Privacy Policy
Who this policy covers
This policy describes how Toviqo, an independently developed planning application, processes personal data when you use the mobile app and its connected service.
Data we process
- Account data: username, password hash, sign-in sessions, and — if you choose Sign in with Apple — Apple’s stable account identifier plus any name or email address Apple makes available. That email may be an Apple private relay address.
- Planning data: schedule items, times, notes, completion records, conversations with the planning assistant, and scheduling preferences inferred from this information.
- Optional input data: live audio while you hold to talk, and calendar or timetable files and images that you deliberately select for import.
- Technical data: ordinary server security logs such as request time and IP address, used to keep the service reliable and prevent abuse.
How data is used
We use this data to authenticate you, keep your account secure, create and adjust schedules, sync your data across devices, understand imported calendars, learn your scheduling preferences, and provide speech-to-text. We do not sell personal data, show behavioural advertising, or use third-party advertising SDKs.
AI, speech, and import providers
Each optional data flow is enabled only after you choose to use or authorize the corresponding feature.
Toviqo does not keep raw voice recordings in its own database. Recognized text enters conversation history only after you send it. Timetable images are processed to create a preview and are not saved as part of your Toviqo account.
Storage location and international transfer
The beta service and its database are currently hosted in mainland China. If you use Toviqo from another country, your account and planning data will therefore be transferred to and processed in China. The providers listed above may also process the specific data sent to their services under their own service terms and privacy commitments.
Retention and security
Account and planning data remain in the active database while your account exists. Sign-in sessions expire after 30 days and may be replaced sooner when you sign out. Passwords are stored as salted hashes, network traffic uses TLS, and mobile session tokens are stored in the operating system’s secure storage. No system can guarantee absolute security.
Your choices and rights
You can review and edit schedule data in the app, withdraw AI or voice authorization in Settings → Privacy & data, sign out, and permanently delete your account. Account deletion removes the account, schedules, conversations, learned preferences, external login bindings, and sessions from the active database.
If you cannot access the app, local username/password accounts can use the web account-deletion page. Sign in with Apple users can delete their account from inside the app.
Depending on where you live, you may also have rights to access, correct, export, restrict, or object to processing of your personal data.
Children
Toviqo is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must authorize use.
Changes and contact
Material changes will be reflected by a new effective date and, where appropriate, an in-app notice or renewed consent request. Privacy questions can be sent through the Toviqo support channel listed on its App Store product page. A dedicated public support email will be added here before the public App Store release.