Toffee privacy policy

Last updated

Toffee keeps your pets, their routines, their history and their weights on your iPhone. None of it is sent anywhere, unless you turn on iCloud sync — and then it goes only to your own iCloud account.

In short

  • No account. Toffee asks for no name, email or phone number.
  • Your iPhone, and your own iCloud. Everything stays on your iPhone, and in your own iCloud if you turn on sync. The developer of Toffee cannot read it.
  • One thing is collected: if you buy Toffee Plus, an anonymous record of the purchase. Nothing else is, nothing tracks you, and there are no ads.
  • A household sees what it shares. Everyone you invite can see and edit every pet.
  • You can delete any of it, whenever you like.

What is collected

Purchases — Purchase History. If you buy Toffee Plus, a record of that purchase is collected. It is used for App Functionality and Analytics. It is not linked to your identity, and it is not used for tracking.

This is the same statement as the app’s App Store privacy details, in the same words.

How purchases work

Payment is handled entirely by Apple; Toffee never sees your payment details. Toffee uses RevenueCat to confirm what you have bought, identified only by a random ID created on your device. Toffee has no accounts and asks for no name, email or phone number, so that ID is not tied to you.

iCloud sync

iCloud sync is part of Toffee Plus, and it is off until you turn it on in Settings. When it is on, Toffee keeps a copy of your pets, their routines, their history, their weights and your vet’s details in the private iCloud database of your own Apple Account, so your other devices signed in to it show the same household.

  • The developer of Toffee cannot read it. It is stored in your iCloud account, not on any server of ours, and iCloud gives an app’s developer no access to the private data of the people who use the app.
  • It is encrypted. Apple encrypts everything Toffee syncs in transit and on its servers. Pet notes and your vet’s name, phone number, address and notes are also encrypted on your iPhone before they are sent. With Advanced Data Protection for iCloud turned on, only your own devices hold the key to those fields.
  • Pet photos are not kept. A photo you pick so Toffee can suggest a mascot is checked on your iPhone and deleted as soon as the check is done. Nothing of it is stored or synced.
  • Turning sync off deletes nothing. Your data stays on this iPhone and in iCloud. You can delete Toffee’s copy in iCloud from your iCloud storage in the Settings app.

Sharing your household

With Toffee Plus you can invite people to your household. Nothing is shared until you invite someone, and you choose who, through Apple’s own sharing sheet.

  • Everyone you invite can see and edit every pet, including pet notes and your vet’s details, and every task, log and weight. Only you, as the household’s owner, can delete a pet.
  • The household stays in your iCloud. Sharing uses Apple’s iCloud sharing: the people you invite reach your household’s copy in your private iCloud database, and it counts against your iCloud storage. The developer of Toffee still cannot read any of it.
  • What the household sees of you is the name you choose when you invite or join, and which logs you made. Toffee keeps no email address or phone number for anyone; Apple’s sharing sheet handles the invitation.
  • End-to-end encryption needs everyone. Pet notes and your vet’s details are end-to-end encrypted only when everyone in the household has Advanced Data Protection for iCloud turned on. Otherwise Apple encrypts them, as it does everything else Toffee syncs.
  • Leaving, or being removed, deletes nothing. Everything already on your iPhone stays there as your own copy; it just stops syncing. When the owner stops sharing, each person keeps their copy the same way.

What is not collected

Nothing else. Pet names, tasks, logs, weights, vet details and settings stay on your device, in your own iCloud account if you turn on iCloud sync, and with the people you share your household with if you invite anyone. Toffee does not use advertising, and does not track you across apps or websites.

Exporting and deleting your data

  • There is no full export yet — no spreadsheet or backup file. With Toffee Plus, a pet’s vet report is a PDF of their care over a period, which you can save or share.
  • To delete a pet, open it from the Pets tab, choose Archive, then Delete permanently. Its tasks, logs and weights go with it. With iCloud sync on, they are removed from iCloud and your other devices too. In a shared household only the owner can delete a pet.
  • To delete everything on your iPhone, delete the app.
  • To delete Toffee’s copy in iCloud, open the Settings app, tap your name, then iCloud, and choose Toffee in your iCloud storage. If you own a shared household, that ends it: everyone keeps what is already on their iPhone.

Contact

Questions about this policy: hello@toffee.example