IOCODO Back to site

Tollio

Privacy policy

Effective date:

In brief: Tollio has no user accounts and never asks for your name, email address or phone number. Your alarms, your morning task, the apps you choose, your streak and your settings stay on your phone: the apps you choose are kept by Apple's Screen Time as codes that Tollio itself cannot read, the sky photo and your steps are checked on your phone and never sent, and Tollio Pro is bought through Apple or Google. To work, the app connects to Google Firebase to receive its settings, and it can send usage statistics and crash reports, which you can turn on or off at any time in Settings > Privacy choices. In the European Economic Area (which includes the European Union), Canada and Brazil, both stay off until you allow them on a page the app shows after its first screen; in the United Kingdom, usage statistics do, and crash reports start once you answer that page on an iPhone and are on from the start on Android. In Türkiye, both stay off until you turn them on in Privacy choices. Elsewhere on an iPhone, and on any device in Switzerland, both start when you tap OK on a notice the app shows once, the first time it opens; on Android in other countries, both are on unless you turn them off. If your app store country is Russia or mainland China, the app connects to none of these services and works only on your phone.

1. Who we are

Tollio is made by IOCODO LLC, a limited liability company registered in Wyoming, United States. We decide why and how the data described on this page is used, so under European data protection law we are its controller.

Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com
Report criminal or illegal content: iocodo.com/report/
Person in charge of data protection (the Managing Member of IOCODO LLC), and our other contact details: iocodo.com/contact/

Use this email for anything about your data, including the requests described in Your rights.

2. What this policy covers

This policy covers the Tollio app on iOS and Android, and this page. Tollio is an app that rings a morning alarm, asks you for one small task away from your bed, and, on iPhone, keeps the apps you choose closed with Apple's Screen Time until that task is done, then lets you open them during the day after a short task.

Here, "personal data" means any information about you as a person who can be identified, directly or indirectly. That includes identifiers such as an installation ID, even when they do not contain your name.

3. Data that stays on your device

Tollio keeps the following on your device, in the app's own storage:

  • your alarms: their times, days and sound, and whether a morning is skipped
  • your morning task and your day toll settings: the task you chose, the time when the morning hold ends on its own, and how many minutes a day toll opens your apps
  • on iPhone, the apps and categories you chose, which Apple's Screen Time keeps as codes that Tollio cannot turn back into app names
  • your mornings: the days you finished the task in time, your streak, and the colour of each morning's sky token
  • your settings: theme, sound, vibration and reminders
  • your privacy choices, with a record of each answer you gave: the choice, its date, the version of the words you saw, the app's version and the region it was asked for
  • whether you have Tollio Pro and until when, as Apple or Google confirmed it to the app
  • which version of our terms of use you accepted, and when

We do not receive any of this, unless another section of this policy says otherwise. If you back up your device with iCloud or Google, the backup can include a copy of this data, under Apple's or Google's terms. Uninstalling the app deletes this data from your device.

For the sky photo task, the app checks the photo on your phone to see whether it shows the sky and to take its main colour for your sky token. The photo is never sent anywhere.

For the scan task, the app reads the code you scan with the camera on your phone, and never stores or sends the camera images.

For the steps task, the app reads your phone's step count while the task runs, and never stores or sends it.

To know which privacy rules apply, the app reads on your phone the country your phone is set to, its time zone and the country of your app store, and keeps only the region it worked out, with your privacy choices.

4. Accounts and sign-in

Tollio has no user accounts: you do not register or sign in.

5. What we use data for, and on what legal basis

European data protection law (the GDPR and the UK GDPR) requires a legal basis for each use of personal data. For each use, here is the data involved and the basis we rely on.

  • Running the app: keeping it configured, for example switching a feature off remotely

    Data: installation identifiers, the app's version, the operating system version, and your device's language, country setting and time zone.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Selling Tollio Pro and unlocking it

    Data: the product you buy, and the confirmation of the purchase or subscription that Apple or Google send to the app, which the app keeps on your phone. We never see your card or payment details.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Counting how the app is used

    Data: usage events, purchase events, device model, operating system version, the app's language and version, an approximate location that Google derives from your IP address (the app has no access to your phone's location), the app-instance identifier and installation identifiers.

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, the United Kingdom, Canada and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a); in the United Kingdom, the same article of the UK GDPR). In Türkiye, it stays off until you turn it on in the app (Settings > Privacy choices). In other countries it is on unless you turn it off, except in these cases: on an iPhone, and on any device in Switzerland, it starts when you tap OK on the notice the app shows once, the first time it opens; if your app store country is Russia or mainland China, it does not run at all. In Thailand and Saudi Arabia, the legal basis is our legitimate interests (section 24(5) of Thailand's Personal Data Protection Act; article 6(4) of Saudi Arabia's Personal Data Protection Law). Everywhere, you can turn it off at any time in the app (Settings > Privacy choices).

  • Fixing crashes

    Data: crash reports with their diagnostics (memory and disk state), a record of each app session start, device model, operating system and app version, and installation identifiers.

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, Canada and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a)). In Türkiye, it stays off until you turn it on in the app (Settings > Privacy choices). In other countries it is on unless you turn it off, except in these cases: on an iPhone, and on any device in Switzerland, it starts when you tap OK on the notice the app shows once, the first time it opens; if your app store country is Russia or mainland China, it does not run at all; in the United Kingdom, the next row applies. In Thailand and Saudi Arabia, the legal basis is our legitimate interests (section 24(5) of Thailand's Personal Data Protection Act; article 6(4) of Saudi Arabia's Personal Data Protection Law). Everywhere, you can turn it off at any time in the app (Settings > Privacy choices).

  • Fixing crashes in the United Kingdom

    Data: crash reports with their diagnostics (memory and disk state), a record of each app session start, device model, operating system and app version, and installation identifiers.

    Legal basis: Our legitimate interests (UK GDPR art. 6(1)(f)): finding and fixing the crashes you hit. The app does not ask first in the United Kingdom, because the Privacy and Electronic Communications Regulations (PECR) allow storing and reading this data on your device without consent when it is needed only to find and fix technical faults. On Android, crash reports are on unless you turn them off in the app (Settings > Privacy choices); on an iPhone, they start once you answer the app's page about usage statistics, and you can turn them off the same way. You can object at any time by writing to us.

  • Reading the age range your app store shares, where a law requires it

    Data: the age range, which stays in your phone's memory and is never stored, logged or sent.

    Legal basis: Compliance with a legal obligation (GDPR art. 6(1)(c)).

  • Answering you when you write to us

    Data: your email address, your message and anything you attach.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): answering your request, and keeping a record of how we handled it. You can object at any time by writing to us.

6. Who receives data

We use these service providers to run Tollio. Each one receives only the data listed, for the purpose listed:

  • Google Analytics for Firebase (Google LLC)

    What for: counts how the app is used.

    Data: the events Firebase records by itself (first open, app opens, sessions, app updates, and in-app purchases with their price and currency when the store reports them), the screens you open and how you use alarms, tasks and the day toll (never the names of the apps you chose, your photos or your steps), the app's language and version, an app-instance identifier, the installation identifier, device model, operating system version and an approximate location that Google derives from your IP address (the app has no access to your phone's location).

    Google LLC processes this data on our behalf, under its data processing terms. Google Analytics for Firebase privacy information

  • Firebase Crashlytics (Google LLC)

    What for: reports crashes so we can fix them.

    Data: crash reports and diagnostics (device model, operating system, app version, memory and disk state), a record of each app session start, and installation identifiers.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Crashlytics privacy information

  • Firebase Remote Config and Firebase Installations (Google LLC)

    What for: keeps the app configured, for example switching a feature off remotely or inviting you to update.

    Data: an installation identifier and its token, the app's version, the operating system version, and the language, country setting and time zone of your device; while usage statistics are on, also when you first opened the app, as Google Analytics recorded it.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Remote Config and Firebase Installations privacy information

  • GoDaddy Professional Email (GoDaddy Operating Company, LLC)

    What for: receives and keeps the emails you send to support@iocodo.com and our replies.

    Data: your email address, your message and anything you attach, and our replies.

    GoDaddy Operating Company, LLC processes this data on our behalf, under its data processing terms. GoDaddy Professional Email privacy information

  • IT service providers (United States)

    What for: tools we may use to read the emails you send us and to draft our replies.

    Data: the text of your email and your email address, when we use these tools for it.

    These providers handle this data under their own terms.

Apple (App Store) and Google (Google Play) also handle your download, any purchase and the age checks the app asks them for, under their own privacy policies.

We do not sell your personal data.

7. Where data is processed

IOCODO LLC is registered in the United States. Our service providers may process your personal data in the United States and other countries where Google, GoDaddy or their subcontractors have facilities.

Where European, UK or Swiss data protection law requires a safeguard for this, we rely on:

  • the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, for providers certified under them (you can check a provider on dataprivacyframework.gov)
  • the Standard Contractual Clauses approved by the European Commission, with the UK Addendum and the Swiss adjustments, which are part of our providers' data processing terms

You can ask us for a copy of these safeguards at support@iocodo.com.

8. How long we keep data

Here is how long we keep each kind of personal data. Items marked automatic are deleted on a fixed schedule, without anyone having to ask.

  • Usage events in Google Analytics

    2 months. automatic

  • Identifiers linked to your usage statistics in Google Analytics (the app-instance and installation identifiers)

    Up to 14 months after the app last sent usage statistics. automatic

  • Crash reports

    90 days. automatic

  • Installation identifiers

    Until they have gone 270 days without use, when Firebase deletes them on its own (its current rule), or sooner if you ask us to delete them; Firebase then removes them within 180 days.

  • Emails you send us, and our replies to you

    Until you ask us to delete them. We set no fixed end date: we keep them as the record of our support, to answer you if you write again and to show how we handled your request. If you are in Korea, we keep them after our reply for at most 3 years, on the basis of article 15(1)(vi) of the Personal Information Protection Act (our legitimate interest in showing how we handled your request). If a law or a legal claim requires us to keep an email, we keep it until that ends.

  • What the app keeps on your phone

    Until you uninstall the app.

When you ask us to delete your data, we delete it as described here, unless the law requires us to keep part of it.

9. How we protect data

Data travels between the app and our service providers over encrypted connections (HTTPS).

If a security incident puts your personal data at risk, we tell you and the competent authorities when the law requires it.

10. Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we have about you, and give you a copy
  • send that copy to you, or to another company, in a machine-readable format
  • correct data that is wrong or incomplete
  • delete your data
  • stop or limit a use of your data, including any use based on our legitimate interests

To ask, write to support@iocodo.com. It is free. We reply within one month, and we may ask you to confirm that the data is yours before we act.

You can also withdraw any consent you gave, at any time, in the app (Settings > Privacy choices). What we did with your consent before you withdrew it stays lawful.

Deleting your data

You can delete your data:

Usage statistics and crash reports that were already sent are deleted on their own, within the periods in How long we keep data.

Data that stays on your device is deleted when you uninstall the app.

Complaints

You also have the right to complain to an authority:

If you are in Brazil, you have the rights listed in article 18 of the LGPD (Lei 13.709/2018), and you can use them as described above. If you ask us for your data, we send a complete answer within 15 days, not one month.

11. Privacy rights in US states

Several US states, including California, Colorado, Connecticut, Oregon, Texas and Virginia, give their residents privacy rights. We give the same rights to everyone in the United States:

  • to know what personal information we collect, use and disclose, and to get a copy of it
  • to correct it
  • to delete it
  • to opt out of the sale of your personal information, of its use for targeted advertising and of profiling that has legal or similarly significant effects
  • to appeal if we turn down your request
  • not to be treated differently for using any of these rights

The personal information we collect comes from you and from the app on your device. Why we use it and who receives it are described in What we use data for and Who receives data. We do not sell your personal information. In the current version of Tollio, we do not use or share it for targeted advertising.

To use these rights, write to support@iocodo.com, or have someone you authorise write for you. We reply within one month (these state laws allow up to 45 days). If we turn your request down, you can appeal by replying with the word "Appeal" in the subject. We answer an appeal within 45 days, and if you still disagree you can contact the attorney general of your state.

12. Notices for some countries

Canada

The service providers listed in Who receives data collect and keep data for us. They may process it outside Canada, in the United States and other countries where Google, GoDaddy or their subcontractors have facilities. The courts and authorities of those countries can have access to it under their laws.

Japan: information the app sends to other companies

When you use Tollio, the app sends this information from your device to other companies:

  • Google Analytics for Firebase (Google LLC)

    Information sent: the events Firebase records by itself (first open, app opens, sessions, app updates, and in-app purchases with their price and currency when the store reports them), the screens you open and how you use alarms, tasks and the day toll (never the names of the apps you chose, your photos or your steps), the app's language and version, an app-instance identifier, the installation identifier, device model, operating system version and an approximate location that Google derives from your IP address (the app has no access to your phone's location).

    Our purpose: to count how the app is used.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Crashlytics (Google LLC)

    Information sent: crash reports and diagnostics (device model, operating system, app version, memory and disk state), a record of each app session start, and installation identifiers.

    Our purpose: to report crashes so we can fix them.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Remote Config and Firebase Installations (Google LLC)

    Information sent: an installation identifier and its token, the app's version, the operating system version, and the language, country setting and time zone of your device; while usage statistics are on, also when you first opened the app, as Google Analytics recorded it.

    Our purpose: to keep the app configured, for example switching a feature off remotely or inviting you to update.

    Purpose of Google LLC: it uses the information only to provide this service to us.

In Settings > Privacy choices, you can turn off usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics). The other transmissions cannot be turned off in the app.

Korea: personal information, entrustment and transfer abroad

Personal information: under Korea's Personal Information Protection Act (the Act), the personal information we process is the emails you send to support@iocodo.com, with what you write in them; and the installation identifiers the app needs to receive its settings. The app-instance identifier, usage events, crash reports and the device information listed in Who receives data cannot be linked to you with anything we hold or could lawfully obtain at reasonable cost in time, money and technology, so under the Act they are not personal information (the definition in What this policy covers is broader), and we handle them without identifying you.

Processed without your consent: we process your emails to us (your email address, your message and anything you attach) and the installation identifiers without asking for your consent, on the basis of article 15(1)(iv) of the Act, which covers what is needed to carry out our contract with you (our terms of use) or, in the process of concluding a contract, to act on your request. Once we have handled your request, we keep your emails to us and our replies, with your email address, as the record of how we handled it, in case you write to us again about it or a dispute arises, on the basis of article 15(1)(vi) of the Act (our legitimate interests, where they clearly outweigh your rights and stay within a reasonable scope). If you are in Korea, we keep them for 3 years after our last message about that request, then delete them; we delete them sooner if you ask us to.

Entrustment and transfer abroad: we entrust the work below to these companies, which receive the personal information outside Korea. The legal basis for the transfer is article 28-8(1)(iii) of the Act: we entrust this work to them to carry out our contract with you, and this policy discloses the details the Act lists. Each company uses the information only to do this work for us, and keeps it for the periods in How long we keep data.

  • Google LLC

    Work entrusted: running the Firebase services the app uses: keeping the installation identifiers that the app's settings rely on.

    Personal information transferred: installation identifiers and their tokens.

    Countries: the United States, Australia, Belgium, Brazil, Canada, Chile, Denmark, Finland, France, Germany, Hong Kong, India, Indonesia, Ireland, Israel, Italy, Japan, Mexico, the Netherlands, Poland, Qatar, Saudi Arabia, Singapore, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, the United Kingdom and Uruguay.

    When and how: when the app connects to Firebase, over an encrypted connection (HTTPS).

    Contact: 1600 Amphitheatre Parkway, Mountain View, California 94043, United States, privacy contact form.

    How to refuse: the installation identifiers are needed for the app to receive its settings, and uninstalling the app stops them.

    If you refuse: you cannot use Tollio.

    Sub-processors: the list published by Google LLC

  • GoDaddy Operating Company, LLC

    Work entrusted: receiving and keeping the emails you send to support@iocodo.com and our replies.

    Personal information transferred: your email address, your message and anything you attach, and our replies.

    Countries: the United States and the Cayman Islands.

    When and how: when you send us an email or we reply to you, over the internet.

    Contact: Office of the Data Privacy Officer, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, United States, privacy@godaddy.com.

    How to refuse: do not write to us by email; to remove the emails you already sent, ask us to delete them.

    If you refuse: we cannot answer you by email, and the app works the same.

    Sub-processors: the list published by GoDaddy Operating Company, LLC

Where we process it: we have no servers of our own: the companies above store this personal information for us, in the countries named for each.

Destruction: when the period in How long we keep data ends, or when you ask us, we delete the personal information without delay, permanently and so that it cannot be recovered. We keep none of it on paper.

Automatic collection: the app collects information automatically through the software development kits (SDKs) of these services. What each one collects is listed in Who receives data, and how long it is kept in How long we keep data.

  • Google Analytics for Firebase
  • Firebase Crashlytics
  • Firebase Remote Config and Firebase Installations

How to refuse: on Android, usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics) are on by default in Korea; on iPhone and iPad they start when you tap OK on the notice the app shows once, the first time it opens. You can turn them off at any time in Settings > Privacy choices. The other services in this list are needed for the app to work: to refuse them, stop using the app and delete it. You can also write to us at support@iocodo.com.

Your requests: you can make the requests described in Your rights. If you are in Korea, we answer within 10 days, not one month. A legal guardian of a child under 14 can make the same requests for the child.

Privacy officer: IOCODO LLC, Privacy team, support@iocodo.com. You can also send complaints about how we handle personal information to this address.

Aviso de privacidad para México

Aviso de privacidad simplificado: en IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos, tratamos los datos de tu dispositivo, los datos sobre cómo usas la app y, si nos escribes, tu mensaje y tu correo electrónico. Los usamos para que Tollio funcione y para responderte, que son finalidades primarias, y también para las estadísticas de uso y los informes de fallas, que son finalidades secundarias, en las condiciones que se indican abajo. Puedes limitar el uso de tus datos en Settings > Privacy choices o escribiéndonos a support@iocodo.com. Puedes consultar el aviso de privacidad integral en esta página.

Si usas Tollio en México, esta página es nuestro aviso de privacidad integral. Esto es lo que la ley mexicana nos pide decirte:

Responsable: IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos. Puedes escribirnos a support@iocodo.com.

Datos personales que tratamos: los detallamos para cada uso en la sección “Para qué usamos los datos y con qué base jurídica” y para cada servicio en la sección “Quién recibe los datos”.

Para qué los usamos: para que Tollio funcione y para responderte cuando nos escribes. Estas son finalidades primarias: son necesarias para prestarte el servicio.

Finalidades secundarias: si no te opones, también los usamos para:

  • estadísticas de uso (Google Analytics para Firebase)
  • informes de fallas (Firebase Crashlytics)

Cómo limitar el uso de tus datos: en Settings > Privacy choices puedes desactivar cuando quieras las estadísticas de uso y los informes de fallas. La app sigue funcionando igual. También puedes escribirnos a support@iocodo.com.

Transferencias: cuando usamos un asistente de inteligencia artificial para leer un correo y preparar la respuesta, su proveedor, ubicado en Estados Unidos, recibe estos datos: tu dirección de correo electrónico, tu nombre si lo escribes y el contenido de tu mensaje. Los trata conforme a sus propios términos. Esto constituye una transferencia de datos, cuya finalidad es ayudarnos a leer tus mensajes y a redactar nuestras respuestas. Si no la aceptas, escribe “SIN IA” en el asunto de tu correo a support@iocodo.com: atenderemos ese mensaje sin usar el asistente. Si no manifiestas tu negativa, entenderemos que la aceptas.

Derechos ARCO: puedes pedirnos acceso a tus datos, su rectificación o su cancelación, y oponerte a su uso. Nuestro departamento de datos personales atiende estas solicitudes en support@iocodo.com: dinos qué derecho quieres ejercer y sobre qué datos. Te respondemos en un plazo máximo de 20 días.

Tecnologías que recopilan datos automáticamente: mientras usas la app, los componentes de software (SDK) de estos servicios recopilan datos de forma automática:

  • Google Analytics para Firebase
  • Firebase Crashlytics
  • Firebase Remote Config y Firebase Installations

En la sección “Quién recibe los datos” puedes ver qué recopila cada uno. En Settings > Privacy choices puedes desactivar Google Analytics para Firebase y Firebase Crashlytics. Para que los demás dejen de recopilar datos, tendrías que desinstalar la app.

Cambios a este aviso: los publicamos en esta página, con la fecha de la nueva versión. Si un cambio afecta la forma en que usamos los datos que ya tenemos de ti, te avisamos en la app antes de aplicarlo.

South Africa

If you are in South Africa, you can object at any time to our use of your personal information. In Settings > Privacy choices, you can turn off usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics); for any other use, write to us at support@iocodo.com. You can also lodge a complaint with the Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, South Africa; email POPIAComplaints@inforegulator.org.za; telephone +27 10 023 5200.

Türkiye: Aydınlatma Metni

Bu metin, Tollio uygulamasını Türkiye'de kullanan kişileri 6698 sayılı Kişisel Verilerin Korunması Kanunu'nun (“Kanun”) 10. maddesi uyarınca aydınlatmak amacıyla hazırlanmıştır.

Bu metin yalnızca bilgilendirme amaçlıdır. Açık rızanız, bu metinden ayrı olarak uygulama içinde alınır.

Veri sorumlusu: Tollio uygulamasını geliştiren IOCODO LLC. IOCODO LLC, Amerika Birleşik Devletleri'nin Wyoming eyaletinde kayıtlı bir sınırlı sorumluluk şirketidir.

Posta adresi: 30 N Gould St Ste N, Sheridan, WY 82801-6317, Amerika Birleşik Devletleri
E-posta: support@iocodo.com

Amaçlar ve hukuki sebepler: Kişisel verilerinizi aşağıdaki amaçlarla işliyoruz.

  • Uygulamanın çalışması: uygulamanın yapılandırılması, örneğin bir özelliğin uzaktan kapatılması

    Veriler: kurulum tanımlayıcıları, uygulamanın sürümü, işletim sisteminin sürümü, cihazınızın dili, ülke ayarı ve saat dilimi.

    Hukuki sebep: bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c).

  • Tollio Pro'nun satışı ve kilidinin açılması

    Veriler: satın aldığınız ürün ve Apple'ın veya Google'ın uygulamaya gönderdiği, uygulamanın telefonunuzda sakladığı satın alma veya abonelik onayı; kart veya ödeme bilgilerinizi hiçbir zaman görmeyiz.

    Hukuki sebep: bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c).

  • Uygulamanın kullanımına ilişkin istatistiklerin tutulması ve çökmelerin giderilmesi

    Veriler: kullanım olayları, satın alma olayları, çökme raporları ve tanılama bilgileri (bellek ve disk durumu), her uygulama oturumunun başladığına ilişkin bir kayıt, cihaz modeli, işletim sistemi ve uygulama sürümü, uygulamanın dili, uygulama örneği ve kurulum tanımlayıcıları, Google'ın IP adresinizden çıkarsadığı yaklaşık konum (uygulamanın telefonunuzun konumuna erişimi yoktur).

    Hukuki sebep: açık rızanız (Kanun md. 5/1). Türkiye'de kullanım istatistikleri ve çökme raporları siz açık rıza verene kadar kapalıdır.

  • Bir yasanın gerektirdiği yerlerde, uygulama mağazanızın paylaştığı yaş aralığının okunması

    Veriler: yaş aralığı; telefonunuzun belleğinde kalır, hiçbir zaman saklanmaz, kaydedilmez veya gönderilmez.

  • Bize yazdığınızda size yanıt verilmesi

    Veriler: e-posta adresiniz, mesajınız ve eklediğiniz her şey.

    Hukuki sebep: sorularınızın yanıtlanması bakımından, bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c); Kanun'un 11. maddesi uyarınca yaptığınız başvuruların sonuçlandırılması bakımından, veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması (Kanun md. 5/2-ç ve md. 13); size nasıl yanıt verdiğimizi kanıtlayabilmek amacıyla yazışmaların yalnızca Kurul'a şikâyet veya dava yolu açık olduğu sürece saklanması bakımından, bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması (Kanun md. 5/2-e).

Toplama yöntemi: Kişisel verilerinizi aşağıdaki iki yöntemle elde ediyoruz.

  • Otomatik yollarla: uygulamayı kullandığınız sırada, cihazınızdaki Tollio uygulaması ve uygulamanın içinde yer alan hizmet sağlayıcılara ait yazılımlar (SDK) aracılığıyla.
  • Bir veri kayıt sisteminin parçası olmak kaydıyla otomatik olmayan yollarla: bize yazdığınızda, yani e-postalarınız aracılığıyla.

Aktarım: Tollio uygulamasını işletmek için aşağıdaki sağlayıcılardan hizmet alıyoruz. Her biri yalnızca kendi hizmetiyle ilgili verileri alır.

  • Google LLC: uygulamanın yapılandırılması (Firebase Remote Config ve Firebase Installations); açtıysanız kullanım istatistikleri (Google Analytics for Firebase) ve çökme raporları (Firebase Crashlytics)
  • GoDaddy Operating Company, LLC: destek posta kutumuz (GoDaddy Professional Email); bize gönderdiğiniz e-postaları ve yanıtlarımızı saklar
  • Bilgi teknolojisi hizmet sağlayıcıları (ABD): bize gönderdiğiniz e-postaları okumak ve yanıtlarımızı hazırlamak için kullanabileceğimiz araçlar

Haklarınız: Kanun'un 11. maddesi uyarınca, veri sorumlusuna başvurarak kendinizle ilgili aşağıdaki haklara sahipsiniz.

  • kişisel verilerinizin işlenip işlenmediğini öğrenme
  • kişisel verileriniz işlenmişse buna ilişkin bilgi talep etme
  • kişisel verilerinizin işlenme amacını ve amacına uygun kullanılıp kullanılmadığını öğrenme
  • kişisel verilerinizin yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme
  • kişisel verileriniz eksik veya yanlış işlenmişse düzeltilmesini isteme
  • Kanun'un 7. maddesindeki şartlar çerçevesinde kişisel verilerinizin silinmesini veya yok edilmesini isteme
  • düzeltme, silme ve yok etme işlemlerinin, kişisel verilerinizin aktarıldığı üçüncü kişilere bildirilmesini isteme
  • işlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz etme
  • kişisel verilerinizin kanuna aykırı olarak işlenmesi sebebiyle zarara uğramanız hâlinde zararın giderilmesini talep etme

Başvuru: Başvurunuzu support@iocodo.com adresine e-postayla iletebilirsiniz. Talebinizi, niteliğine göre en kısa sürede ve en geç otuz gün içinde ücretsiz olarak sonuçlandırırız (Kanun md. 13).

Việt Nam: chuyển dữ liệu cá nhân xuyên biên giới

Khi bạn dùng Tollio tại Việt Nam, dữ liệu cá nhân của bạn được chuyển ra nước ngoài và được xử lý tại đó. Tollio là ứng dụng của IOCODO LLC, một công ty tại Hoa Kỳ.

Bên nhận dữ liệu: IOCODO LLC và các nhà cung cấp dịch vụ của chúng tôi, gồm:

  • Google LLC
  • GoDaddy Operating Company, LLC

Nơi xử lý: Hoa Kỳ và các quốc gia khác nêu tại phần về nơi xử lý dữ liệu trên trang này.

Mục đích xử lý: vận hành Tollio và trả lời khi bạn liên hệ với chúng tôi.

Ngoài ra, tùy theo lựa chọn của bạn, dữ liệu còn được dùng cho:

  • thống kê việc sử dụng ứng dụng (Google Analytics for Firebase)
  • báo cáo sự cố để chúng tôi khắc phục lỗi (Firebase Crashlytics)

Phần về bên nhận dữ liệu trên trang này cho biết mỗi dịch vụ nhận những dữ liệu nào và để làm gì. Bạn có thể bật hoặc tắt thống kê sử dụng và báo cáo sự cố bất cứ lúc nào trong ứng dụng, tại Settings > Privacy choices.

Email bạn gửi cho chúng tôi: Bên nhận: GoDaddy Operating Company, LLC tại Hoa Kỳ (nhà cung cấp hộp thư hỗ trợ của chúng tôi) và Anthropic, PBC tại Hoa Kỳ (Claude, trợ lý trí tuệ nhân tạo mà chúng tôi có thể dùng để đọc email và soạn bản nháp thư trả lời). Điều này cũng áp dụng cho các báo cáo bạn gửi cho chúng tôi qua email.

Xử lý tự động: Khi chúng tôi dùng Claude để đọc một email, nội dung email đó được xử lý tự động. Claude là một mô hình ngôn ngữ, có chức năng đọc văn bản và soạn bản nháp thư trả lời. Chúng tôi không đưa ra bất kỳ quyết định tự động nào về bạn: một người phụ trách tại IOCODO sẽ trực tiếp đọc và quyết định cách trả lời. Nếu bạn muốn từ chối, hãy ghi «KHÔNG AI» vào tiêu đề email gửi đến support@iocodo.com: chúng tôi sẽ xử lý email đó mà không dùng trí tuệ nhân tạo.

13. Children

Tollio is not meant for children under 13.

The app never asks for your age or your year of birth. Where it asks for your consent to usage statistics and crash reports (in the United Kingdom, usage statistics only), the button that allows them states the age from which your consent counts there, such as "Allow all, I’m 16 or older"; the button that refuses them, "Refuse", states no age. If you are younger than the age on the button, choose Refuse, and the app works the same.

Your consent counts from an age that depends on where you are: 13 in the United Kingdom, Belgium, Estonia, Iceland, Malta, Norway, Portugal and Sweden; 14 in Austria, Cyprus, Spain and Canada; 15 in Czechia, Denmark, France, Greece and Slovenia; 16 in the other countries of the European Economic Area. When the app sees signs of more than one country, the highest of their ages applies. In Brazil, an Allow turns usage statistics and crash reports on only when your app store tells the app that you are 18 or older; otherwise they stay off.

Where a law requires it, as in Texas and in Brazil, the app reads the age range your app store shares with it (Apple's Declared Age Range, Google Play Age Signals). It uses the range only to protect younger users, keeps it only in your phone's memory, and never stores, logs or sends it.

For parents: Tollio has no account, no chat and nothing that users share with each other. It is a tool a person sets up for their own phone, not a parental control: the person who sets it up chooses the apps, can change them, can open them at once with the emergency unlock on every shield, and can turn Tollio off in Settings or in Apple's Screen Time settings. Photos and step counts stay on the phone. Usage statistics and crash reports go to Google Firebase only as this policy describes, and in Brazil only after an Allow from a user whose app store says they are 18 or older. In Brazil, this paragraph is also the public summary, in plain language, of our assessment of the risks the app poses to children and teenagers.

If you think a child has given us personal data, write to support@iocodo.com and we will delete it.

14. "Do Not Track" and other companies

Some browsers and devices can send a "Do Not Track" signal. There is no common standard for responding to it, so neither Tollio nor this page changes what it does when it receives one. The choices described in this policy are how you control your data.

In the current version of Tollio, only the service providers listed in Who receives data receive data from the app, for the purposes listed there. We do not let other companies use Tollio to collect personal data about your activity over time and across other apps and websites.

15. Changes to this policy

We update this policy when Tollio or the law changes, and the date at the top shows when the current version took effect. If a change affects how we use data we already have about you, we tell you in the app before it applies, and we ask for your consent again where the law requires it.

This version was last updated on .

16. Contact

IOCODO LLC
Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com
Report criminal or illegal content: iocodo.com/report/
Person in charge of data protection (the Managing Member of IOCODO LLC), and our other contact details: iocodo.com/contact/