TocaPrivacy policy
Last updated: 27 October 2026
Toca ("the app") is made by Bryson Bachand, New Zealand ("we"). This policy explains what the app collects, why, and what you can do about it.
What stays on your phone
Your saved words, flashcard history, reading progress, bookmarks, settings and daily activity are stored on your device. If you do not create an account, they never leave it.
If you create an account
Accounts are optional. If you create one, we store your email address (or the private relay address Apple gives us if you use Sign in with Apple) and a copy of your saved words, reading progress and settings, so you can use them on another device. This data is stored with our database provider, Supabase.
You can delete your account and this data at any time in the app (Settings → your account → Delete account), or by emailing us.
Usage statistics
Unless you turn it off (Settings → Share anonymous usage statistics), the app sends usage events such as "story opened", "story finished", "practice session finished" or "subscription offer viewed", with a random identifier, the app version and your device type. We use them to understand which stories and features work. They are stored with our analytics provider, PostHog, in the United States.
They do not include your saved words, story text or what you type, except the text of messages you choose to send through the Feedback screen. If you are signed in, events are linked to your account id.
Purchases
Subscriptions are processed by Apple through the App Store. We never see your payment details. We use RevenueCat to check whether your subscription is active; it receives an anonymous id (or your account id) and your purchase history from the App Store.
Notifications
Reading reminders and new-story alerts are scheduled on your phone. No notification content is sent to us.
What we do not do
- We do not sell your data, show ads, or share your data with advertisers or data brokers.
- We do not track you across other companies' apps or websites.
- We do not knowingly collect personal information from children under 13. The kids section of the app works without an account.
How long we keep data
Account data is kept until you delete your account. Usage statistics are kept no longer than two years.
Your rights
You can ask to see, correct or delete the personal information we hold about you by emailing us. If you are not happy with our answer, you can complain to your local privacy regulator (in New Zealand, the Office of the Privacy Commissioner).
Changes
If this policy changes, we will update this page and the date at the top. Important changes will also be shown in the app.