The short version
Tovi is a five-minute walking companion. We use the minimum information needed to keep your walking profile and walks working. We do not sell personal information, run behavioural advertising, or collect precise location or health data.
Information Tovi collects
Walking profile: a randomly generated profile identifier, your generated or chosen walking name, Mochi avatar, daily goal, and an optional profile photo you choose to upload.
Walk activity: the route you choose, start and finish times, credited duration, local calendar day, completion status, and accumulated walk totals.
Passkey information, only if you choose it: a credential identifier, public key, usage counter, device type, and backup state. Tovi never receives your fingerprint, Face ID data, or private key.
Support information: anything you choose to send when contacting the developer for help, access, correction, or deletion.
Basic connection and security records processed by our hosting provider when the app or website contacts Tovi’s service.
Permissions stay purposeful
Photos: used only when you choose a profile photo. Tovi uploads the edited photo you approve; it does not scan your library.
Motion: used on your device to notice a deliberate shake while Mochi is waiting, so you can change the walk. Motion samples are not stored or uploaded.
Notifications: used only if you enable a daily Mochi reminder. The reminder and its time are scheduled on your device; Tovi does not register a push-notification token for this feature.
Tovi does not request precise location, contacts, camera, or microphone access.
How we use information
Provide an anonymous walking profile without requiring an email address or password.
Sync completed walks, goals, profile choices, and totals across devices when you use a Passkey.
Prevent duplicate or implausible walk credits and keep the service secure and reliable.
Show routes, music, Mochi content, reminders, and your walking progress.
Respond to support, privacy, or safety requests and comply with applicable law.
Leaderboard visibility
After a completed walk, your walking name, selected avatar or uploaded profile photo, rank, and all-time credited walking time may appear to other Tovi users on the leaderboard. Do not use your real name or a recognisable photo if you do not want that information visible there.
Who processes information
Cloudflare provides Tovi’s hosting, database, file storage, content delivery, and network security. Information may therefore be processed in countries where Cloudflare operates. Service providers may use information only to provide and protect Tovi and must apply protections consistent with this statement. We may also disclose information when required by law or necessary to protect people, rights, or the service.
We do not sell or rent personal information, and we do not share it with advertising networks or data brokers.
Your choices and rights
You can use a Mochi avatar instead of uploading a photo and can choose not to add a Passkey or enable reminders.
You can change your walking name, avatar, photo, and daily goal in Tovi. You can turn notifications or motion access off in system settings.
You may ask for access to, correction of, or deletion of information connected to your walking profile through the support contact below.
Deleting the app removes local settings and access from that device, but does not by itself delete a profile or walks already synced to Tovi. Ask the developer to delete the synced profile if you want it removed.
If you are in New Zealand, you may also raise a concern with the Office of the Privacy Commissioner.
Retention and security
We keep profile and walk information while it is needed to provide Tovi, maintain the leaderboard, or meet security and legal obligations. When a valid deletion request is completed, we delete or de-identify the connected profile information unless retention is required by law. Short-lived Passkey challenges expire automatically.
Tovi uses encrypted connections, hashed anonymous session tokens on the server, platform-protected Passkeys, and access controls. No service can guarantee absolute security, but we limit collection and use safeguards appropriate to the information involved.
The website
The Tovi website does not use advertising trackers, behavioural analytics, or marketing cookies. Cloudflare still processes ordinary request information, such as IP address, time, requested page, and browser or device details, to deliver and protect the site.
Children
Tovi is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact the developer so it can be reviewed and removed.
Changes to this statement
We may update this statement when Tovi’s features, providers, or legal obligations change. The effective date above will change, and material changes will be communicated in the app or through the distribution channel when appropriate.