How Trovu handles your data, on your device and when you connect to other services.
Trovu is a Jellyfin and Plex client provided by BetterSIM LLC ("we", "us", or "our"). This policy covers the Trovu app on Apple TV and iPad, including offline downloads where supported. It explains what information is stored on your device, what is shared when you use connected services, and how to manage your data.
You do not need a separate Trovu account. You connect your own media servers and, if you choose, other services. Trovu does not operate a central copy of your media library.
To provide playback and browsing, the app stores information on your device, including:
On supported devices, Trovu Pro lets you download media from your connected server for offline playback. Downloaded files and their associated information are stored in the app's local storage, not uploaded to a Trovu media-storage service. The app marks its offline storage as excluded from device backups.
When you watch offline, playback progress is stored locally. When a connection is available again, the app can send pending progress and watched-status updates to the relevant media server and to Trakt if you have enabled that integration.
Apple StoreKit: Monthly and yearly subscriptions, lifetime purchases, and purchase restoration are handled through Apple StoreKit. The app uses Apple's transaction and entitlement information to determine whether Trovu Pro is active. We do not receive your payment-card details. Apple may provide us with sales and financial reports through App Store Connect.
Your media servers: Trovu communicates with the Jellyfin and Plex servers you configure for authentication, library browsing, streaming, downloads, and playback-progress updates. These requests go from your device to the server or connection service used to reach it. Your server operator controls how that service handles its data.
Plex: If you connect Plex, the app communicates with Plex's services for sign-in and server discovery. Plex's handling of these requests is covered by Plex's privacy policy.
Trakt (optional): If you link Trakt, the app exchanges authorization information, media identifiers, playback progress, and watched history with Trakt according to your sync settings. Disconnecting Trakt stops future syncing from the app; it does not delete history already stored by Trakt.
Seerr (optional): If you configure Seerr, the app sends authentication information, searches, and movie or episode requests to your Seerr server. That server handles discovery and request management. Related artwork may be loaded from The Movie Database (TMDB).
TheTVDB and artwork providers: The app may request cast biographies, filmographies, and other metadata from TheTVDB through our metadata proxy. Requests can include a person's name or a content identifier. Images may load from the relevant provider's servers. These requests do not intentionally include your media-server credentials or a copy of your library.
Network information: Like other online services, our hosting providers and the services you connect to receive an IP address and technical request information when your device connects. This information may be processed to deliver responses, maintain reliability, and prevent abuse.
TestFlight and development builds offer an optional Send Report feature for troubleshooting playback. Reports are sent only when you choose to send one. They can include device and OS details, the app version, media titles and identifiers, codec information, playback measurements, server or request details, and diagnostic logs. The app attempts to remove authentication credentials from logs before uploading them.
These reports are stored using our Cloudflare-hosted diagnostics service and are configured to expire after 90 days. This report-upload feature is disabled in the public App Store build.
If you contact support, we receive the contact details, message, and any attachments you choose to send. We use that information to respond and troubleshoot. Please do not send passwords or other secrets. You can contact us to request deletion of support information or a diagnostic report; include the report code if available.
Apple may process purchase, crash, diagnostic, and app-usage information through the App Store, TestFlight, or your device settings, and may make reports available to us. Apple's handling of this information is governed by Apple's Privacy Policy and your Apple privacy settings.
You can remove downloaded titles in Settings > Offline Playback on supported devices, clear caches using the app's settings, and remove server connections or disconnect optional integrations. Clearing caches does not necessarily remove downloads, credentials, or all preferences.
Deleting the app removes its local app storage. Keychain entries may persist separately; remove connected accounts in the app before uninstalling, or revoke access through the relevant service where supported. Data already stored on your media server, Trakt, Seerr, or Apple's services is controlled through those services. Deleting Trovu does not cancel an Apple subscription.
Trovu is not directed at children under the age of 13. We do not knowingly collect personal information from children. The app connects to user-owned media servers, and any content restrictions should be managed through your server's built-in parental controls.
Trovu uses Apple's platform protections for local app storage and Keychain-protected credentials. Connections to your media servers use the HTTP or HTTPS configuration available for those servers. HTTPS protects data in transit; HTTP does not provide that protection.
We may update this Privacy Policy as the app changes. Updates will be published on this page with a revised effective date.
If you have questions about this Privacy Policy, contact us at [email protected].