Privacy Policy

1. Information We Collect

Information You Provide

When you create an account and use Tovly, we collect:

• Account Information: Email address (or Apple ID if using Sign in with Apple)
• Profile Information: Age, gender, height, weight, and activity level
• Health Preferences: Health goals, dietary restrictions, food allergies, and health conditions you choose to share
• Scan History: Products you scan or enter, including product names, brands, barcodes, ingredients, and your personalized analysis results
• Favorites: Products you mark as favorites

Information Collected Automatically

• Device Information: Device type, operating system version, and app version for troubleshooting purposes
• Usage Data: App interactions to improve our service (collected via error tracking, not for advertising)

2. How We Use Your Information

We use your information to:

• Personalize Analysis: Provide ingredient analysis tailored to your health profile, goals, and restrictions
• Maintain Your History: Store your scan history so you can reference past products
• Improve Our Service: Fix bugs and improve app performance
• Communicate: Send important updates about your account or the App (if you opt in to notifications)

We do NOT:

• Sell your personal information
• Use your data for advertising
• Share your health information with third parties for their marketing purposes

3. Third-Party Services

We use the following third-party services to operate Tovly:

These services are contractually bound to protect your data and use it only for the purposes we specify.

4. Data Storage and Security

• Your data is stored securely on Supabase infrastructure (hosted on AWS in the United States)
• All data is encrypted in transit (TLS/HTTPS) and at rest
• We use row-level security to ensure you can only access your own data
• We do not store passwords—authentication is handled via secure magic links or Sign in with Apple

5. Data Retention

• We retain your data for as long as your account is active
• You can delete your account at any time (Settings → Delete Account), which permanently removes all your data from our servers
• Cached analysis data is automatically deleted after 30 days

6. Your Rights

You have the right to:

• Access: View all your data within the App
• Correct: Update your profile information at any time
• Delete: Permanently delete your account and all associated data
• Opt Out: Disable notifications in your device settings

To exercise these rights, use the in-app settings or contact us at support@gettovly.com.

7. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to Know: You can request details about the personal information we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so this right does not apply
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To make a request, contact us at support@gettovly.com.

8. Children's Privacy

Tovly is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@gettovly.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: support@gettovly.com
• Website: https://gettovly.com