This policy explains data handling in Tovilo – Routine Planner for iOS and Android. The app provides offline routine planning and uses third-party services for subscriptions, advertising, optional analytics and push messaging.
1. Your routines and local records
Routine names, task descriptions, schedules, notes, settings and completion history are saved locally on your device. The current app does not provide a Tovilo cloud-sync account or upload planner content to a Tovilo routine database. Local files/preferences may be included in operating-system backups, depending on your device settings. We do not promise that OS backups are disabled or that local records are encrypted by Tovilo.
When you export a backup, Tovilo copies plain JSON containing your planner details and history to your clipboard. You choose where to save or share it. Anyone with access to that backup may read its contents. Restoring a backup replaces the current planner records after confirmation. Your clipboard and other apps' handling of exported data are outside Tovilo's control.
2. Subscription verification
If subscription services are configured, Tovilo uses RevenueCat and your app store to retrieve products, verify purchases, restore access, and determine whether your subscription is active. This involves purchase/receipt or token information, subscription status and expiration/renewal information, an app user identifier generated by the subscription service and associated technical information. We do not collect your full payment-card details in Tovilo; payments are handled by Apple or Google. RevenueCat and the stores retain relevant transaction data under their policies. Cancelling a subscription does not erase a store transaction history.
3. Advertising
The first 14 days from the app's first local launch are ad-free. Afterward, Google AdMob may provide labelled banner advertisements and optional rewarded videos if you do not have an active remove-ads subscription. The app does not request ads during this welcome period or while an active ad-free entitlement is known. User privacy choices are requested through Google's consent system when required before production ad requests. Where applicable, you can revisit advertising privacy choices from Settings.
Tovilo requests non-personalized ads. This does not mean the ad service collects no data. Ad SDKs can process IP addresses, approximate location inferred from IP, device/app identifiers, ad interactions and performance/diagnostic information for serving, measurement and fraud prevention. Your device's privacy controls and consent choices affect this processing. Tovilo does not pass your routine names or notes into advertising requests.
4. Optional usage analytics
Usage analytics is off by default. If you enable “Share usage analytics” in Settings, Firebase Analytics can receive app usage events such as screen visits, task creation/completion, routine creation, theme changes and backup actions, together with SDK technical metadata and an app-instance identifier. The app's event payloads do not include task or routine names, notes or backup contents. Analytics is pseudonymous rather than guaranteed anonymous. The app disables analytics advertising-identifier collection and advertising personalization signals. You can turn optional collection off again in Settings. Turning collection off stops future optional analytics; it does not itself request deletion of previously processed provider records.
5. Notifications and messaging
Local reminders use task names and schedule information on your device and may appear on the lock screen. Notification permission is optional. You can change sound, quiet hours and notification access in the app/device settings. Delivery is controlled by operating-system permissions, battery settings and scheduling limits.
The app also includes Firebase Cloud Messaging. Firebase may create installation identifiers and a push registration token and process device/app information needed to deliver messages. This technical registration is separate from the optional usage-analytics switch. Tovilo does not currently offer a user-managed cloud-sync account. Do not send private routine content through campaign/push tools without a separate product and privacy decision.
6. Retention and deletion
Planner data remains locally until you edit/delete it, replace it with a restored backup, clear the app's data or uninstall it. OS backups, clipboard history and exported copies can remain until you remove them separately. Offloading an iOS app is different from deleting it and may retain app data. Use your store subscription controls to cancel renewal; uninstalling Tovilo does not cancel a subscription.
Third-party providers apply their own retention practices to purchase records, identifiers, ad records and optional analytics. Contact [email protected] for a data-handling request. We may need enough information to identify a relevant provider record and cannot locate an exported file on your device from an email alone. The actual Firebase/RevenueCat retention configuration applies.
7. Sharing, security and your choices
Relevant information is processed by Apple/Google, RevenueCat, Firebase and Google AdMob for the functions described above. Provider processing may occur in other countries. Service communications use the providers' supported encrypted network connections. No system can guarantee absolute security.
You can use core planning without a Tovilo account, control notifications, choose whether to enable usage analytics, review available ad privacy choices, export your records and manage subscriptions through your store. Depending on your location, you may have rights concerning your personal information; contact [email protected] with a request.
8. Children
The current product is a general-purpose planner and has not been configured or assessed as a child-directed app. If you believe a child's information has been provided improperly, contact [email protected].
9. Policy updates and contact
We may update this policy as the app or providers change. Publish a revised effective date and provide additional notice where appropriate. Questions: [email protected].