Privacy Policy

01

Who we are

tokki (the “app”) is operated by Neiso (“we,” “us,” “our”). We are the controller of the personal information described in this policy.

This policy covers the tokki mobile app for iOS and Android and this website. It does not cover the App Store, Google Play, or any other service we link to, which have their own privacy policies.

02

Information we collect

Account information

When you create an account we collect your email address and a unique account identifier. If you sign in with Apple or Google, we receive the identifier and email address those services release to us. Sign in with Apple lets you hide your real email; if you use that option, we only ever see the relay address Apple generates.

Learning activity

We store what you do in the app so your progress follows you between devices: lessons started and completed, answers and scores, review schedules, streaks, vocabulary you save, and settings such as your daily goal and interface language.

Purchase records

If you buy a subscription, Apple or Google processes the payment and tells us whether your subscription is active, when it renews, and whether it was refunded or cancelled. We store that status and a transaction identifier so we can unlock the right features on your account.

Device and usage data

Through PostHog we collect device model, operating system version, app version, language and region settings, a pseudonymous device or installation identifier, crash reports and diagnostic logs, and events describing how the app is used (for example, which screen was opened or which lesson was finished).

Messages you send us

If you email support or report a bug, we keep your message, your contact details, and anything you attach, so we can answer and follow up.

03

What we don't collect

Payment card details. Apple and Google handle payment. We never see or store your card number.
Precise location. The app does not request or use GPS.
Your contacts, photos, or files. The app does not request access to them.
Microphone or camera. The app does not record audio or video.
Advertising identifiers. We do not run ads and do not use the IDFA or Android Advertising ID.

If any of this changes, we will update this policy and ask for your permission where the law or the app stores require it.

04

How we use information

To create and maintain your account, and to sign you in.
To save your progress and sync it across your devices.
To personalize what you study next, such as scheduling reviews of words you find difficult.
To provide and manage subscriptions, trials, and access to paid features.
To find and fix crashes, bugs, and performance problems.
To understand which features are used, so we can decide what to build.
To answer your support requests.
To send service messages you cannot opt out of, such as receipts, security alerts, and important changes to the app or these policies.
To send optional product updates and study reminders, if you turn them on.
To detect and prevent fraud, abuse, and violations of our Terms & Conditions.
To comply with the law and to establish, exercise, or defend legal claims.

05

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only in these cases:

Service providers. Companies that run parts of the service on our behalf: hosting, databases, authentication, email delivery, and analytics and crash reporting through PostHog. They may use your information only to provide those services to us.
Apple and Google. They process your purchase and tell us your subscription status. Their handling of your payment information is governed by their own privacy policies.
Legal reasons. When we believe disclosure is required by law, regulation, legal process, or a valid government request, or is necessary to protect the rights, safety, or property of our users, the public, or us.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may transfer as part of that deal. We will notify you before it becomes subject to a different privacy policy.
With your direction. Any other sharing you ask us to do.

We may also publish aggregated or de-identified statistics that cannot reasonably be used to identify you.

06

How long we keep it

We keep your account and learning data for as long as your account is open. If you delete your account, we delete or de-identify your personal information within 30 days, except where we must keep it longer: for example, purchase and tax records we are legally required to retain, or information needed to resolve a dispute or enforce our agreements. Backups are purged on a rolling schedule of no more than 90 days.

Analytics and crash data are retained in pseudonymous form for up to 24 months.

07

Security

We protect your information with encryption in transit (TLS) and at rest, access controls that limit who on our team can reach production data, and regular review of our providers. No service is perfectly secure, so we cannot guarantee absolute security. Keep your sign-in credentials to yourself and tell us at hind@gettokki.com if you think your account has been compromised.

08

Your choices

Delete your account. You can delete your account and all associated learning data from inside the app, under Settings › Account. You can also write to us and we will do it for you.
Access or export your data. Ask us and we will send you a copy of the personal information we hold about you.
Correct your data. You can change your email and profile details in the app, or ask us to correct anything else.
Analytics. You can turn off optional analytics in Settings › Privacy. Crash reports needed to keep the app working may still be collected.
Notifications. Turn study reminders and product emails off in the app, in your device settings, or with the unsubscribe link in any marketing email.
Tracking. The app does not track you across other companies' apps or websites, so there is nothing to opt out of. We honor Global Privacy Control signals on this website.

09

U.S. state privacy rights

If you live in California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy law, you have the right to know what personal information we collect and why, to get a copy of it, to correct it, to delete it, and to be free from discrimination for exercising these rights.

In the last 12 months, for the business purposes described in section 4, we have collected the categories of personal information described in section 2: identifiers, commercial information (purchases), internet and device activity, and the contents of messages you send us. We disclosed those categories to the service providers described in section 5. We have not sold or shared personal information as those terms are defined under California law, and we do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information beyond the purposes permitted by law.

To exercise a right, use the in-app controls or email hind@gettokki.com. We will verify your request by asking you to confirm control of the email address on your account. An authorized agent may submit a request on your behalf with written proof of authorization. If we deny your request, you may appeal by replying to our decision; we will respond within 45 days.

10

Europe, the UK, and Switzerland

If you are in the EEA, the UK, or Switzerland, we process your personal information on these legal bases:

Performance of a contract: running your account, saving your progress, and providing subscriptions.
Legitimate interests: keeping the app secure and reliable, understanding how it is used, and improving it. We balance these against your rights.
Consent: optional analytics and marketing messages, which you can withdraw at any time.
Legal obligation: retaining records the law requires us to keep.

You have the right to access, correct, delete, restrict, or object to our processing of your personal information, and to receive it in a portable format. You may also lodge a complaint with your local supervisory authority.

Our service providers may process your information in the United States and in other countries outside the EEA, the UK, and Switzerland. Where we transfer personal information out of those regions, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, together with additional safeguards where needed.

11

Children

tokki is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email hind@gettokki.com and we will delete it. Users aged 13 to 17 should read this policy with a parent or guardian.

12

Changes to this policy

We update this policy when the app changes or the law does. We will post the new version here and change the date at the top. If the changes are significant, we will tell you in the app or by email before they take effect. Continuing to use tokki after that means you accept the updated policy.

13

Contact us

For any privacy question or request, and for anything else about tokki, write to hind@gettokki.com.