Trove Fortress (“Trove”, “we”, or “the app”) is an offline vault for passwords, financial records, identity information, notes, and documents. This policy explains what information is handled when you use the app and this website.
At a glance
- Your vault is encrypted and stored locally on your device.
- Trove does not require an account and does not sell personal information.
- The app does not upload your vault to a Trove server.
- We cannot recover a vault when its master password is lost.
Information stored by the app
Information you enter into a vault, including records and imported documents, is stored on the device in encrypted form. Optional biometrics are verified by your operating system; Trove does not read or store biometric data.
Backups and sharing
When you export a backup, use the share feature, or open a document with another app, the destination is selected by you. Treat exported files as sensitive. Android automatic cloud backup is disabled for the app.
Website forms
If you submit the feedback or support form, the information you provide is sent to the form-processing service configured by the site owner so that we can respond. Do not include your master password, recovery details, or vault contents in a form submission. The live site must be configured with the owner’s verified form endpoint before publishing.
Security
Trove uses AES-256-GCM for vault encryption and derives encryption keys from your master password using PBKDF2-SHA-256. Keep your master password private and maintain a backup in a secure location.
Changes and contact
We may update this policy when the product or website changes. The current version will always be published here. For questions or privacy requests, use the support page.