Privacy policy
DRAFT for legal review. Not in force. Nothing here is a commitment yet; a lawyer must review and complete it before launch. Items marked TODO need a decision.
This page explains what the Trovo app and this website collect, why, and what you can do about it. Trovo is built by three founders in India. No company is registered yet, so no legal entity is named here. TODO: name the data fiduciary once the company exists.
1. This website
The site sets no tracking cookies and runs no analytics. It saves only what you tap in the passport demos (places and states), in your own browser, and that never leaves your device. Neither leaves your device.
The waitlist form is not connected yet: it sends and stores nothing. TODO: when it is connected, describe the provider, what is stored (email only), how long, and how to leave the list.
2. What the app collects
- Account: phone number for sign-in (one-time code), name, handle, profile photo, birth year and consent records.
- Trips and location: while a trip is live, location points that draw your route; the stops and states the app works out from them.
- Photos you add: the photos you put on trips, and their place and time so they land on the right stop. TODO: confirm photo metadata handling (EXIF stripping) in the final text.
- Social: who you follow, close friends, reactions, comments, and your chat messages.
- Diagnostics: crash and error logs to keep the app working.
3. Location and your controls
- Location runs in the background only while a trip is live.
- Each trip is visible to Everyone, My circle or Only me. New trips start with My circle.
- Live sharing is off unless you turn it on. You choose Exact, City or Ghost; your circle or close friends; and 1 hour, until the trip ends, or always.
- Hidden places (home, hostel or anywhere you choose): your route and live dot are never drawn inside them.
- Share cards can hide the start and end of a route.
- Passport stamps: followers see a stamp's place and month only from trips they may see, and only a day after the trip ends. Everyone else sees counts. Places within 5 km of your home, the country you live in, your "I've been here" marks and the stamps of anyone under 18 are not shown to others.
4. Why we use it
To run the app: draw trips, place photos, stamp your passport, show your trips to the people you chose, keep accounts secure, and fix bugs. We do not sell personal data. TODO: confirm no advertising use, and list any future use with its legal basis.
5. Who processes it
Hosting and storage in India (Mumbai region), push notifications, and SMS for sign-in codes. TODO: list each processor by name and country.
6. How long we keep it
TODO: retention periods per data type (the backend plan has a retention table in progress). When you delete your account, your data is deleted after a short grace period. TODO: state the period.
7. Young users
TODO for counsel: minimum age, and verifiable parental consent for users under 18 under the Digital Personal Data Protection Act, 2023 and its Rules.
8. Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask to access a summary of your data, correct or complete it, erase it, withdraw consent, nominate someone to act for you, and raise a grievance. Write to hello@trovo.app. TODO: grievance officer name, response time, and the Data Protection Board escalation route.
9. Changes
We'll update this page and the date at the top, and tell you in the app before material changes take effect.