This Privacy Policy explains what information the ToastyAI mobile application and related services (together, the “Service”) collect, how that information is used, and the choices you have. The Service is provided by ToastyAI (“ToastyAI,” “we,” “us,” or “our”). By creating an account or using the Service, you agree to the practices described here. This Policy works alongside our Terms of Use & End User License Agreement.
1. Information We Collect
We collect only the information needed to run a messaging and calling service and to provide the in-app AI assistant.
Account information
- Your name and email address.
- An optional phone number.
- An auto-generated friend code that lets others add you.
- An optional profile picture.
Messages and shared media
The messages you send and the media (images and other files) you share are stored on our servers so they can be delivered to the people you are communicating with and synchronized across your own devices.
Push notification tokens
To notify you of new messages and incoming calls, the app registers device push tokens with the Apple Push Notification service (APNs) — one token for message notifications and one (PushKit/VoIP) for incoming calls. These tokens are stored per-device so that notifications and calls reach the right device.
Call signaling and connection data
To connect voice and video calls, the app exchanges signaling and connection (ICE) information between participants. Call media is sent peer-to-peer where possible and may be relayed through a TURN server when a direct connection cannot be established.
Personalization profile
If you complete the onboarding questionnaire, your answers (such as interests, favorite teams, home city, and preferred tone) are stored locally on your device — they are not kept as a profile field on our servers. When you chat with the AI assistant, a short summary of these answers is included with your message so the assistant can respond in context.
AI assistant interactions
When you send a message to the in-app AI assistant (“Saltimus”), that message is processed by our AI backend to generate a reply. If you send an image to the assistant, the image may be downloaded to the assistant’s processing workspace so it can be analyzed.
2. How We Use Information
We use the information described above to:
- create and maintain your account and your friend connections;
- deliver your messages and shared media, and sync them across your devices;
- connect and relay your voice and video calls;
- send push notifications for new messages and incoming calls;
- generate responses from the AI assistant, informed by the on-device personalization summary you choose to share with it;
- maintain the security and integrity of the Service and respond to support requests;
- comply with applicable law.
3. How Information Is Shared
We do not sell your personal information, and we do not share it with third-party advertisers. The app contains no third-party advertising SDK and no third-party analytics SDK. Your information is shared only in these limited ways:
- With people you communicate with. Messages, media, and call content are shared with the participants of your conversations and calls, which is the point of the Service.
- With infrastructure and processors we rely on. We use Apple for authentication (Sign in with Apple) and for push notifications (APNs). Call media that cannot connect directly may pass through a TURN relay server. These providers process the data solely to help us deliver the Service.
- As legally required. We may disclose information if we are required to do so by law, or in response to a valid legal request, or to protect the rights, safety, or security of our users, the public, or the Service.
4. Data Storage & Security
The Service runs on a self-hosted backend operated by ToastyAI (its public edge is api.toastyai.net). Your data is not handed to a third-party data broker; it lives on infrastructure we operate.
- Data is encrypted in transit using TLS/HTTPS.
- Access to stored data is restricted by database access controls (row-level security), so accounts can only reach the data they are permitted to see.
- End-to-end encryption for messages is under active development. Until it is available and announced, you should not assume that messages are end-to-end encrypted; they are protected in transit and by the access controls described above.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
5. Push Notifications
The app uses Apple’s Push Notification service (APNs) directly to deliver message alerts and to ring your device for incoming calls; it does not use Firebase or any Google push service. To do this, we store the push tokens your device provides, associated with your account and device. You can turn off notifications at any time in your device settings, though doing so may prevent you from being alerted to new messages or incoming calls.
6. The AI Assistant
ToastyAI includes an in-app AI assistant (“Saltimus”) that can take part in a conversation as a participant. When you send it a message, the content of that message is processed by our AI backend to produce a reply. If you have completed the personalization questionnaire, a short summary of your on-device answers is included with your message so the assistant can tailor its response; that summary stays on your device except for the summary sent along with a given message. Images you send to the assistant may be downloaded to its processing workspace to be analyzed. If you prefer not to share personal context with the assistant, you can leave the personalization answers blank or clear them from your Profile.
7. Your Choices & Rights
- Edit your personalization. You can review, update, or clear your personalization answers at any time from your Profile.
- Update your account. You can change your account details, including your profile picture, from your Profile.
- Delete your account. The app provides self-service account deletion at Profile → Delete Account. Deleting your account removes your profile, your messages and chat data, your profile picture, and your authentication record from our servers.
- Manage notifications. You can control push notifications through your device settings.
8. Children’s Privacy
The Service is not directed to children under 13, and you must be at least 13 years old to use it. If you are under the age of majority where you live, you may use the Service only with the involvement and consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can remove it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service where practicable. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
10. Governing Law
This Policy and any dispute relating to it are governed by the laws of the State of Texas, USA, without regard to its conflict-of-laws rules, except where prohibited by applicable law.
11. Contact
Questions about this Privacy Policy or your data? Contact us at support@toastyai.net.