Privacy Policy
Last updated: September 9, 2026
Toilio helps you find the nearest toilet, fast. We collect as little as possible to make that work.
What we collect
Location — used on your device to show nearby toilets, compute walking distances, and (if you add a toilet) place the pin. Your precise, continuous location is never stored on our servers. When you fetch nearby toilets, the map region you're looking at is sent to our server to answer the query and is not retained as a movement history.
Contributions — toilets you add, confirmations, cleanliness ratings, door codes, tips, votes, and flags. These are stored with a random account identifier and shown to other users anonymously. Tips are moderated automatically before or shortly after publication.
Account — by default you are anonymous: a random identifier with no name, email, or password. If you choose Sign in with Apple, we store the Apple identifier link so your XP, badges, and Plus time can follow you to a new device. We do not receive or store your email address unless Apple shares it, and we do not use it.
Purchases — subscriptions are processed by Apple. We store an anonymized transaction reference and expiry date to unlock Plus. We never see your payment details.
Usage events — anonymous product events (for example "urgency button tapped", "tip posted") tied to the same random identifier, used to improve the app. No advertising identifiers, no cross-app tracking, no data sale.
Translations & moderation — tip text is sent to Anthropic's Claude API to moderate content and to translate tips between languages. Tip text carries no account information when sent.
What we don't do
- No selling or sharing of personal data with data brokers.
- No advertising identifiers or cross-app tracking (no ATT prompt needed).
- No movement history, no background location.
Deleting your account
Profile → Delete account. Deletion is immediate: your level, XP, badges, Plus time, sign-in link, and analytics identifier are erased. Community contributions (toilets, codes, tips) are kept anonymized — they help everyone and are no longer linked to you. Apple subscriptions must be cancelled separately in Settings › Apple ID › Subscriptions.
Data location & retention
Data is stored with Supabase (hosted on AWS, Tokyo region). Contributions persist until flagged, removed, or your account deletion anonymizes them. Analytics events are retained for at most 24 months.
Contact
Questions or requests: support@toilio.app
We'll update this policy as the app evolves; material changes will be noted in the app.