Skip to content

Privacy Policy

Effective date: October 23, 2026

Trovie ("we", "our", or "us") is a movie and TV show discovery service operated by Sameer Sitre. It is available as a website at trovie.co and as a mobile app on Google Play (collectively, the "Service"). This policy explains what the Service collects, why, who it is shared with, how long it is kept, and the choices you have. The website was previously named StreamSeek; the change is one of name only.

By using Trovie, you agree to the collection and use of information as described in this policy.

1. In short

2. Information we collect and why

2.1 Stored on your device

The app keeps your settings (your chosen country and streaming services, content filters) in its own storage on your phone. It also stores the country and public IP address that Cloudflare reported for your connection (section 2.4). Earlier versions of the app could also keep a watchlist, likes, dislikes and "watched" check-ins on the phone without an account; the watchlist and check-ins are uploaded to your account when you first sign in (section 2.7) and then removed from the phone. Trovie no longer keeps likes or dislikes. Sign-in tokens are kept in Android's secure key storage. Uninstalling the app or clearing its data removes all of this from the device. The website keeps a short profile summary and your detected country in your browser's local storage.

2.2 Install ID and device information (app, before and after you sign in)

On first launch the app creates a random install ID. It is not derived from your phone's hardware and is lost when you uninstall the app or clear its data. When the app starts, it registers the install with our server, sending:

We use this to send notifications at a sensible local time and for the right country, to decide which app versions still need an update prompt, and to count active installs. The record is deleted 180 days after the app last checked in; on Android, signing out also deletes it (a new, signed-out record is created on the next launch), and deleting your account removes your account ID from it. If Firebase reports that a push token no longer works, we delete the token and record that the app appears to have been uninstalled.

2.3 App-open records

For each install and each day the app is opened, we keep the date, how many times it was opened, the app version, and your account ID if you are signed in. We use this to understand how often people come back. Each record is deleted after 90 days.

2.4 Your country

To show availability for your country, the app and the website ask Cloudflare's public trace service (cloudflare.com/cdn-cgi/trace) which country your connection comes from. The two-letter country code is then sent with requests to our server. Trovie supports 53 countries; anywhere else it shows US availability. You can choose a different country in the app's settings (section 6).

2.5 Signing in is required in the app

The app can only be used after signing in, with Google or with an email address and a password. Before you sign in, the only information it sends us is the install and device information in section 2.2 and the app-open records in section 2.3, which we use to count installs and to see how many people who open the app go on to sign in. The website needs a sign-in too: signed out, it opens only its landing and guide pages, these policies and list invitations.

2.6 Account information (when you sign in)

You can sign in with Google or with an email address and a password, on the app and on the website.

Either way, we record when you first and last signed in and how many times. A password reset, a password change or "Sign out of other devices" ends every other session, in the app and on the website. The app keeps you signed in with a short-lived access token and a refresh token; our server stores only a one-way hash of the refresh token, which expires 90 days after it was last used. Records of ended sessions are kept for up to 30 days so a stolen token cannot be reused. The website keeps you signed in with an encrypted session cookie containing your account ID, name, email and picture.

2.7 Your lists and activity (signed in)

We store the titles you rate (a score from 1 to 10), add to your watchlist, mark as seen or check in as watched, and the episodes you tick off, with the time of each. With each title we store its name, poster and rating as they were at the time. We use this to show your lists, Up Next, Watch Stats and the weekly recap, to personalise suggestions, and to decide when spoilers may be shown. Watchlist titles an earlier version of the app kept on your phone before you signed in are uploaded to your account when you first sign in.

Where you watch. When you tell us where you watched a title, or are watching it — on a streaming service, in a cinema, on TV, on disc or somewhere else — we store that with the title, along with the time you told us. An import from Netflix records Netflix for the titles it brings in. It is shown only to you: it never appears on your profile, on a public list or to anyone else. It stays until you change or remove it, remove your check-in, or delete your account. The list of services and their logos comes from JustWatch through TMDB.

Shared watchlists. For lists you create or join we store the list name and emoji, its members, its titles, who added each one and when. Other members of a list see your name, profile picture, the titles you added, and which titles on the list you have marked seen or watched. Anyone with an invite link sees the list's name and emoji, but not its members. A log of list activity (created, joined, left, titles added, limits reached) is kept for 180 days.

2.8 AI chat, Character Maps and memory

2.9 Notifications (Android)

If you allow notifications, we use your device's push token (section 2.2) and your notification choices, which are stored with your account. For every notification we send we record who it went to (account or install ID), which devices and app versions it was sent to, whether Firebase accepted it, and whether and when it was tapped. These records are deleted after 60 days. Extra notifications on a busy day may be held for up to 14 days and delivered later.

2.10 Search and popular searches

What you type into search is sent to our server, which passes it to TMDB to find matching titles. When you open a title from the results, we add that title to a weekly "Popular searches" chart for your country; to count each person once, we keep your account ID or install ID with that title for 8 days. The chart does not store what you typed.

2.11 Feedback, feature requests and problem reports

If you send feedback in the app, we store your star rating and message, the app version and platform, and your account ID if you are signed in, until you ask us to delete it. Deleting your account removes your account ID and email from feedback you sent.

If you suggest a feature, its title and details are shown to every signed-in Trovie user with your display name or @username, along with how many people voted for it and any reply from our team. Before it goes up, the text is checked automatically for abuse by Anthropic's Claude. We store which requests you voted for; no one else can see that. You can delete a request of yours while it is still open, and we may hide or remove one.

If you report a problem, we store what you wrote, your account ID, the app version, your phone's operating system and version, its maker and model, the region the app was set to and — if you add one — a screenshot of the app that you take yourself, with the name of the app screen it shows. Only the Trovie team can see a report. When one arrives, our team gets a notice in our internal chat that says only that a report came in, with its app version, platform and operating-system version — never what you wrote or who you are.

2.12 Purchases (Android)

Where Trovie Pro is offered, it is sold through Google Play; we never see your payment details. RevenueCat manages subscriptions for us. When you sign in on Android, the app identifies you to RevenueCat by your Trovie account ID and gives it your name, email address, country and install ID, whether or not you buy anything. Our server stores your plan and your subscription's status and expiry date, and keeps RevenueCat's purchase notifications for 90 days. When our server turns down a Trovie Pro feature you asked for (for example once your free Ask Ovi answers are used), it notes which feature and when, and keeps that for 30 days. When our team gives you Trovie Pro or takes it back, we keep a record of who did it and when.

2.13 Advertising (Android)

The Android app shows banner, full-screen and native ads (and, where enabled, rewarded ads) from Google AdMob. The AdMob software in the app collects your device's advertising ID, IP address, and device and app-usage information to show, measure and — depending on your Google settings — personalise ads. We do not give AdMob your name, email or lists. When you watch a rewarded ad to open a Character Map, the ad request also carries your Trovie account ID and that title, so Google can confirm to our server that you watched the ad. The app does not currently show an ad-consent prompt. You can reset or delete your advertising ID, or opt out of ad personalisation, in your device's Google or Ads settings. Trovie Pro, where offered, removes ads.

2.14 Product analytics and crash reports (Android)

2.15 Comments and discussions (app)

You can write comments on a film or show, reply to other people, like a comment, react to a thread and report a comment. Comments are public. Anyone signed in to the app can read them, and we may show them to our AI assistant so it can take part in the conversation. Every account has a public @username, made up at random when you sign up — never from your name. You can change it once, and the one you gave up stays reserved for you. Your profile picture — a generated avatar, or a photo you upload — is shown beside it. Your real name and email are not shown. A comment can be edited for 15 minutes and deleted by you at any time.

We store the comment text, the title it is about, who wrote it, when, and whether it was flagged as a spoiler. Likes, thread reactions and reports are stored with your account ID so that each counts once. To keep the threads usable we check comments automatically, using the AI provider named in section 3, against rules on harassment, hate speech, sexual content, violence, spam and self-harm; a comment can be hidden by that check, by three separate reports, or by us. We keep a report you make, with your account ID, so it can be acted on.

A comment can carry a GIF or a photo. A GIF comes from KLIPY (section 3): when you open the GIF search, the app sends your search words, a random identifier made on your phone (not your account) and, like any web request, your IP address straight to KLIPY, and the GIF is shown from KLIPY's servers to everyone who reads the comment. We store only which GIF it is. A photo you choose from your phone is sent to our server, which re-encodes it — removing its location and other photo metadata — and checks it automatically with the AI provider named in section 3. Nobody else sees it unless that check passes, and it is public once posted, like the comment it is in. You can upload up to 10 photos a day.

Deleting your comment, or your account, erases the words and any GIF or photo in it. The comment itself stays as an anonymous placeholder, because replies underneath it would otherwise lose their place in the conversation; nothing on it identifies you afterwards, and your @username — and the one you had before, if you changed it — is released. See deleting your account.

2.16 Your profile, follows and blocks (app)

Your profile is found by your @username (section 2.15): other signed-in Trovie users can open it from your comments and from shared watchlists you are in. It shows your @username and photo, and anything you choose to add: a display name, a short bio, a colour, a country flag and a featured badge. It shows whether you have Trovie Pro and how many followers you have and people you follow, and — unless your profile is private — the lists of those people and what you watch: your watch time, your day streak and a day-by-day activity calendar, the titles you watched, rated or added to your watchlist, your ratings, your comments and your badges. Every score you give shows in your profile's Rated list, a low one included. "Seen" marks are never shown, and shared watchlists are never listed on a profile. Other people see which day something happened, never the time.

To show this we keep a dated record of what you watch, rate and add to your watchlist, including episode check-ins. It also includes the dates we already held from before this feature (when you first marked a title watched, added it to your watchlist or rated it), and the dates in any history you import. Your profile is public by default, and the app tells you so the first time you open it. You can make it private at any time — in that notice, or in Edit Profile — and public again whenever you like. A private profile shows anyone who is not a friend (someone you follow who also follows you) only your @username, display name, photo, bio, colour, country flag, whether you have Trovie Pro, and your follower counts. On a profile, your comments show the day you posted them, never the time. Profiles are not shown on this website or to search engines.

Your profile picture is a generated avatar unless you choose one: a photo you upload, or a GIF from KLIPY. We crop and re-encode an uploaded photo on our server, which removes location and other photo metadata, and check it automatically with the AI provider named in section 3 before anyone else can see it. A GIF is picked from KLIPY's library in the app — the search goes from the app to KLIPY directly (section 3) — and we keep only KLIPY's links to it, so everyone who sees your profile picture loads it from KLIPY's servers. You can follow people, block them (neither of you then sees the other's profile or comments, and you stop getting notifications about each other) and report a profile; a report is kept with your account ID so it can be acted on. We also count ratings across all users to show a title's Trovie rating on its page; individual ratings are never shown there, and nothing is shown until at least five people have rated a title. Scores you give episodes are counted the same way, in an anonymous tally per episode — how many people gave it each score, with no account or date attached — and so is the favourite character you pick for an episode (how many people picked each character), shown as an episode's fans' favourite once five people have picked. Those tallies are kept if you delete your account, so your episode scores and picks stay counted without anything tying them to you; your own record of them is deleted. Deleting your account deletes your profile, photo, activity record, follows, blocks and reports (see deleting your account).

2.17 Security and server logs

Our server sees your IP address with every request and uses it for rate limiting, in counters that expire within minutes. Our web server's access logs record the IP address, time, browser or app, and the address requested — for a search, that includes the search text. These logs are capped in size and overwritten automatically.

2.18 Importing and exporting your watch history

If you import a watch history from another service (TV Time, Trakt, IMDb, Simkl, Letterboxd, Netflix or a CSV file), you upload that service's export file to our server. The importer reads it in memory, and only what the import needs goes into the import: for each row, the title and year as the file spelled them, any title IDs it carried, the season and episode number, your rating, the date you watched it, how many times you watched it again, how it made you feel, your favourite character in it, the list it was in, and any review text. We keep that alongside a record of the import — the file's name, its size and a checksum, so re-uploading the same file resumes instead of importing it twice. Once an import finishes, we keep a record of it for you — what came across, what could not, and the titles still waiting for your decision — so you can finish it later. The rest of the import's rows are deleted once it can no longer be undone. We keep the records of your 20 most recent imports: when a newer import finishes, the oldest record is deleted. You can remove an import's record at any time from Import your history; deleting your account deletes all of it. An import you undo or discard is deleted 7 days after it started. What the import writes into your lists stays, as if you had added those titles yourself.

We also keep a copy of the file you uploaded, for 30 days. Each service lays out its export its own way and changes it without notice; the copy lets our team see how a real export is laid out, so the importer keeps reading it correctly. It is the file as you uploaded it, except that from a ZIP we first remove the files the importer is never allowed to open — among them those holding login tokens and sign-in records, your profile or email address, billing details and IP address history — keeping only their names. Only named administrators can open the copy, and every download is recorded against their name. When the importer improves at reading your service's export, our team may run your copy through it again for you: your import of that file is taken back and brought in again, so the import in your library is the better one. We tell you when we do, and you can undo it for 7 days. It is not copied into our backups, and it is deleted after 30 days or with your account, whichever comes first.

Sending a file to our support team. If the importer cannot read your file, or it is too large to import yourself, you can send it to our support team instead, with the name of the app it came from and an optional note. Then we keep the whole file for this purpose: a person on our team opens it to bring your history into the account you are signed in with, using the same importer. It is stored on our server until 7 days after your request is done or declined, deleted at once if you cancel the request, and deleted with your account; it is not copied into our backups. The record of the request (the app's name, your note, the file's name and size, and what came of it) is kept for 90 days after it closes. When the import is in your library, we tell you with a notification and an email to your account's address, through our email provider (section 3), with a copy to our support inbox. You can undo an import our team ran for you for 7 days, from the import screen.

A Letterboxd export is a ZIP containing several files. The importer reads only the ones it needs by exact name, and never the file holding your Letterboxd profile and email address. A TV Time data export holds 29 to 70 files, including your TV Time account details (email address, password, birthday), login tokens, device and advertising identifiers and IP address history; the importer reads only the ones that hold your watch history, ratings, emotions, favourite characters, favourites and lists, written comments, and the streaming services you picked and their country. Those services are kept with the import only to suggest them as your services in the app; nothing is set until you tap to use them, and your choice stays on your phone. The 30-day copy described above also keeps the other files the importer skips, but not the account details, login tokens, sign-in records, device or advertising identifiers or IP address history.

A Netflix data export holds every profile on the account, with your account and payment details, the devices and IP addresses you used, and your searches. The importer reads only three files — the viewing activity, My List and your ratings — and only for the profile you choose; the other profiles are counted, never read. From the viewing activity the import keeps how far you played each title, to tell one you finished from one you only started. The 30-day copy keeps only those three files, with only your chosen profile's rows in them, and that profile's name. A Netflix viewing history file holds titles and dates only.

If a file includes reviews you wrote, they are not published anywhere by importing. You choose each one individually; a review you publish becomes a comment under your @username (section 2.15), labelled with the service it came from and the date you originally wrote it. Undoing an import does not remove a comment you published from it.

You can export everything on your account at any time, from the app's settings (section 6) or the website's import page. The export is generated on request and not stored.

2.19 Website analytics

The website keeps a random visitor ID in your browser's local storage and sends our own server what you do on it, whether or not you are signed in: the pages you open, the links and buttons you click (by the words on them and where they lead — never anything you type), taps on the Google Play or App Store buttons, and a title link someone shared with you when you open one. The first page of each visit also sends the site that linked you there, any campaign tags in its address, your country (the code described in section 2.4), your browser's time zone and language, whether you are on a phone, tablet or computer, and how long the page took to load. Each visit also records whether you touched the page at all (a tap, scroll, key press or mouse move) — never where or what you typed — so we can tell people from automated visits. When you are signed in, these events also carry your account ID, and what the same browser did before you signed in is shown with your account. We do not store your IP address with them and do not share them with anyone; our team uses them to see how people find and use the website. We keep them for 30 days. If your browser sends Global Privacy Control or Do Not Track, the website sends none of this.

3. Who receives data

We do not sell your personal data for money. Data is shared only as follows:

Data sources. Title, availability and character information comes from the services below. Our server sends them title identifiers, country codes and — for searches — search text; it does not send your identity. Posters and images load directly from TMDB's image servers, which see your IP address like any website you load an image from.

4. Cookies and similar technologies

5. How long we keep data

6. Your choices

In the app, settings are in the Profile tab. When the Profile tab shows your profile, tap Settings (the ⚙ at its top) to reach them.

7. Data security

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Where data is processed

Our service providers, including Google, Anthropic, PostHog and RevenueCat, process data in the United States and other countries, which may have different data protection rules from your country.

9. Children's Privacy

Trovie is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at sameersitre@gmail.com. We will respond, and complete a deletion request, within 30 days.

11. Changes to This Policy and Contact

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. We encourage you to review this page periodically for the latest information. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or your personal data, please contact us:

← Back to Trovie