Privacy Policy

Last updated: 25 September 2026

What Toko Beasts stores on your device

• The tasks you are given, and the ones you write yourself, including their titles.
• Which tasks you finished, and on which day.
• Notes you choose to write after finishing something. These are optional and off by default.
• Your creatures, their levels, and what you have caught.
• Your progress: levels, trophies, and which growth plans you picked.
• The player name you choose during onboarding.
• Your settings: sound, music, haptics, and reduced motion.
• The most recently verified Toko Beasts Plus access state, so paid access is not removed just because the store is temporarily unreachable.

Toko Beasts does not ask for your phone number, date of birth, precise location, contacts, or photos, and reads nothing from Apple Health unless you connect Walks (see below). If you choose account protection, your sign-in provider may give us an email address or private relay address and an account identifier so the right save can be restored.

Optional account and cloud save

Account protection is optional. Apple or Google handles the sign-in. Supabase provides authentication and cloud storage. If you sign in, Supabase processes your account identifier, the email address or private relay address supplied by the provider, authentication records, and technical service information such as IP address and logs needed to operate and secure the service.

Your cloud save can include the same Toko Beasts information stored on your device, including task titles, completions, optional notes, creatures, progress, the player name you chose, game scores, and settings. We keep the current save and up to 20 recent safety versions so an accidental overwrite can be investigated or recovered. We use this information only to back up, restore, and support your Toko Beasts progress. Read Supabase's privacy policy.

Friend codes

Friend codes need a protected account. When you have one, we create a code for your account, such as TOKO-BK7QX2, and store it with your account identifier. If you enter a friend's code, we record that your account used it, whose code it was, and when. We use this only to check the code and to give each of you the reward. Your friend sees how many people used their code, never who. We never see your contacts, and a code contains no personal information.

When you share your code, the message goes through your phone's share sheet to whoever you choose. The invite page on our website only shows the code from its link and does not store it, though our website host (Netlify) keeps standard request logs that include the link. Deleting your account deletes your code and the record of any code you used, and removes your account from the record of anyone who used yours.

Notifications

If you turn on a notification, Toko Beasts schedules it on your phone: a note when your toko gets home from a journey, and an optional daily hello at a time you pick. These are local notifications. Nothing is sent to us or to a notification server, and we don't collect a push token. You can turn them off in the app's Settings or in your phone's settings.

Steps from Apple Health

If you connect Walks, Toko Beasts reads today's step count, and wheelchair pushes if you use them, from Apple Health on your phone. It only reads; it never writes to Health.

Your step count stays on your phone. Toko Beasts turns it into walk finds and your toko's growth, and your save keeps those results, not the step count. Your steps are never sent to us, to advertisers, or to anyone else, and are never used for advertising. You can stop sharing at any time in the Health app, under Sharing, Apps, Toko Beasts.

Subscription and payment information

Apple or Google processes the payment. Toko Beasts and RevenueCat do not receive your full payment-card details.

RevenueCat provides Toko Beasts's subscription system. When the app checks plans, makes a purchase, restores a purchase, or refreshes access, RevenueCat may process an app user identifier, product identifiers, purchase and subscription status, transaction or receipt information, and technical details needed to operate and secure the service. Read RevenueCat's privacy policy.

We use this information only to provide, restore, and support Toko Beasts Plus, and to understand subscription performance through RevenueCat's purchase reports. Those reports use purchase and subscription records, not your tasks, notes, wellness activity, or screen activity. We do not use this information for advertising or cross-app tracking. The current app version has no behavioral analytics SDK, advertising SDK, or crash-reporting SDK. This policy and both store disclosures will be updated before any version with advertising is released.

The core care and growth experience works offline. Viewing current plans, buying, restoring, and refreshing subscription status require a connection.

Other ways your local data can leave

When you export it. The You tab has an "Export your data" button. It puts your data in a text box on that screen for you to copy. Once you have copied it somewhere, that copy is wherever you put it, and this policy no longer covers it.

When you protect your progress. If you choose Apple or Google sign-in, the app sends your save to our cloud service as described above. Guest play does not send a save to us.

When your phone backs itself up. Toko Beasts stores its data in the app's own storage, which iOS and Android include in their normal device backups. If you have iCloud Backup or Google One backup switched on, a copy of Toko Beasts's data goes wherever your phone's backups go. That is handled by Apple or Google under their privacy policies, not ours. You can turn it off per app in your phone's settings.

These copies are controlled by you and your device provider.

Deleting your data

The You tab has "Delete what is on this device". It asks first, tells you exactly what goes, and clears everything Toko Beasts has stored when you confirm. If cloud save is on, this also signs that device out but leaves the cloud backup in place.

If you signed in, the You tab also has "Delete account" under Cloud save. It asks again before deleting the account, current cloud save, and cloud save history. The copy already on that device stays there until you separately choose "Delete what is on this device". You can also request account or cloud-data deletion using the contact address below.

Deleting the app also removes its data.

Neither reaches an export you have already taken, or a phone backup you have already made. Those are yours to delete where they live. There is more detail on the deletion page.

Deleting an account, local Toko Beasts data, or the app does not cancel a subscription. Subscriptions are managed in your App Store or Play Store settings. For a request concerning subscription records processed through RevenueCat, contact us below.

Children

Toko Beasts is not directed at children under 13.

Changes

If this policy changes, the date at the top changes with it.

Contact

Questions about this policy: miwoju.business@gmail.com