which storage services are configured. These summaries are linked to your existing licence and computer registration so we can understand adoption, reliability and how families use their five computer slots. They are not anonymous.
We never include file contents, file or folder names, paths, search terms, commands, connection names, server addresses, bucket names, credentials, raw errors, stack traces or diagnostic logs. Individual action timestamps are not sent. A recorded unclean exit does not necessarily mean the app crashed.
While offline, summaries remain in a bounded local queue for up to 120 daily/version summaries (at most 2 MiB of database pages). Uploads retry quietly when possible and do not affect file operations or licensing. Old unsent summaries can be discarded when the queue is full. Licence activation, security and billing records are essential service records and are separate from this preference.
Updates
The app checks for new versions by requesting a small file from this website and downloading releases from GitHub. That request reveals your IP address and app version to those services, as any download does.
Children
Trove is a professional tool and is not directed at children under 13.
Changes
If this policy changes materially, the date at the top will change and the previous version will remain available on request.
Contact
Questions about privacy, or a request about your data: support@grabtrove.com.