Privacy Policy
The short version. AudioTrove is an app for listening to audiobooks you already own. There are no accounts, and we don't run a server that stores your library. Your books, listening positions, and bookmarks stay on your device; if Android backup is on, your positions and bookmarks are also copied to your own Google account. If you turn on sync, they're also kept in a hidden folder in your own Google Drive, so your other phones can pick up where you left off. We never receive them. Purchases go through Google Play; we never see your card details or your Google account. To limit the free trial to one per phone, the app checks with Google through a small server of ours. To see how the app is used and to fix crashes, the app sends usage and crash data to Google Firebase. It's on for everyone, and you can turn it off in Settings. It never includes your name, email, book titles, authors, file names, server addresses, or anything you type. Cloudflare keeps request logs for this website, the free classics, and our free-trial check server, including your IP address, for up to 31 days. This website counts visits with Cloudflare Web Analytics, which uses no cookies. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
Who we are
AudioTrove is made by Nexus Rising LLC, a Georgia limited liability company ("we," "us"), which is the data controller for the limited processing described here. You can reach us at privacy@audiotrove.app.
This website
You're reading this on audiotrove.app, which we serve through Cloudflare. Cloudflare keeps a log of each request to this site for us (see "Request logs"). We count visits with Cloudflare Web Analytics. It records which pages are viewed, the site you came from, your country, your device type, browser and operating system, and how fast pages load. It sets no cookies, stores nothing in your browser, and doesn't follow you to other sites. We see only totals, not individual visitors. This website runs no advertising or tracking scripts. The only thing it stores in your browser is your chosen color theme (light or dark), kept in your browser's local storage on your device; we never see that choice and it's never sent anywhere. If we ever add analytics that use cookies, we'll say so here and ask visitors who need to be asked, before turning it on.
Request logs
Cloudflare keeps a record of requests to this website (audiotrove.app), the free classics (pd.audiotrove.app), and our free-trial check server (api.audiotrove.app). A record can include your IP address, the time, the address requested, the response, your browser's or the app's user agent and other request headers, and the approximate location Cloudflare works out from your IP address (country, region, city, postal code, and map coordinates) and your network provider. It doesn't hold the contents of the free-trial check. These records are kept for up to 31 days, then deleted automatically. We use them only to find and fix problems and to spot abuse.
What AudioTrove does
AudioTrove is a player for audiobooks you already have. It plays, or is built to play:
- Audiobooks on media servers you control: Plex, Audiobookshelf, Jellyfin, and Emby;
- Audiobook files on your own device;
- Audiobook files in your own Google Drive (coming soon; not yet available in the current version);
- A small built-in shelf of public-domain classics we include for free.
We do not sell or supply audiobooks (other than the free public-domain classics), and we do not host your library.
Information stored on your device
The following is created and kept on your device. It is not sent to any server we operate:
- Your listening positions, bookmarks (with any notes you add), finished books, Favorites, Bookshelf, playback speeds, and your own star ratings;
- Books you've downloaded for offline listening;
- Your app settings;
- If you turn on sync: the email address of the Google account you chose for it, and a random sync ID for this install of the app;
- The sign-in tokens for any servers you connect (kept in your device's encrypted storage);
- Your purchase record: which AudioTrove products Google Play last said you own, and when;
- Your free-trial clock: when your trial started and how much of it has been used;
- The answer to the free-trial check described below.
If you delete the app, this on-device data is removed with it. If Android backup is on, a copy of some of it is also kept in your Google account (see "Android backup"). The usage data described in "Usage and crash data" includes a few facts about how you use the app, such as your plan and the size of your library as a range, but never your books, positions, bookmarks, or sign-in tokens.
Android backup
If Android backup is on, Android copies part of AudioTrove's data to your own Google account: your listening positions, bookmarks, finished books, Favorites, Bookshelf, playback speeds, star ratings, settings, the servers you've connected (without their sign-in tokens), your purchase record, your free-trial clock, and, if you use sync, the email address of the Google account you chose for it. Sign-in tokens, downloaded books, the answer to the free-trial check, and this install's sync ID are not copied there. When you move to a new phone, Android can also copy this data directly to it. Google stores the backup in your account, not us, and we can't see it. On Android 9 and later, with a screen lock set, it is end-to-end encrypted with your screen lock. You can turn backup off, or delete it, in your phone's Google settings.
Connecting to your own servers (Plex, Audiobookshelf, Jellyfin, Emby)
When you connect a media server, you sign in to that service and the app saves an access token on your device so it can reach your library. Your audiobooks and audio stream directly between your device and your server. They don't pass through us, and we don't receive that content or your credentials.
One honest note: if you connect to a server over your local network using a plain (non-HTTPS) address, that connection is not encrypted. Whether the connection is encrypted depends on how your server is set up, not on AudioTrove.
Sync across your phones (Google Drive)
Sync is off until you turn it on. When you do, Google's own screen asks you to choose a Google account and to let AudioTrove "see, create, and delete its own configuration data in your Google Drive". That's the only access it gets. It can't see or change any other file in your Drive.
Each phone then keeps one small file in a hidden folder in your Google Drive that only AudioTrove can open. You won't see it in your Drive's file list. The file holds:
- your place in each book, and which phone it came from;
- your bookmarks, including any notes you typed;
- which books you've finished, your Bookshelf, each book's playback speed, and your own star ratings;
- your answers when two phones disagreed about your place;
- the time of each change;
- which book each record is for: for a book on your server, your server's ID for your account and the book's ID there (never the server's address); for a book from files on your phone, a one-way code made from its title, author, and file size (never the title or author themselves);
- the name you gave this phone in Android's settings (for example "Sam's phone"), or its model if you haven't named it, so your other phones can show where a place came from;
- a random ID for this install of the app, and a code made from your Google account's ID, so the app never mixes up two Google accounts.
The file never holds your email address, sign-in tokens, server addresses, file names or locations, or book titles or authors.
Your phones read each other's files directly from your Drive. Nothing goes through a server of ours, and we never receive or see these files. Google stores them in your account under Google's own terms and privacy policy, and they count toward your Drive storage. They travel over HTTPS. Like your other files in Drive, they aren't end-to-end encrypted.
To show which account is connected and to sign in again, the app keeps the email address of the Google account you chose on your phone. It's never put in the sync files, never sent to us, and never included in usage or crash data. If Android backup is on, it's copied with your other settings to your own Google account.
Sync runs when you open or leave the app, when you pause, and every 15 minutes while you use it. Turning sync off stops it. Disconnecting removes the email from your phone and withdraws AudioTrove's access to your Drive for every phone that syncs with that Google account. Neither one deletes your sync files; see "Deleting your data".
AudioTrove's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Audiobooks in your Google Drive (coming soon)
Playing audiobooks from your Google Drive isn't available yet. This section describes how it will work once it ships, not what happens today. Once it's available: if you connect Google Drive, you grant AudioTrove permission to read your audiobook files so it can list and play them. We use that access only to find and play your audiobooks. We do not copy your files to any server of ours and do not read anything beyond what's needed for playback. You can disconnect this access at any time in the app or in your Google account.
The built-in Classics shelf
The free public-domain audiobooks are downloaded from pd.audiotrove.app, which we run through Cloudflare, a content-delivery network. Like any web request, each download passes your device's IP address and the time of the request through Cloudflare's network so it can send you the file. Cloudflare keeps a record of these requests for us, as described in "Request logs". We never use it to identify you, build a profile, or track you.
Usage and crash data
To learn how AudioTrove is used and to fix bugs, the app sends usage and crash data to Google Firebase (Google Analytics for Firebase and Firebase Crashlytics). It's on for everyone by default. You can turn it off at any time in Settings, with "Share usage and crash data". Turning it off stops both from that moment.
Usage data. The app reports a fixed list of events, and each detail is picked from a fixed list of values. It covers:
- which screens you open and which features you use, such as the sleep timer, bookmarks, casting, the home-screen widget, collections, and search;
- how listening goes: how long a book took to start, how you started it (for example from the app, the car, the widget, or headphones), how long you listened, at what speed, whether it was downloaded or streamed, whether you were on Wi-Fi or mobile data, and whether you finished the book;
- how connecting a server, importing a library, downloading, and syncing go, and why they fail; and, when two of your phones disagree about your place, which one you pick;
- which kinds of source you use (for example Plex, or files on your phone), and how big your library is;
- your plan (trial, Basic, Pro, or locked), when you look at buying, and whether a purchase or restore worked;
- which settings you change, and which error messages you see.
Counts, sizes, and times are sent only as ranges, such as "500 to 1999 books" or "15 to 30 minutes".
Firebase also records on its own: when the app is first opened, updated, or removed; how often and how long it's open; purchases made in the app (which product and its price); your app version, phone model, Android version, and language; your approximate location (country and city, worked out from your IP address); how you came to install the app (such as which link or store page led to it); and a random ID for this install of the app.
Crash data. When the app crashes or hits an error, Crashlytics sends the kind of error, where in the app's code it happened, the app's version, details about the phone at that moment (such as its model, Android version, and free memory), the last few usage events before it, and a random ID for this install. The app removes the error's wording before it's sent, because wording can contain a file name. If that removal itself fails, a rare crash report may still contain part of one.
What's never sent: your name, email, or account; the name you gave your phone; your advertising ID; book titles, authors, narrators, series, or file names; server addresses or sign-in tokens; your listening positions or bookmarks; and anything you type, including searches. We don't use this data for advertising.
Google's own reports. Two Google parts built into the app send Google their own technical reports: Google Play's billing library reports whether its requests to Google Play worked, and the Chromecast library reports when it finds and connects to cast devices. Each report includes details about your phone, such as its model, Android version, language and region settings, and network type. Google says it uses these reports to improve those parts. They go to Google, not to us, and the Settings switch doesn't turn them off.
Payments
AudioTrove has a 30-day free trial. After that, using it needs a one-time purchase: Basic, Pro, or an upgrade from Basic to Pro. There is no subscription. Google Play handles every purchase, refund, and promo code. We never see or store your card or payment details, and Google Play doesn't tell the app your name, email, or Google account.
The app asks Google Play which AudioTrove products your Google account owns: when it starts, when you return to it, after a purchase, and when you tap Restore. It keeps the answer on your phone, so a purchase keeps working offline. Apart from the usage data described in "Usage and crash data" (your plan, and which product you bought and its price), it doesn't send your purchase information to us or to anyone else. Google handles your purchase under its own terms and privacy policy.
The free trial: one per phone
Each phone gets one free trial. To check this, the app uses Google Play Integrity, a Google service that confirms the app came from Google Play. On its own servers, Google keeps a small record for our apps about each phone: whether a free trial started on it and whether it ended, with the month of each. It holds no name, account, or device ID, and we can't use it to identify you or the phone. Google keeps it for up to 3 years after it was last checked or changed, even if the app is uninstalled or the phone is reset. If you buy a used phone whose trial was already used, it won't get another one.
The check goes through a small server we run on Cloudflare, at api.audiotrove.app. When a trial starts and when it ends, the app sends that server a sealed token from Google, which only Google can open, and the word "start" or "end". Our server asks Google to open the token and update the record. It receives your phone's IP address, as any internet server does, and Google's answer about this copy of the app and this phone. It stores nothing of Google's answer; Cloudflare logs each request to it, as described in "Request logs".
We use this only to stop the free trial being restarted. Google's rules for this feature forbid using it to track people or devices, and we don't. If you've bought AudioTrove, the check never affects your purchase.
Who we share information with
We don't sell or rent your data. The only parties involved are:
- Google, which runs Google Play (purchases and the free-trial check), Chromecast, and Firebase (the app's usage and crash data), all described above. For Firebase, Google handles the data for us under its data processing terms, and we've turned off Google's options to use it for advertising or for its own products. Google may process this data in the United States and other countries. For Google Play and Chromecast, Google acts under its own terms and privacy policy.
- Cloudflare, which serves this website (audiotrove.app), the classics shelf (pd.audiotrove.app), and our free-trial check server (api.audiotrove.app). It handles your IP address and request details to do so, and keeps the request logs described above for us. Cloudflare acts for us under its data processing terms.
- Your own servers, and your own Google Drive if you turn on sync (or, once it's available, add Drive as a source), which you direct; your content flows directly between your device and services you control, not through us.
We may also disclose information if required by law.
How long we keep information
Your library and listening data, your purchase record, and your free-trial clock stay on your device until you delete them or uninstall the app, and in your own Android backup if it's on. If you use sync, your sync files stay in your Google Drive until you delete them, even after you turn sync off or uninstall the app. We hold no central copy. Request logs for this website, the free classics, and our free-trial check server are kept for up to 31 days. Google keeps the phone's free-trial record for up to 3 years after it was last checked or changed. Usage data is kept for 14 months and crash reports for 90 days, then deleted. Reports that only show totals may be kept longer.
What we do not do
- We don't show ads.
- We don't sell or rent your data to anyone.
- We don't track you across other apps or websites, and we don't collect your advertising ID.
- We don't use tracking cookies or follow you across other websites.
- We don't build an advertising profile of you.
Your rights (EEA / UK)
If you're in the European Economic Area or the UK, you have rights over your personal data, including to access, correct, delete, restrict, or object to its processing, and to data portability. In practice we process very little. Your books, positions, and bookmarks stay on your device, and in your own Google Drive if you turn on sync; we never receive them. Server-side there are only the request logs described above, kept up to 31 days; the per-phone free-trial record Google keeps for us; and the usage and crash data described above, which Google Firebase keeps for us. Our legal basis is our legitimate interest in running and securing the website and the app, learning how the app is used, fixing problems, and preventing abuse of the free trial. You can object to usage and crash data at any time by turning it off in Settings. The free-trial record holds nothing that identifies you, so we can't look it up for a person, and we keep it to prevent abuse, so we don't reset it on request. Because we're based in the United States, this limited data is processed in the US, and Google may also process usage and crash data in other countries. You may also lodge a complaint with your local data-protection authority. To exercise any right, email privacy@audiotrove.app.
Your rights (California)
If you're a California resident, you have the right to know, access, correct, and delete the personal information we hold, and to not be discriminated against for exercising those rights. In practice we hold almost nothing: your books, positions, and bookmarks stay on your device, and in your own Google Drive if you turn on sync; server-side there are only the request logs described above, kept up to 31 days; the per-phone free-trial record Google keeps for us, which holds nothing that identifies you; and the usage and crash data described above, tied only to a random install ID. We do not sell or share your personal information. To make a request, email privacy@audiotrove.app.
Deleting your data
Because AudioTrove has no accounts, there is no account to delete. Uninstalling the app deletes all of your on-device data. If Android backup is on, delete the backup in your phone's Google settings to remove that copy too. If you used sync, your sync files stay in your Google Drive after you uninstall. To delete them, open Google Drive on the web, go to Settings, then Manage apps, find AudioTrove, and choose Options, then Delete hidden app data. Turn sync off on your other phones first, or they'll write their files again. Turning sync off or disconnecting in the app doesn't delete them. Request logs are deleted automatically within 31 days. Usage and crash data is tied to a random install ID, not to your name or email, so we can't find it from a request. Turning it off in Settings stops new data; what was already sent is deleted after 14 months (usage) or 90 days (crashes). The per-phone free-trial record that Google keeps holds nothing that identifies you, so we can't find it from a request. Google deletes it 3 years after it was last checked or changed, and we keep it until then to prevent abuse of the free trial. If you have any other question about your data, email privacy@audiotrove.app.
Children
AudioTrove is a general-audience app and is not directed to children. We don't knowingly collect personal information from children. If you're in a region with a minimum digital-consent age, you should meet it before using the app.
Security
Sign-in tokens are stored in your device's encrypted storage. Your books, positions, and bookmarks never go to a server of ours, so there is no central store of them for anyone to breach. If you turn on sync, your sync files go between your phone and your Google Drive over HTTPS and stay in your own Google account, not with us.
Our free-trial check server holds one Google key, kept as a Cloudflare secret and never in the app. Every connection the app makes to us or to Google for purchases, the free-trial check, and usage and crash data uses HTTPS.
Language
This Privacy Policy is written in English, which is the official and controlling version. We may offer translations for your convenience; if there is any difference in meaning, the English version governs (except where local law requires otherwise).
Changes to this policy
If we change this policy, we'll update the date at the top and post the new version at this address. We'll highlight significant changes, and we'll update it before the app starts collecting anything new.
Contact
Nexus Rising LLC · privacy@audiotrove.app