Privacy Policy

What we collect

• Your sign-in account. You sign in with Google or Apple. From Google we receive your name, email address and profile picture; from Apple, your email address (or Apple's private relay address) and, if you share it, your name. We never see your Google or Apple password.
• What you make while learning. Your papers and boards, your handwriting and drawings on them, photos you add, flashcards and how you review them, notes on videos, saved clips, and your progress.
• Your voice. When you record yourself (shadowing, speaking exercises), we keep the recording so you can play it back.
• Conversations with the AI tutor and the answers it gives.
• What you watch. Which videos you played and for how long, and the channels you choose to see more or less of, so the feed can suit you.
• Community posts. Your handle, display name, profile picture, bio, posts, comments and reactions. Other members can see these.
• Subscription status. If you subscribe, our payment provider tells us your plan and whether it is active. We never see or store your card number.
• Friend Pass. Whose Friend Pass you joined with, or the email Tokki sent one to, and when you used it.
• Your country, worked out from your IP address when you join, to decide whether Tokki is open where you are. We keep the country, not the address.
• Credit. The credit you earned and spent, and which Friend Pass earned it.
• Technical data. Server logs (such as the time of a request and the error it hit), error reports from the website, and, when switched on, usage events. When the iPhone or iPad app crashes or freezes, it sends a crash report: the device model, system and app version, where in the app it happened, and the app's last few steps (such as "a paper opened" or "a page saved"). Crash and error reports hold no handwriting, text you wrote (web addresses go without what you searched for), name or email. We do not record your screen.
• Usage events, when switched on: which screens you open and what you do there, as fixed names such as "a card graded Good" or "a clip saved", with the day, your country, and whether it was the website or the app. Each event carries a code made from your account, the same on every device, so we can see whether people come back. The code is not your name, email or account, and PostHog cannot tell who it is; we can match it to your account, so these events are linked to you. Nothing is stored on your device for it. Never what you wrote, searched for or said. Before you sign in, the code changes every day and is not linked to anyone.

How we use it

• To run the app: save your work, sync it across your devices, and show it back to you.
• To teach: grade your answers, schedule your reviews, and choose videos for your level.
• To run the community and keep it safe, including reviewing reports.
• To manage your subscription and Friend Pass credit.
• To find and fix errors and understand which parts of the app are used.

We do not sell your data, we do not use it for advertising, and we do not use it to build profiles for anyone else.

Google user data

When you choose Continue with Google, Tokki asks Google only for the basic sign-in scopes: openid, email and profile. With them we receive your name, email address and profile picture. We do not ask for, and cannot reach, your Gmail, Drive, Contacts, Calendar, YouTube account or any other Google data.

• How we use it: to create and identify your Tokki account, to show your name and picture in the app (and in the community, if you post there), and to contact you about your account or subscription.
• Who else receives it: no one, except the services that run Tokki for us (Supabase stores the account; see "Who helps us"). We do not sell it or give it to advertisers.
• How long we keep it: while your account exists, and up to 30 days after you delete it (see "Deleting your account").
• How to remove it: delete your account in Settings, and you can also remove Tokki's access at any time at myaccount.google.com/permissions.

Tokki's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who helps us

These services process data for us, only to provide Tokki:

• Supabase: our database and sign-in. Stored in the United States (us-east-1).
• Cloudflare R2: storage for files such as photos on your papers and your recordings. Stored in eastern North America.
• Vercel: hosting for the app. Runs in the United States.
• Google Gemini: the AI tutor, answer checking and speech. What you type, write or say to these features is sent to Google to produce the answer. It is not used to advertise to you.
• Google and Apple: sign-in. YouTube: the videos play in YouTube's player, under YouTube's own terms and privacy policy.
• Polar: subscriptions and payments, if you subscribe. Polar handles your card and billing details.
• Sentry: crash reports from the iPhone and iPad app, and error reports from the website. Stored in the United States. PostHog: usage events, when switched on, sent by our servers. Neither receives your name or email from us.

If you use Tokki from outside the United States, your data is transferred to and stored in the United States. Each provider is bound by its own data-processing terms to protect it.

Who can see what

Your papers, boards, cards, recordings and chats are private. Someone else sees a paper or board only if you share it with them. Community posts, comments and your community profile are visible to other members.

How we protect it

Data travels over encrypted connections (HTTPS) and is encrypted at rest by our providers. Access to your data in the database is limited by row-level rules, so one account cannot read another's private data. Only Tokki staff who need it to run the service can reach it.

How long we keep it

We keep your data while your account exists, so your work and progress are there when you come back. Server logs are kept for a short time for fixing errors and then deleted, and crash and error reports for 30 days.

Taking your data with you

In Settings > Account > Data & privacy, Export my data downloads a copy of your account's data as a JSON file.

Deleting your account

In the same place, Delete account signs you out everywhere and schedules your account for deletion in 30 days. If you sign in again within those 30 days, your account is restored as it was. After 30 days we delete your papers, handwriting, cards, recordings, chats, files and your sign-in account. Posts and comments you made in the community stay, shown as written by "Deleted user", so conversations other members took part in still make sense. Delete them first if you want them gone.

Database backups (encrypted, kept privately) are deleted after 30 days, so your data leaves them within 30 days of the account being deleted.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to how we use it. Most of this you can do in the app. For anything else, write to us at support@tokki.world and we will answer within 30 days.

Children

Tokki is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, write to us and we will delete it.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect, and update the date at the top of this page.

Contact

Tokki is operated by Donggeon Kim, 421 Jungang-daero, Jung-gu, Daegu, Republic of Korea.

Questions about this policy or your data: support@tokki.world.

See also the Terms.