Privacy Policy — TOVO
Effective: August 22nd, 2025
Contact: tovoskn@gmail.com
This Privacy Policy explains what we collect, why, how we use it, and your choices. It applies to the TOVO mobile app.
1) Data we collect
Account info
Email, display name (optional), Firebase UID, timestamps (created/last login).
Rider/driver status, approval status.
Location data
Riders: device location when you grant permission and use location features.
Drivers: device location (including background) while “Live.” Turn off “Live” or revoke permissions to stop sharing.
Usage, device & diagnostics
App interactions (e.g., screens, taps), device identifiers, OS/version, network info.
Crash logs and performance metrics.
Communications
Support messages, approvals (e.g., if you contact us via WhatsApp/email), and related metadata.
We do not collect sensitive personal data unless you provide it (please don’t send sensitive info in support messages).
2) How we use data
Provide core features (maps, show buses, login/account).
Maintain safety and integrity (fraud/abuse detection, rate-limiting).
Debug, fix crashes, and improve performance.
Communicate service updates, policy changes, or support responses.
Comply with legal obligations.
3) Legal bases (if applicable)
Where required (e.g., GDPR-regions), we process data based on: performance of a contract (providing the App), legitimate interests (security, improvement), consent (location permissions), and legal obligations.
4) Sharing & service providers
We don’t sell your data. We use service providers (“processors”) to operate the App, including but not limited to:
Google Firebase (Authentication, Firestore/Database, Cloud Functions/Hosting, Crashlytics, Cloud Messaging).
Maps provider (e.g., Google Maps SDK) to render maps and related services.
Analytics/monitoring tools used to understand performance and errors.
These providers may process data on our behalf under their terms and privacy commitments.
5) Location specifics
Riders: Location is used to show you nearby buses and improve map relevance.
Drivers: Background location may be collected while “Live” to display your bus to riders. Turn off “Live” to stop background collection.
6) Retention
We keep data only as long as necessary for the purposes above and as required by law.
Account/Profile: retained until you delete your account or we delete inactive accounts after [e.g., 24 months].
Location points (drivers/riders): retained for operational use for [e.g., 24–72 hours], then aggregated/anonymized or deleted.
Logs/analytics/crash data: [e.g., up to 13 months].
7) Security
We use reasonable technical and organizational measures (e.g., platform controls, access limits). No system is 100% secure. You’re responsible for securing your device and account.
8) Your choices & rights
Permissions: You can revoke location permissions in device settings.
Access/Deletion: Email tovoskn@gmail.com to request access or deletion. We may need to verify your identity (e.g., by emailing from your registered address).
Account deletion: Request via tovoskn@gmail.com; we’ll delete your account and associated personal data unless retention is required by law or for safety/fraud prevention.
Marketing: We don’t send marketing without consent; you can opt out anytime.
(Depending on your region, you may have additional rights such as portability or objection; we’ll honor them as required by local law.)
9) Children’s privacy
The App is not directed to children under 13 (or the minimum age in your country). If we learn a child’s data was collected, we’ll delete it.
10) Account misuse & enforcement
We may suspend or deactivate accounts that violate our policies or create safety risks. When practical, we’ll notify you at your registered email and provide an appeal path at tovoskn@gmail.com. If an account is deactivated, we may retain limited information needed for security, fraud prevention, and legal compliance.
11) International transfers
Your data may be processed in countries different from where you live (e.g., St. Kitts and Nevis or other regions where our providers operate). We take steps consistent with applicable law to protect your data during transfers.
12) Changes to this Policy
We may update this Policy to reflect changes to the App or legal requirements. We’ll post updates and change the Effective date. Continued use means you acknowledge the updated Policy.
13) Contact
Questions or requests: tovoskn@gmail.com