Tovli Privacy Policy

Information We Collect

Depending on how you use Tovli, we collect:

• Account information: your Firebase user ID and the name, email address, profile photo, and sign-in provider supplied by Google, Apple, or email/password registration.
• Precise location: your device location when you grant permission, the map area you view, and the exact coordinates you choose for a report.
• User content: report photos, report category, description, language, location, and area.
• Support requests: the name you optionally provide, your email address, and the message you submit through the contact form.
• Interactions: votes, reports of abusive content, blocked accounts, and moderation-related records.
• App and security data: app version, platform, App Check attestation, device or installation identifiers used by Firebase, and IP address or similar network information processed by our service providers.
• Usage data: events such as opening the app, starting or submitting a report, selecting a map marker, signing in, or sharing a report. We do not use an advertising identifier.

Location permission is optional, but map centering may be less convenient without it. A signed-in account using Google, Apple, or email/password and a photo are required to submit a report.

How We Use Information

We use information to:

• authenticate accounts and protect account actions;
• show nearby reports, resolve report addresses, and operate map features;
• store, review, approve, display, update, and remove community reports;
• process votes, content reports, blocked-account preferences, and account deletion;
• prevent spam, fraud, automated abuse, and security incidents;
• understand feature reliability and improve the service; and
• respond to questions and feedback sent through the contact form.

Public report content, including its photo, description, category, area, and precise report location, is visible to other Tovli users. Your email address, sign-in identity, and internal user ID are not displayed with public reports.

Accounts and Protected Actions

Report creation, voting, content reporting, blocking, and account deletion require authentication. Tovli currently supports Google, Apple, and email/password sign-in. Authentication credentials are handled by the sign-in providers and Firebase Authentication; Tovli does not receive your Google or Apple password.

You are responsible for maintaining the security of your account and credentials.

You are responsible for all activity conducted through your account.

Moderation and Abuse Prevention

New reports appear on the public map immediately after submission. We review reports afterward and may hide or remove content. Tovli uses manual moderation and technical abuse-prevention controls, including Firebase App Check and rate or access restrictions.

Uploaded images and reports may be:

• Delayed
• Hidden
• Restricted
• Reviewed manually
• Removed

We reserve the right to suspend or remove content or accounts at any time.

Prohibited Content

Users may not upload, submit, or distribute content that:

• Is false or misleading
• Is defamatory
• Is abusive or harassing
• Contains nudity or pornographic material
• Contains graphic violence
• Contains hate speech
• Violates privacy rights
• Violates intellectual property rights
• Violates applicable law
• Contains spam or malicious content

We reserve the right to remove content at our sole discretion.

Service Providers and Sharing

We use service providers to operate Tovli, including:

• Google Firebase: Authentication, Firestore, Cloud Storage, Cloud Functions, App Check, and Analytics.
• Google Maps Platform: maps and address geocoding.
• Google and Apple: account sign-in.
• Resend: delivery of contact-form messages to the Tovli support inbox.
• WhatsApp or your chosen sharing app: only when you choose to share a report externally.

These providers process information on our behalf under their own terms and privacy commitments. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer. We do not sell personal information and do not use it for third-party advertising.

Retention and Deletion

Account and report data is kept while your account is active and as needed to operate and protect Tovli. Rejected or archived report photos are deleted from active storage. Limited security, legal, or backup records may be retained only as necessary and are removed or anonymized when no longer needed.

You can delete your account and associated reports, report photos, votes, flags, and blocked-account records in the app under Settings. You can also request deletion of specific data by following the instructions on the account and data deletion page.

Contact Requests

When you submit the contact form, we send your name (if provided), email address, and message to our support inbox through Resend so we can respond. Support correspondence is kept as needed to handle your request and related service or legal obligations.

Your Choices

• Use device settings to grant or withdraw location permission.
• Choose whether to share a report outside Tovli.
• Block another report creator or report content for review.
• Sign out or delete your account from Tovli Settings.
• Contact us to request access, correction, or deletion where applicable.

Security and International Processing

Tovli uses access controls, authenticated requests, encrypted network connections, platform attestation, and restricted storage paths. No security measure is perfect. Firebase and other providers may process information in countries outside your own, subject to their legal safeguards.

Children

Tovli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

External Sharing

The Platform may allow users to share reports externally through WhatsApp or other services.

Users remain solely responsible for:

• Recipients
• Messages sent
• Shared images
• Shared content
• Communications with municipalities or third parties

Nature of the Platform

All information presented on the Platform is provided for informational and community purposes only.

Reports, statuses, locations, descriptions, images, and user interactions are community-generated and may be inaccurate, incomplete, outdated, misleading, or incorrect.

The Platform is not a government authority, municipality, emergency service, public safety authority, certified inspection system, or official municipal reporting platform.

Changes

We may update this policy as the service changes. The date above identifies the current version.

Material changes will be communicated in the app or on this page when appropriate.

Contact

For questions regarding these statements, users may contact:

support@tovli.app