Toccata
Privacy

Privacy Policy

Updated September 1, 2026

This policy explains how Qianyu Li processes information when providing Toccata. We do not sell personal information.

1. Information we process

  • Phone number or OAuth account identifiers used for authentication.
  • Profile data, posts, comments, ratings, reports, images and interaction records you provide.
  • Foreground location used on-device for map centring and nearby distance; Toccata does not continuously track background location.
  • IP hashes, request metadata, quotas, crash diagnostics and moderation records needed for security and reliability.

2. Purposes

  • Authentication and account security.
  • Map, posting, interaction and moderation features.
  • Abuse prevention, troubleshooting and legal compliance.

3. Providers

Depending on market and feature, Toccata uses Apple Maps, Google Maps or Amap; YouTube or Bilibili; Supabase; Vercel; Aliyun; and Sentry crash reporting. Providers may process requests in their own regions.

4. Retention

Content remains until deleted or moderated. Short-term quota and security records expire according to operational need. Crash reports and moderation logs are retained only as long as needed for diagnosis, safety and legal obligations.

5. Your choices

You may edit your profile, deny location or photo access, block users, report content and request account deletion in the app. Deletion follows the scope and seven-day maximum described in the Terms.

6. Diagnostics

Mobile crash reports use Sentry with default personal-information collection disabled. We do not enable session replay, behavioural analytics or performance tracing in the first release.

7. Contact

Privacy requests: leoqy20110904@gmail.com. Operator: Qianyu Li.

Cross-border processing depends on the selected market and infrastructure location. Contact us before using the service if you need more detail.