Privacy Policy
Who this policy covers
This policy describes how Toviqo, an independently developed planning application, processes personal data when you use the mobile app and its connected service.
Data we process
- Account data: username, password hash, sign-in sessions, and — if you choose Sign in with Apple — Apple’s stable account identifier plus any name or email address Apple makes available. That email may be an Apple private relay address.
- Planning data: schedule items, times, notes, completion records, conversations with the planning assistant, and scheduling preferences inferred from this information.
- Optional input data: live audio while you hold to talk, calendar or timetable files and images that you deliberately select for import, and text and up to three photos you choose to send as feedback.
- Purchase data: App Store product and transaction identifiers, subscription status, renewal status, expiration, refunds, and revocations used to provide and restore Toviqo Pro. Apple processes the payment; Toviqo does not receive or store your payment-card details.
- Technical data: ordinary server security logs such as request time and IP address, used to keep the service reliable and prevent abuse.
How data is used
We use this data to authenticate you, keep your account secure, create and adjust schedules, sync your data across devices, understand imported calendars, learn your scheduling preferences, provide speech-to-text, review feedback you choose to send, and verify or restore paid access. We do not sell personal data, show behavioural advertising, or use third-party advertising SDKs.
AI, speech, and import providers
AI understanding and speech recognition have separate permissions. Before sending data to an AI or speech provider, Toviqo asks for the corresponding permission. You can decline and continue to view and manage your schedule.
Toviqo does not keep raw voice recordings in its own database. Recognized text enters conversation history only after you send it. An image used in the standalone timetable OCR preview is not saved as account content; an image attached to a chat import may be stored with its operation draft so you can continue or review that import.
Feedback photos are different from timetable imports. They stay on your device until you tap Send feedback. When sent, Toviqo removes photo metadata and stores private image copies with your feedback in its database. We do not send feedback photos to AI or OCR providers. Authorized support access is limited to reviewing your feedback; signing out does not delete sent feedback, while deleting your account removes its feedback and photos.
Storage location and international transfer
The beta service and its database are currently hosted in mainland China. If you use Toviqo from another country, your account and planning data will therefore be transferred to and processed in China. The providers listed above may also process the specific data sent to their services under their own service terms and privacy commitments.
Retention and security
Account, planning, and sent feedback data remain in the active database while your account exists. Sign-in sessions expire after 30 days and may be replaced sooner when you sign out. Passwords are stored as salted hashes, network traffic uses TLS, and mobile session tokens are stored in the operating system’s secure storage. No system can guarantee absolute security.
Your choices and rights
You can review and edit schedule data in the app, withdraw AI or voice authorization in Settings → Privacy & data, sign out, and permanently delete your account. Account deletion removes the account, schedules, conversations, sent feedback and photos, learned preferences, external login bindings, sessions, and the Toviqo account association for membership records from the active database. It does not cancel a subscription in your Apple account; subscriptions can be managed in Apple's subscription settings.
If you cannot access the app, local username/password accounts can use the web account-deletion page. Sign in with Apple users can delete their account from inside the app.
Depending on where you live, you may also have rights to access, correct, export, restrict, or object to processing of your personal data.
Children
Toviqo is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must authorize use.
Changes and contact
Material changes will be reflected by a new effective date and, where appropriate, an in-app notice or renewed consent request. For privacy questions, contact toviqo@outlook.com.