Privacy

Privacy Policy

This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the TOLOCA mobile application and related services.

1. Information We Collect

Account Information

When you create an account, we may collect your name or nickname, email address, phone number, profile photo, user role (Client or Specialist), and languages.

Location Information

TOLOCA collects location-related information to enable marketplace features such as showing nearby specialists and service areas. This includes city or area selected by the user, approximate location voluntarily provided, and addresses added by the user.

TOLOCA does not request or use precise GPS location permissions. Location is based on user-selected cities, areas, or addresses provided voluntarily.

User Content

Users may create content including listings, service descriptions, tasks, rental offers, chat messages, reviews, ratings, and uploaded photos.

Technical Information

Depending on the app version and enabled services, we may collect technical information for system stability and performance, such as device type, operating system version, app version, crash diagnostics, usage information, and Firebase-generated identifiers.

Moderation & Safety Data

When users submit reports about other users or content, we collect the report details including the reason, description, and references to the reported content.

2. How We Use Information

We use collected information to provide marketplace functionality, create and manage accounts, enable secure in-app chats, improve platform safety and moderation, prevent fraud and abuse, monitor app performance, provide customer support, and send service notifications.

3. Chat Moderation & Safety

TOLOCA includes moderation and safety systems to reduce spam, fraud, harassment, and unsafe behavior. This may include content filtering, spam prevention, user report processing, blocking functionality, and account restrictions.

4. Infrastructure & Third-Party Services

TOLOCA uses trusted third-party services:

• Firebase Authentication — identity and login. Methods may include Google Sign-In, Apple Sign-In when available on iOS, and phone verification, depending on platform and app version.
• Cloud Firestore — application database
• Firebase Storage — file and media storage
• Cloud Functions — backend processing
• Firebase Cloud Messaging — push notifications

Additional Firebase services (Crashlytics, Analytics) may be enabled in future versions.

TOLOCA does not use advertising services, tracking pixels, or data brokers.

5. Data Sharing

TOLOCA does not sell personal information. We may share limited information with other users as part of marketplace functionality, with infrastructure providers, when required by law, or to protect safety and platform security.

6. User Content Visibility

Some profile and marketplace content is visible to other users, including public profile information, listings, and reviews. Users should avoid sharing sensitive personal information in public areas.

7. Data Retention

We retain personal information only as long as necessary to provide services, maintain safety, comply with legal obligations, and resolve disputes.

When you delete your account, your personal profile data, credentials, and private preferences are permanently removed. Some data may be retained or anonymized:

• Reviews may be displayed as “Deleted User” with your photo removed
• Completed transaction records may be retained with personal details removed. These records are designed to store internal identifiers rather than profile fields, though user-entered descriptions may contain user-provided information.
• Chat messages may remain visible to the other participant
• Reports, moderation records, and safety logs may be retained
• Deletion request records may be retained as audit trails

Some retained records may keep internal identifiers for audit, transaction integrity, or safety purposes, but the deleted user’s profile and authentication account are removed and no longer resolve to an active account.

8. Account and Data Deletion

You may delete your account at any time through the app: Settings → Privacy & Data → Delete My Account. If you cannot access the app, email support@toloca.app.

Deletion removes both Client and Specialist profiles (account-wide). If you have active obligations, deletion is blocked until they are resolved. In-app requests are processed within minutes; email requests within 7 business days.

See Delete Your Account for full details.

9. Children’s Privacy

TOLOCA is not intended for children under 18. We do not knowingly collect personal information from children.

10. Security

We use reasonable technical and organizational measures to protect user information. No platform can guarantee complete security.

11. International Data Transfers

TOLOCA uses cloud infrastructure that may process information in multiple countries. By using the platform, you understand information may be transferred outside your country of residence.

12. Your Rights

Under the Data Privacy Act of 2012 (RA 10173), you may have the right to be informed about data processing, request access to personal data, request correction, object to certain processing, and request deletion or anonymization. Submit requests via support@toloca.app.

13. Changes

We may update this policy. Updated versions may be posted in the app or through official channels. Continued use constitutes acceptance.

14. Contact

TOLOCA Support
Email: support@toloca.app