Privacy Policy

Last Updated: October 30, 2026

Introduction

Trovelet (“we”, “us”, “our” or “Developer”) is an app for collectors: a place to keep track of what you own and what you are missing in each collection. Your collections live on your own device. We have no accounts, no ads, no tracking and no analytics, and we run no server of our own that receives your collections. The one exception is a collection you choose to share, whose copy is stored in the Application’s CloudKit public database (Section 3). This policy explains what the app keeps on your device, what leaves it and why, the third-party service involved in purchases (RevenueCat), what happens when you choose to share a collection, and the rights you have.

It applies to the Trovelet app for iPhone and iPad (the “Application”).

1. Information the Application Keeps on Your Device

All of the following is stored on your device, inside the Application’s private storage. None of it is sent to us.

Collections: your collections, groups and pieces, with names, owned or missing status, copy counts, release dates, notes, links, the price you paid and the currency, and the dates you added or got a piece.
Photos: the photos you choose for a collection, group or piece. They come either from images you pick in the iOS photo picker, which shares just those images with the Application, or from a photo you take with the camera in the Application. Trovelet has no access to the rest of your photo library. The camera is used only while you are taking a photo, and only after you allow camera access, which you can turn off at any time in the iOS Settings app. Photos are stored in the Application’s private storage, not in your photo library.
Shared collections you received: if you open someone else’s share link and save the collection, a copy of it, including its photos, is stored on your device.
Your shared links: the list of links you have shared, so you can find and delete them.
Settings and state: your reminder, sync, appearance and group sort settings, the name you show when you share a collection, RevenueCat’s cached purchase status so Pro works offline, and small records of whether you have seen the welcome cards.

Name suggestions from a photo: after you pick or take a photo for a piece, the Application reads the text in it on your device, using Apple’s Vision framework, and offers up to five names to choose from. The photo and its text are never sent anywhere for this. The recognised text is not stored or logged, and a name is only filled in when you tap a suggestion.

Exported files: a spreadsheet (CSV) export goes where you send it through the iOS share sheet. From then on it is under your control, not the Application’s.

Device backups: if iCloud Backup or a computer backup is turned on, iOS may include the Application’s data in that backup. This is controlled by your device settings, not by us.

2. iCloud Sync (Trovelet Pro)

With Trovelet Pro you can sync your collections between your devices through Apple’s iCloud, in your own private iCloud database. This is handled by Apple under your Apple Account; we cannot see or access it. You can turn sync off in the Application’s Settings. If Pro ends, or sync is turned off, syncing stops and nothing is deleted, on the device or in iCloud. You can delete Trovelet’s iCloud data in the iOS Settings app (your name, then iCloud, then Manage Account Storage, then Trovelet).

You can share a collection by link. This is optional and only happens when you choose it. When you share a collection, the Application publishes a read-only copy to CloudKit’s public database, which Apple hosts under the Application’s iCloud container. The copy contains:

the name you choose to show as the sharer (the “My name” field in Settings) and the date you shared it;
the collection name and target total, and the names of its groups and pieces;
the colours of the collection and its groups;
whether each piece is owned or missing;
the release dates of pieces, where you set them;
the photos of the collection, its groups and its pieces, reduced in size.

The copy never contains prices, currencies, notes, store links, copy counts, or the dates you added or got a piece.

Anyone who has the link can open and read the copy, with or without the app. Someone who opens the link can save a copy of the collection, including its photos, on their own device. Deleting the link does not remove copies that people have already saved, and we cannot remove them. Deleting the link removes the published copy from CloudKit’s public database, so nobody can open it afterwards. You delete a link in Settings, then Sharing, then Shared links.

Do not share a collection, or put a name or photo into one, that you would not want anyone with the link to see and keep. The copy is stored in the Application’s CloudKit container, which Apple manages and which we, as the container’s owner, can technically access. We do not read shared copies, except to handle an abuse report or a legal request.

Sharing a piece, or your Trade List, goes only through the iOS share sheet. The Application builds the text and hands it to the app or contact you pick. It does not go through any server of ours.

5. Information We Do Not Collect

No user accounts, and no email address, phone number or location.
No collections, notes or photos, apart from the collection copies you choose to share (Section 3), which are stored in CloudKit’s public database. We do not read them except to handle an abuse report or a legal request.
No access to your photo library beyond the images you pick, and no use of the camera except while you take a photo.
No text recognised in your photos; it is read on your device and discarded.
No advertising, no advertising identifiers, no tracking across apps or websites.
No analytics or crash-reporting services in the Application. RevenueCat is the only third-party service the Application uses.

6. Purchases (RevenueCat)

Trovelet offers an optional upgrade, Trovelet Pro, as a monthly or yearly subscription or a one-time lifetime purchase. Purchases are made through Apple’s App Store with your Apple Account.

To check whether Pro is unlocked, the Application uses RevenueCat (RevenueCat, Inc.), a purchase-verification service. The RevenueCat software in the Application assigns a random, anonymous app user ID (not linked to your name or to any account of ours) and processes the App Store purchase and transaction information needed to confirm and restore Pro and to show whether you are eligible for the free trial.

RevenueCat never receives your collections, notes, photos, name or email address. This information is not used for advertising and is not shared with data brokers. RevenueCat handles it under its own Privacy Policy. Apple handles payments under the Apple Media Services terms and Apple’s Privacy Policy. We do not receive your payment details.

7. Notifications

If you allow notifications, the Application schedules a reminder on your device before a free trial ends. We do not send you push notifications from a server. iCloud sync (Section 2) may use Apple’s silent notifications to keep your devices up to date.

8. When You Contact Us

If you send us an email, we use your address only to answer you, and you can ask us to delete it.

Reporting a shared collection: if a collection someone shared with you is offensive or abusive, Report opens an email to us in your mail app, with the link’s token filled in so we can find that copy. You can review or change the email before you send it. We use it only to look into the report, and may delete the shared copy from CloudKit’s public database.

We do not sell, rent, share or trade any information. The only parties outside your device involved in using Trovelet are Apple (the App Store, iCloud and CloudKit) and RevenueCat (purchases). We would disclose information only if required by law, and apart from the collection copies you choose to share, we hold no copy of your collections to disclose.

10. Children’s Privacy

Trovelet is not directed to children under 13, and we do not knowingly collect personal information from anyone, including children. If you believe a child’s information has reached us, contact us and we will delete it.

11. Data Retention and Security

Your collections stay on your device, and in your iCloud if you use sync, until you delete them: delete a piece, group or collection in the Application, or delete the Application to remove everything it keeps on that device, and remove it from iCloud and any backups if you wish. A shared collection copy stays in CloudKit’s public database until you delete its link (Section 3). Deleting a link does not erase copies other people saved to their devices before you deleted it. RevenueCat and Apple keep purchase records under their own retention policies, so that purchases can be restored.

The Application’s data is protected by the device’s app sandbox and data protection. No technology is risk-free: please protect your device with a passcode and keep your Apple Account secure.

12. Your Rights

EU and EEA (GDPR): you have the rights to access, rectify, erase, restrict or object to processing, and to data portability. Because we keep none of your collections apart from collection copies you choose to share, these rights mostly concern the data on your device and in your iCloud (which you control directly), the collection copies you share (which you can delete yourself, see Section 3), and RevenueCat’s purchase records. The purchase check is based on our legitimate interest in unlocking what you paid for. You may also complain to a data protection authority; the Developer is based in Poland, so the lead authority is the Urząd Ochrony Danych Osobowych (UODO), uodo.gov.pl.
California (CCPA/CPRA): you have the right to know and to delete. We do not sell or share personal information.

13. Contact

Questions, or a request about your information:

Artur Gorbaczewski Email: contact@nightcodeapps.com Web: https://nightcodeapps.com/apps/trovelet/privacy

14. Third-Party Services

Service	Purpose	Privacy policy
RevenueCat	Confirms a Trovelet Pro purchase and trial eligibility	https://www.revenuecat.com/privacy
Apple (App Store, iCloud, CloudKit)	Payments, iCloud sync in your private database, and shared collection copies in the public database	https://www.apple.com/legal/privacy/

15. Changes to This Policy

If this policy changes, we will update the “Last Updated” date at the top of this page.