Privacy Policy

What we collect

• Account data: your email address, and your name if you sign in with Google.
• Your activity: the habits, streaks, reflections, and notes you create inside Toshva.
• Technical data: basic logs (such as IP address and browser type) needed to run and secure the Service.

How we use it

We use your data only to provide Toshva: to authenticate you, save your progress, show it back to you, and keep the Service secure. We do not sell your personal data.

Service providers

We rely on trusted providers who process data on our behalf:

• Supabase — authentication and database hosting.
• Google — optional sign-in with your Google account.
• Vercel — application hosting and delivery.
• Stripe — payment processing for paid features (when applicable).

Cookies

We use essential cookies to keep you signed in. We do not use advertising or third-party tracking cookies.

Data retention & your rights

We keep your data for as long as your account is active. You may request a copy of your data or its deletion at any time by emailing hello@toshva.com. Depending on where you live, you may have additional rights under laws such as the GDPR.

Security

Data is encrypted in transit, access to your records is restricted by row-level security so only you can read your own data, and we follow least-privilege practices for administrative access. No system is perfectly secure, but we work to protect your information.

Contact

Questions about your privacy? See our Terms of Service or email hello@toshva.com.