Privacy Policy

Overview

Student Trove is designed with privacy in mind. Core planning features work entirely offline with data stored locally on your device. Optional features like cloud sync and premium subscriptions require an account and may transmit data to secure third-party services.

Data stored on device

Student Trove stores timetable, task, grade, attendance, and study data locally on your device. On supported platforms, this local database is encrypted with SQLCipher.

Network access

• Core planning features work offline with local storage.
• Optional account sign-in uses Supabase authentication.
• Optional cloud sync stores your planner data (subjects, semesters, classes, tasks, grades, attendance, notes and study plans) linked to your account, sent over an encrypted connection and readable only by your account.
• Premium setup may fetch a public RevenueCat SDK key from Supabase remote config.
• Premium purchase and restore use RevenueCat and Google Play Billing services.
• When cloud sync is enabled, that data is stored in Student Trove’s Supabase database.
• Smart Import sends the image, PDF, or text you choose to Student Trove’s import service, which uses OCR.space and Google Gemini to read it. See Smart Import below for what each service does with it.

What we do not collect

• No ad tracking identifiers.
• No analytics tracking for advertising purposes.
• No access to your device contacts list or location data.
• No session recordings or screenshots of your data.
• No academic data (timetable, tasks, grades, attendance) is ever sent to analytics services.

Account and cloud data

• If you create an account, your email and auth identifiers are stored by Supabase Auth.
• If you use cloud sync, your synced data is stored in Student Trove’s Supabase database and protected by row-level security, so only your account can read it.
• App versions before 2.4.0 store a randomly generated device identifier alongside your sync record to prevent data conflicts when syncing across multiple devices. This identifier is not your hardware ID, is not used for advertising, and resets if you reinstall the app.
• Premium entitlement status may be linked to your account so it can sync across devices.
• You can sign out and manage account details from the app settings.
• Deleting your account deletes your synced data.

Analytics and crash reporting

Student Trove uses PostHog to collect anonymous usage analytics and crash reports. This helps identify bugs and understand how the app is used in aggregate. No academic data (timetable, tasks, grades, or attendance) is ever included in analytics events.

What PostHog collects

• App lifecycle events (app opened, sent to background, foregrounded).
• Screen views — the name of each screen navigated to, without any content from that screen.
• App interactions — general usage events such as feature usage patterns.
• Crash logs and stack traces when the app encounters an unhandled error.
• An anonymous randomly-generated identifier used to distinguish devices in aggregate reporting. This is not your hardware device ID, is not linked to your identity, and resets if you reinstall the app.

In-app feedback

When you choose to submit feedback via Settings → Send Feedback, the following is sent to PostHog: your feedback message, the feedback type you selected (e.g. bug report, feature request), and optionally your email address if you choose to provide it for follow-up. Submitting feedback is entirely voluntary.

Your choice

You can opt out of analytics and crash reporting at any time in Settings → Data Management → Share analytics & crash reports. Turning this off stops all PostHog data collection for your device. This does not affect any other app functionality.

Permissions

Export and import

Export

You can export data at any time, including calendar files (ICS), spreadsheets (CSV), and full JSON backups. Exports are created locally and shared by you.

Smart Import

Smart Import is not processed on your device. The photo, PDF, or text you choose is sent over an encrypted connection to Student Trove’s import service. The service sends images to OCR.space for text recognition and sends the text to the Google Gemini API to organise it into classes, tasks, or marks, then returns the result. Nothing is imported until you review it.

• Student Trove’s import service keeps nothing from your file. To limit abuse, it keeps a request counter keyed on a random app install ID for about two minutes.
• OCR.space states that it deletes uploaded documents after processing.
• Smart Import uses Google’s free (unpaid) Gemini API tier. Under Google’s terms for that tier, Google may use the content and results to provide, improve, and develop its products and machine learning technologies, and human reviewers may read it.
• Don’t use Smart Import for documents containing personal or sensitive information.

Third-party services

Student Trove uses the following third-party libraries/services:

• OCR.space and the Google Gemini API, used by Student Trove’s import service to read files you choose to import with Smart Import (see Smart Import; OCR.space privacy policy, Google privacy policy)
• SQLCipher (encrypted local database on supported platforms)
• Supabase (remote config delivery for RevenueCat public SDK key)
• RevenueCat (premium purchase entitlement management)
• Google Play Billing (premium purchase processing)
• PostHog (anonymous analytics and crash reporting — see the Analytics and crash reporting section above for full details)

Data security

• Local data is stored in an encrypted SQLite database on supported platforms.
• Encryption keys are stored in the device's secure storage.
• Cloud sync is optional and account-controlled.

Contact

Changes to this policy

Updates will be posted here with a new "Last updated" date.