Privacy Policy

This Privacy Policy explains how we collect, use, and protect information when you use ToyTally, our toy organization and rotation app for parents and caregivers (the "App"). If you have questions, contact us at m.budziat@gmx.de.

1. Who is responsible?

Data controller / responsible party:
Maximilian Budziat
Georgia, Tbilisi City, Zakaria Paliashvili Street, N 41
m.budziat@gmx.de

2. What the App does

ToyTally helps parents and caregivers organize, catalog, and rotate their children's toys. You can photograph toys, organize them by categories and custom tags, rate how much your child loves each toy, set up toy rotations on flexible schedules, and view insights about your toy collection. Users can sign up and log in using email/password, Sign in with Apple, or Google Sign-In.

3. Important note about children's data

ToyTally is designed for parents and caregivers, not for children. Children do not interact with the App directly. Parents use ToyTally to manage their children's toy collections.

• We do not knowingly collect personal data from children
• The App asks about child age ranges during onboarding (e.g., "1–2 years", "3–4 years") for product improvement purposes only — this data is stored locally on your device and is not uploaded to our servers
• No names, photos, or identifying information about children is collected — toy photos show toys, not children

4. What information we collect

Account & authentication

• Email address (if you register with email)
• Authentication identifiers (Firebase user ID; Apple/Google identifiers as provided during sign-in)
• Account metadata (e.g., account creation time, last sign-in time)

Toy collection data you create

• Toy information (names, photos, categories, tags, love ratings, notes)
• Categories and tags you create to organize toys
• Rotation data (rotation periods, toy assignments, rotation history)
• Preferences (color palette, notification settings, sort order)

Toy images

• Photos you take or select for your toys (resized to 600px height, stored in Firebase Storage)

Subscription data

• Purchase history (subscription status, transaction identifiers)
• Usage data related to in-app purchases

We use RevenueCat to manage subscriptions. RevenueCat processes purchase data to verify entitlements and provide subscription management.

Error and crash data

• Crash reports and error logs (collected via Sentry for troubleshooting)
• Device information (device type, OS version, app version)

Sentry may collect IP addresses and technical data to help us identify and fix issues.

Local data (stored on your device only)

• Onboarding survey responses (motivations, frustrations, goals)
• Child age range selections
• Notification preferences
• Selected color palette

This data is stored locally via AsyncStorage and is not uploaded to our servers.

What we do NOT collect

• Children's personal information (names, photos of children)
• Location data
• Contacts
• Browsing history
• Advertising identifiers or third-party tracking data

We do not send marketing emails. You may receive only necessary service emails related to authentication (for example, password reset or login/security emails).

5. How we use your information

• To create and manage your account and authenticate logins
• To store and sync your toy collection, categories, and rotations
• To send local push notifications for rotation reminders
• To generate insights about your toy collection within the App
• To provide core functionality (e.g., password resets, account recovery)
• To diagnose errors and improve App stability (via Sentry)
• To maintain security, prevent abuse, and troubleshoot issues

6. Legal bases (EEA/UK users)

If you are in the EEA/UK, we process personal data under these legal bases:

• Contract (to provide the App's features to you)
• Legitimate interests (security, fraud prevention, error tracking, service reliability)
• Consent (only when required by law for specific processing)

7. Services and processors we use

We use the following third-party services to operate ToyTally:

• Firebase Authentication (Google) — for email, Apple, and Google sign-in
• Firebase Firestore (Google) — to store your toy collection, categories, tags, rotations, and preferences
• Firebase Storage (Google) — to store toy images
• RevenueCat — to manage subscriptions and in-app purchases
• Sentry — for error tracking and crash reporting

When you use Google Sign-In or Sign in with Apple, those providers process authentication as part of the login flow. These providers may process personal data on our behalf as "processors" and/or as independent controllers for their own services. Please review their privacy policies for details.

8. Notifications

ToyTally can send local push notifications to remind you when a toy rotation period ends. These notifications are processed entirely on your device and are not sent through external servers.

• You can enable or disable notifications in the App Settings
• The App will request notification permission once on first launch
• Notification preferences are stored locally on your device

9. Data retention

We retain your data while your account is active. If you delete your account, we delete or anonymize your personal data associated with the account, including your toy collection, categories, rotations, and toy images, unless we must keep certain data to comply with legal obligations, resolve disputes, or enforce our agreements.

10. Account deletion

You can delete your account directly in the App under Settings > Danger Zone. Account deletion requires reauthentication for security. When you request deletion, we remove your account and associated data stored in our Firebase backend, including all toy data and images. If you need help, contact m.budziat@gmx.de.

11. Your rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent (where applicable)

To exercise rights, email m.budziat@gmx.de. We may ask you to verify your identity.

12. Security

We use reasonable technical and organizational measures to protect your data, including encrypted cloud storage through Firebase. No method of transmission or storage is 100% secure, but we aim to protect information against unauthorized access or disclosure.

13. Children

The App is intended for use by parents and caregivers, not children. We do not knowingly collect personal information from children under the age required by local law to consent to data processing. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above. Continued use of the App means you accept the updated policy.