Rovatrove

Privacy Policy

Effective date: August 23, 2026

Rovatrove exists to let you follow content without handing out your identity. This policy explains what we collect, why, how long we keep it, and how to delete it. The short version: we collect the minimum needed to run the service, we never sell your data, and the most sensitive things you store with us are encrypted so that we cannot read them.

What we collect

  • Account information. Your email address and a password (stored only as a one-way Argon2id hash; we never store or see your actual password). If you sign in with Google, we store your Google account identifier and email instead. We never receive your Google password and we request no access to your Gmail or other Google data.
  • Your subscriptions. The services, newsletters, feeds, and channels you follow, and the private forwarding addresses we create for them.
  • Subscription content. The newsletters and feed items your subscriptions deliver are stored so you can read them in your feed (we strip out scripts and other active content first). This is content you chose to receive; we keep it only for a limited window (see Retention) and use it for nothing but showing you your feed.
  • Vault data, which we cannot read. If you use the credential vault, its contents are encrypted on your device before they ever reach us. We store only opaque ciphertext. We hold no key, and there is no recovery backdoor: we could not read your vault even if compelled to try.

What we don’t do

  • We do not sell or rent your data to anyone. Ever.
  • We do not show ads or share data with advertisers or data brokers.
  • We do not read your personal inbox. Rovatrove requires no access to your existing email account.
  • This website sets no cookies and runs no advertising or cross-site trackers.
  • We do not record your screen. Rovatrove uses no session-replay or screen-recording tooling, in the app or on this website.

Analytics

We use PostHog to understand how the app and this website are used. This website additionally uses Cloudflare Web Analytics, which our host provides: it is cookieless, records no persistent identifier, and reports only aggregate traffic. We use no other analytics, and no advertising or cross-site tracking anywhere.

  • In the app, we record a fixed list of product events — things like a screen being opened, a plan being chosen, a purchase starting or failing, and a subscription being added or removed — along with app crashes and errors. Events carry the event name, your account identifier, and simple labels such as which plan or subscription type was involved.
  • What analytics never receives: the contents of your feed, the names of the services you follow, your private forwarding addresses, your vault data, or your email address. We send an account identifier, never an address.
  • On this website, we count page views and where visitors arrived from. This is configured to store nothing on your device — no cookies and no local storage — which is why you see no cookie banner here.

How the private addresses work

Each email subscription gets its own unique forwarding address. Senders see only that address, never your real one. When you remove a subscription, its address is retired: mail sent to it is dropped without being stored or forwarded. Retired addresses are held in reserve (never reassigned to anyone else) for the life of your account plus a short closure window, then purged. The mapping between addresses and your subscriptions is stored encrypted (AES-256-GCM) on our servers.

Retention and deletion

  • Feed content is kept for 30 days, on every plan, then automatically and permanently deleted. We don’t build an archive of everything you read, and paying more does not make us keep it longer.
  • We turn each incoming message into a feed item and don’t retain the original raw email beyond that.
  • Account deletion is immediate and irreversible.Deleting your account (Account → Delete account, or by emailing us; see Account Deletion) permanently removes your profile, subscriptions, addresses, stored content, vault ciphertext, and sessions.
  • Encrypted backups of our database are kept for at most 30 days and then automatically deleted, so a residual copy of deleted data never outlives that window.

Service providers

We use a small number of infrastructure providers to run Rovatrove. Each processes data only on our instructions, only to provide the service:

  • Amazon Web Services (SES): receives mail sent to your subscription addresses.
  • Resend: sends our transactional email (e.g. password resets, email verification, security notices).
  • Supabase: database and file storage (encrypted at rest).
  • Railway: application hosting.
  • Cloudflare: hosts and serves this website, and provides the cookieless aggregate traffic analytics described above. It does not receive your account data or any subscription content.
  • Google: optional “Sign in with Google.”
  • Anthropic: automated classification of incoming subscription mail (e.g. “newsletter issue” vs. “receipt”). Content is processed transiently and not used to train models.
  • RevenueCat: manages subscription entitlements for paid plans. It receives your account identifier and purchase status, never your name, email, or card details.
  • PostHog: product analytics and error reporting. It receives the product events described under Analytics above and your account identifier, never your email address or any subscription content.
  • Google Play / Apple App Store: payment processing for paid plans; we never see your card details.

Where your data is stored

Rovatrove is operated from the United States, and all of the providers above process your data on servers in the United States. If you use Rovatrove from outside the United States, including from the European Union or the United Kingdom, your information is transferred to and stored there. Where the law requires a transfer safeguard, our agreements with these providers include the European Commission’s Standard Contractual Clauses.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise deletion yourself in the app at any time; for anything else, email support@rovatrove.com and we will respond within 30 days. We do not discriminate against you for exercising your rights.

Children

Rovatrove is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Changes

If we make material changes to this policy, we will update the effective date above and notify you in the app before the changes take effect.

Contact

Privacy questions: support@rovatrove.com

This policy is provided for transparency about how Rovatrove works; it is not legal advice to you.