Privacy Policy

Welcome to Tokilist ("we", "our", or "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you use the Tokilist mobile application and web application (collectively, the "Service").

By using Tokilist, you agree to the collection and use of information in accordance with this policy.

Account Information

When you sign in using a third-party OAuth provider (Discord or Google), we receive and store:

• Your name
• Your email address
• Your profile picture

User-Generated Content

We store data you create while using the Service, including:

• Tasks and task lists
• Categories
• Shared list memberships

Device & Technical Information

• Push notification tokens (used solely to deliver notifications you have opted into)
• Notification preferences (email, push, and reminder settings)

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Send push notifications and email reminders you have opted into
• Enable shared lists and collaborative features

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Tokilist integrates with the following third-party services:

• Discord OAuth — for account authentication
• Google OAuth — for account authentication
• Expo Push Notification Service — for delivering push notifications to your device

Each of these services has its own privacy policy. We encourage you to review them. We only share the minimum data necessary for these integrations to function.

Your data is stored securely using industry-standard cloud infrastructure. We use encrypted connections (HTTPS/TLS) for all data transmission between your device and our servers.

While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

We retain your data for as long as your account is active. You may delete your account at any time, which will permanently remove:

• Your profile information
• Your tasks and task lists
• Your notification preferences and push tokens

Account deletion is irreversible. Some data may be retained in encrypted backups for a limited period before being permanently purged.

Tokilist is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app. The "Last updated" date at the top reflects the most recent revision.

If you have questions or concerns about this Privacy Policy or your data, please contact us at:

support@calayo.net