Privacy Policy

Introduction

This Privacy Policy explains how Tooki LLC (“Tooki,” “we,” “us”) collects, uses, shares, and safeguards your personal data when you use the Tooki mobile application or visit our website. By using Tooki you consent to the practices described below.

Data We Collect

We collect account identifiers such as user ID, name, email address, and profile photo supplied by Apple or Google; language preferences, chosen display name, and optional pronunciation recordings; conversation transcripts and voice snippets processed by OpenAI to generate responses; usage statistics, device information, and IP address for analytics and security; in‑app purchase receipts and subscription status obtained from RevenueCat; messages you send to customer support; and cookies or similar technologies if you access our website.

How and Why We Use Data

We process your data to deliver and personalize the service, operate voice recognition and AI features, administer subscriptions and payments, analyse usage, repair and improve the application, secure our systems, communicate with you, comply with legal obligations, and enforce our Terms. Our lawful bases under the General Data Protection Regulation are performance of our contract with you, our legitimate interests in running a safe and effective service, your consent where required, and compliance with law.

Sharing of Data

We share personal data only with service providers acting under our instructions—such as hosting partners, OpenAI, Apple, and RevenueCat—or with professional advisers, successors in a business transfer, and authorities when legally compelled. We do not sell or share personal data for cross‑context behavioural advertising. Aggregated or anonymized statistics may be published.

International Transfers

Your data is processed in the United States and other countries where our service providers operate. For transfers from the European Economic Area, Switzerland, or the United Kingdom we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards.

Security

We use industry‑standard technical and organizational measures, including encryption in transit and at rest where feasible, limited staff access, regular audits, and a documented incident‑response plan. If a data breach likely to result in a high risk to individuals occurs, we will notify affected users and relevant authorities without undue delay and, where required, within seventy‑two (72) hours.

Retention

We retain personal data for as long as your account is active. Back-up copies are securely deleted or anonymized on a rolling schedule not exceeding one year, except where a longer period is required by law.

Your Rights

Subject to the conditions set out in applicable law, you may request access to, correction of, deletion of, or portability of your personal data; object to or restrict certain processing; withdraw your consent; and lodge a complaint with a supervisory authority. California residents may also opt out of the sale or share of personal data and exercise additional CPRA rights, including the right to limit use of sensitive personal information. You can exercise these rights by emailing privacy@tooki.chat or by using the in‑app privacy settings. We honor browser Global Privacy Control signals.

Children

Tooki is not directed to individuals under the age of thirteen (13). We do not knowingly collect personal data from children. If we learn that we have personal data of a child under thirteen, we will delete it promptly.

Changes

We may update this Privacy Policy occasionally. We will provide notice of material changes through the application or by email. Your continued use after the effective date constitutes acceptance.

Contact

For privacy inquiries contact privacy@tooki.chat or by mail to Tooki LLC, 1807 N Danville Street, Arlington, VA 22201, USA.