Troven ("Troven", "we", "us") is a mobile app that helps you discover movies
and TV series, save them, and decide what to watch with friends. This Privacy
Policy explains what data we collect, how we use it, who we share it with, and
the choices you have. Troven Lab is the data controller; Google
Firebase and other processors act on our instructions (see Section 3).
This document is intended to support Google Play Data safety / App Store privacy
disclosures and GDPR-oriented transparency. It is not legal advice; have counsel
review before production launch in the EEA/UK if needed.
1. Information we collect
Account & authentication
Email address and a unique account identifier (UID) when you sign in (Email/Password, Google, Apple, Play Games, or similar).
Display name and chosen username.
Authentication provider used to sign in.
Anonymous "guest" sign-in may be supported for limited flows; it does not require an email.
App Instance ID and usage events via Firebase Analytics (only after you accept analytics consent).
Crash traces, device/OS info, and optional breadcrumb logs via Firebase Crashlytics (only after you accept crash-report consent).
Advertising ID / similar ad identifiers when ads are shown and permitted (AdMob / UMP consent where required).
App version, platform, and basic technical logs needed to operate the service.
2. How we use your information
To provide core features: sign-in, recommendations, library, chat, friends, and group sessions.
To connect you with friends and compute group matches.
To send notifications you have enabled (messages, session invites; marketing only with separate opt-in).
To respond to support requests and bug reports.
With your consent: analytics and crash reporting to improve stability and product quality.
To show ads (where enabled) according to your ad consent choices.
To prevent abuse and enforce our Terms.
3. Third-party services (processors)
We rely on providers that process data on our behalf, including:
Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, Hosting, Storage, Realtime Database) — see Firebase privacy.
The Movie Database (TMDb) — movie/series metadata and images. Troven uses TMDb but is not endorsed or certified by TMDb.
Google AdMob — advertising (test units during development; production units when live).
As controller we remain responsible for compliance. Google acts as a processor for
Firebase; execute / maintain a Data Processing Agreement with Google in the Firebase
/ Google Cloud console where required.
4. Legal bases & consent
Contract / legitimate interest: account, library, friends, chats, and recommendations needed to run the app.
Consent: Firebase Analytics, Crashlytics, FIAM targeting, and personalized ads. Collection is off by default until you accept in the Privacy & diagnostics screen. You can withdraw anytime in Settings → Privacy & diagnostics without losing core features.
Marketing push: separate opt-in (default off).
5. Friends, chats & visibility
Your display name, username, and messages are visible to people you chat with or join sessions with.
Support threads are visible to Troven support operators so we can help you.
You can block users and report abuse from the app.
After account deletion, remaining participants may still see historical message text, but your profile is shown as "Deleted user" and your media files are removed.
6. Data sharing
We do not sell your personal data. Limited content you choose to share is visible
to the people you share it with. Service providers listed above process data to
operate the app. We may disclose information if required by law.
7. Retention & deletion
We keep your data while your account is active. You can delete your account
in the app (Settings → Delete account) or via our
web deletion page / email
dev.vaderducking@gmail.com.
On deletion we remove personal data from active use: Auth account deleted,
username released, subcollections purged, avatars and your chat images deleted.
We retain a non-identifying Firestore tombstone (users/{uid} with
status: DELETED and emptied fields) for integrity and abuse prevention.
We aim to complete requests within 30 days, except where law requires longer retention.
8. Security
Data is encrypted in transit. Access is restricted by Firebase Security Rules and
server-side functions. No method of transmission or storage is 100% secure.
9. Children
Troven is not directed to children. You must be at least 13 years old (or the
minimum age of digital consent in your country, e.g. 16 in parts of the EU) to use Troven.
10. International transfers
Firebase and Google services may process data in the United States and other
countries. Where required, transfers rely on appropriate safeguards (e.g. Standard
Contractual Clauses) provided by Google.