English version

Privacy Policy

Effective and last updated: October 11, 2026.

This policy covers the Toti / Ginkgo iPhone and iPad app and this website. The Toti developer provides notes, tasks, projects and collaboration features. Contact [email protected] for privacy questions or data requests.

Information we process

We process the email address or phone number, account identifier, profile and verification status you provide; notes, tasks, projects, messages, sharing relationships and files you create or submit; preferences and any third-party AI service configuration or credentials you choose to enter; necessary device/session identifiers, request IP information, timestamps and errors for operation and security; and information you include in support emails. Firebase Authentication / Identity Platform handles email/password and phone verification. Our business backend receives verified identity credentials and creates app sessions; it does not receive your Firebase sign-in password.

Use and sharing

Information is used to provide authentication, content storage and synchronization, collaboration, file access, settings and support, and to protect the service. We do not sell personal information or use it for cross-app advertising tracking. Content you share is made available to other participants according to your actions and access permissions.

Google Cloud provides online computing and storage, Firebase Authentication / Identity Platform provides identity verification, and Google Cloud Storage stores attachments. Providers process necessary information under their own terms and policies: Firebase privacy and security and the Google Cloud Privacy Notice. If you enable or call a third-party AI service you configure, its provider may process the relevant configuration or request content. Review that provider's policy before use.

Storage and security

The current main business server is in Belgium and attachments are stored in Google Cloud's European region. Identity and other provider services may process necessary information in other locations under their service arrangements. We use HTTPS, session protection and access controls. No transmission or storage method can guarantee absolute security.

Device and offline data

Guest exploration and offline test content may remain on your device. The app may cache authorized online content and save session credentials in the system Keychain. Changing to online mode does not automatically upload offline content as collaboration data. Uninstalling may remove some local content, but does not automatically delete the server account or guarantee removal of Keychain credentials.

Retention and your requests

Accounts and online content are retained as needed to provide the service. Use available app controls or contact us to request access, correction, export, or deletion of your personal information and account. We may verify your identity. Copies may take longer to remove for disaster recovery, security or applicable obligations. Daily database backups currently have a 30-day retention period, followed by 7 days of cloud soft-delete protection. Backups are not displayed as normal service content. Contact us for the applicable cleanup status of migration, recovery or other provider-held copies.

Other information

The service is intended for general productivity and collaboration. Guardians may contact us concerning a minor's personal information. This website does not use advertising, third-party analytics scripts or tracking cookies. Email providers process information needed to deliver support messages. We may update this policy as features and services change and will show the update date on this page.