Tomyo | Privacy Policy

1. Introduction

Tomyo ("we", "our", "us") respects your privacy and is committed to protecting users' personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use the Tomyo website and mobile app.

By using our service, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

2.1. Contact information

Email: the email address used to create and manage your account.
Username: the name or nickname you provide in your profile, if any.

2.2. Identifiers

User ID: a unique identifier for your user account in our system.
Device ID: a mobile-device identifier where required by the platform.
IP address: used for security, diagnostics, and abuse prevention.

2.3. User content

Learning data: vocabulary, progress, answers, exercises, journal entries, and other materials related to learning.
Quotes, notes, and reviews: text content that you create in the app.
Collections and library: information about books, collections, tags, and reading statuses.
Progress: learning history, review metrics, journal data, and user settings.

2.4. Usage and diagnostic data

Technical data: browser type, device, operating system, and app version.
Usage data: statistics about how service features are used, learning events, and general activity metrics.
Error data: information about errors and failures used to improve service stability.
Notification data: technical identifiers needed to deliver notifications if you enable them in the app or device settings.

2.5. Data from third parties

External sign-in providers: email address, profile name, and related identifiers if you choose to sign in with Google, Apple, or Yandex.
Book information services: publicly available information such as covers, descriptions, and authors.

3. Purposes and Legal Bases for Processing

We process data for the following purposes and legal bases:

3.1. Performance of a contract

Creating and managing your account.
Storing your library, notes, vocabulary, and progress.
Synchronizing data across devices.
Providing app features and related integrations.

3.2. Legitimate interests

Securing the service and preventing fraud or abuse.
Improving functionality and user experience.
Analyzing usage to develop the product.
Providing technical support and diagnostics.

3.3. Consent

Using cookies for authentication and preferences.
Email newsletters: by accepting this Policy and using the service, you agree that we may send informational messages about Tomyo, new features, learning materials, personal learning digests, and reminders to continue learning to the email address you provided. You can unsubscribe from these email newsletters at any time through account settings, by using the unsubscribe link in an email, or by contacting us at sendmail@tomyo.app.
Push notifications: sent only if you allow them in the app or device settings. You can disable notifications entirely or pick specific categories inside the app.

3.4. Legal compliance

Complying with legal obligations.
Responding to lawful requests from public authorities.

4. Data Storage and Security

4.1. Storage infrastructure

Data is stored in secure infrastructure that we use to operate accounts, learning materials, user content, and files.

4.2. Security measures

Secure data transmission.
Restricted access to personal data.
Separation of access to user-owned data.
Use of temporary sessions and authorization mechanisms.
Infrastructure and security-event monitoring.

4.3. Retention periods

Account data: retained while the account is active or as needed to provide the service.
User content: retained until deleted by the user or until account deletion.
Access and security logs: retained for a limited period for diagnostics and security.

5. Sharing Data with Third Parties

We do not sell or rent personal data to third parties. Data may be shared only to the extent necessary to operate the service.

5.1. Service providers

Storage and authentication providers: data storage, account sign-in, synchronization, and access protection.
External sign-in providers: authentication through Google, Apple, or Yandex accounts if you choose that sign-in method.
Book information services: searching for and loading publicly available book information.
Analytics and diagnostics services: usage analysis, error detection, and service stability improvements.
Notification delivery services: delivering push notifications if you enable them in the app or device settings.
Email delivery services: sending service, transactional, informational, and learning-related email messages.

5.2. Legal requirements

We may disclose data if required by law, court order, or another mandatory legal request.

6. User Rights and Data Management

Depending on your jurisdiction, you may have rights to access, correct, export, delete, restrict processing of, or withdraw consent for your data.

6.1. Access and correction

You can update basic account information in the app interface or by request.

6.2. Data export

You can request an export of your data in a machine-readable format by writing to sendmail@tomyo.app.

6.3. Account deletion

You can delete your account and related data in the app or send a request from your registered email address to sendmail@tomyo.app. Detailed instructions and request options are available on the Tomyo Chinese account deletion page.

After deletion is confirmed, the account and associated user data will be deleted.
Some anonymized or limited technical records may be retained for security, diagnostics, payment accounting, or legal compliance.

6.4. Managing email newsletters

You can manage email messages from Tomyo. Service emails that are necessary for account operation, security, access recovery, support, and payments may be sent regardless of whether you subscribe to informational newsletters.

Informational emails, learning digests, and reactivation emails may be sent as part of using the service and accepting this Policy. You can opt out of these emails through account settings, by using the unsubscribe link in an email, or by writing to sendmail@tomyo.app.

7. Cookies and Similar Technologies

We use cookies and similar mechanisms for authentication, saving preferences, ensuring that the website works correctly, and, with your consent on public landing pages, analytics.

Necessary cookies: required for sign-in, security, session storage, and core functionality.
Functional cookies: help save language, interface settings, and the fact that you accepted the cookie notice.
Analytics cookies: are used to measure traffic and improve the service. These may include Yandex Metrica, PostHog, the Mail.ru counter, and Tomyo internal visitor tracking.

Acceptance of the cookie notice is stored locally in your browser. If you clear cookies or site data, the notice may appear again.

8. International Data Transfers

Data may be processed on servers outside your country of residence. In particular:

analytics, diagnostics, and notification delivery services;
data storage, authentication, and user-file processing services;
email delivery and user-support services.

9. Children and Privacy

The service is not intended for children under 13 years old, or another minimum age set by applicable law. If you believe a child has provided us with data without proper consent, contact us at sendmail@tomyo.app.

10. Changes to This Policy

We may update this Privacy Policy. If changes are material, we will try to notify users through the website, app, or email.

11. Contact Information

If you have questions about privacy or data processing, contact us:

Email: sendmail@tomyo.app
Official website: https://tomyo.app
Privacy Policy: https://tomyo.app/en/privacy
Terms of Service: https://tomyo.app/terms

We try to respond to requests within a reasonable time.