This Privacy Policy describes how ToBuy ("we", "our", or "us") collects, uses, and shares information when you use the ToBuy mobile application (the "App"). By using the App, you agree to the practices described in this Policy.
If you do not agree, please do not use the App.
Summary
- We collect account information you provide (e.g., email) to create and manage your account and family shopping lists.
- We use Firebase (Google) to provide authentication and cloud data sync.
- We show ads using Google AdMob. Device identifiers may be used for ad delivery and measurement. On iOS we ask for tracking permission via App Tracking Transparency.
- We access your microphone only when you use the voice-to-text feature to add items by voice. Audio is processed on-device by the OS/SDK, and recognized text is used within the App.
- We may request notification permission to schedule local reminders you configure for your lists.
- We do not sell your personal information.
Information We Collect
1) Account and Profile Information
- Email address and password (when you register or sign in with email/password).
- Display name (optional).
- Authentication tokens/identifiers provided by sign-in providers (e.g., Firebase, Google, Facebook).
2) App Content You Create
- Family and list data you create, including list titles and shopping items.
- Optional preferences such as voice language and a custom “detector word”.
3) Usage Information
Basic in-app events occur through Firestore reads/writes. We do not use separate analytics SDKs in the App build.
4) Device and Network Information
IP address and device information may be collected by our service providers (e.g., Firebase, AdMob) for security, fraud prevention, and service operation.
5) Advertising Identifiers and Tracking
- Google Mobile Ads SDK may collect the Google Advertising ID (AAID) on Android and, subject to your consent, the Identifier for Advertisers (IDFA) on iOS.
- On iOS, we request tracking permission via App Tracking Transparency to support ad personalization and measurement.
6) Microphone (Voice Input)
When you activate the voice-to-text feature, we access the microphone to convert speech to text. Audio is used only for speech recognition during that session. Recognized text may be used to add items to your list.
7) Notifications
If you enable reminders, we request notification permission to schedule local notifications on your device. You control whether to allow notifications.
How We Use Information
- Provide, operate, and improve the App and its features (lists, sharing, reminders, voice input).
- Authenticate users and maintain accounts and families.
- Synchronize your lists across devices using Firebase Firestore.
- Show advertising through AdMob and measure ad performance (subject to platform permissions and regional consent requirements).
- Detect, prevent, and address technical issues, abuse, and security incidents.
Legal Bases (EEA/UK)
If you are in the EEA/UK, we process personal data under these legal bases:
- Performance of a contract: to provide the App and your account features.
- Legitimate interests: to secure the App, prevent fraud, and improve service.
- Consent: where required for ads personalization and tracking (e.g., IDFA on iOS) and notifications.
You may withdraw consent at any time in your device settings or within any consent prompt provided by the App/OS.
Sharing of Information
We do not sell your personal information. We may share information with:
- Service Providers: We use trusted providers to operate the App, including:
• Google Firebase (Authentication and Firestore database)
• Google AdMob (advertising delivery and measurement)
• Apple/Google OS services (notifications, speech recognition APIs) - Legal and Safety: We may disclose information to comply with laws, enforce our terms, or protect rights, property, or safety.
Note: If you join a family in the App, the information you contribute to shared lists becomes visible to members of that family within the App.
Advertising and Your Choices
- Personalized Ads: AdMob may use device identifiers and other signals to show personalized ads where permitted. On iOS, we ask for tracking permission. On Android, you can reset/limit the advertising ID in system settings.
- Non-Personalized Ads: Depending on your region and configuration, AdMob can serve non-personalized ads. You can also influence personalization via your device ad settings and Google ad settings.
- Regional Consent: In regions requiring consent (e.g., EEA), we may show a consent prompt. If you do not provide consent, ads may be non-personalized. Note: Your device/OS or the Ad SDK may also present consent choices.
Data Retention
- Account and list data are retained while your account is active. You can request deletion (see “Your Rights”).
- Local notification schedules exist on your device until you cancel them or uninstall the App.
- Logs/diagnostic data retained by service providers follow their policies.
Security
We implement reasonable administrative, technical, and organizational measures to protect your information. No method of transmission or storage is 100% secure.
International Data Transfers
Your information may be processed and stored on servers outside of your country (e.g., by Google Firebase/AdMob). We rely on appropriate safeguards where required by law.
Your Rights
Depending on your location, you may have rights such as access, correction, deletion, portability, objection, and restriction of processing.
- Access/Update: You can update some profile data in the App. For other requests, contact us.
- Deletion: You may request account deletion. Deleting your account removes your profile and may remove or anonymize associated list data, subject to retention needs (e.g., legal/security).
- Consent Withdrawal: You can disable tracking/ads personalization in device settings and notification permissions in OS settings.
To exercise rights, contact us at the email below. We may need to verify your identity.
Children’s Privacy
The App is not directed to children under the age where parental consent is required by local law. We do not knowingly collect personal information from such children. If you believe we have, contact us and we will take appropriate action.
Third-Party Services and Links
- Firebase & Google Services: https://policies.google.com/privacy
- Google AdMob: https://policies.google.com/technologies/ads and https://support.google.com/admob/answer/6128543
- Apple App Tracking Transparency: https://support.apple.com/en-us/HT212025
Changes to This Policy
We may update this Policy from time to time. We will post the updated version in the App or via our distribution channel. Your continued use of the App after changes constitutes acceptance of the updated Policy.
Contact Us
If you have questions or requests about this Policy or your data, please contact:
Owner/Developer: HelloSofts (ToBuy)
Email: info@hellosofts.com