Privacy Policy

What changed in Version 1.4. We added disclosure, not new data use. Sections 4.2 and 7 now name the company that provides our AI content moderation — Anthropic — and explain what it receives and what it is not allowed to do with it. Nothing about what we collect, share, or sell has changed.

What changed in Version 1.3. We added disclosure, not new data use. Section 5 now states plainly that TOCTalk administrators and moderators can see the account behind anonymous content, and Section 4.3 now says that we cannot prevent a manager from signing up as an ordinary member. Nothing about what we collect, share, or sell has changed.

TOCTalk was built by an employee, for employees — an independent place to connect with the people you work alongside. That independence is the whole point, and it shapes how we handle your information. This policy explains, in plain language, what we collect, how we use it, and the promises we hold ourselves to.

1.1 Information you provide:

• Account information: email address, username, password, display name, phone number, and birthdate
• Profile information: avatar, bio, and any details you choose to add
• Your content: posts, comments, messages, events, marketplace listings, and memorial posts
• Communications: messages you send to us or to other members
• Feedback: feedback you submit in the app is stored (with your account, category, app version, and platform) so we can track issues and ideas over time, and a copy is emailed to the TOCTalk team through our email provider. Feedback is not shown to other members.
• Invites and referrals: every member has a personal invite code. When someone joins using your code, we record that connection and award you reputation points. We do not share your invite history with other members beyond the points it contributes to your public score.

1.2 Information collected automatically:

• Usage information: features used, content viewed, and interactions — used in aggregate to improve the app
• Device information: device type, operating system, app version, IP address, and device identifiers
• Location: we do not currently collect precise location, and location-based features are disabled. Your IP address, received as a routine part of serving requests, may indicate an approximate region. If we enable location features in the future, we will update this policy and ask for your device's permission first
• Log data: access times, actions taken, and crash/error reports

1.3 Information from third parties:

We do not currently receive information about you from third-party sign-in services or analytics providers. If that changes, we will update this policy.

We use your information for the following purposes:

TOCTalk may show advertising to help keep the app running and independent. Our approach is deliberately different from typical social media:

• We advertise to the community, not to you personally. Ads are matched to the community as a whole, not to an individual profile built from your behavior.
• We do not sell your personal information to advertisers, and we do not let advertisers track you across other apps or the web through us.
• We do not build individual advertising profiles or use your private messages to decide which ads you see.

In short: advertisers can reach the TOCTalk community; they cannot buy access to you.

4.1 With other members:

• Your profile (username, display name, avatar, bio) is visible to other members
• Your posts, comments, and events are visible according to your settings
• Your reputation score, leaderboard rank, and earned level — computed from your activity — are visible to other members. Your online status is visible when you enable it in settings
• Anonymous posts are not tied to your public profile, and your name is not shown on them to other members (see Section 5 for what our moderators can see)

4.2 With service providers who help us run the app, under confidentiality obligations:

• Cloud hosting and database (e.g., Supabase)
• Content moderation — the text and images you submit as posts, comments, events, listings, and memorials are sent to Anthropic (anthropic.com), the AI company whose Claude models review content against our community rules before it is published, alongside our own human review. Anthropic processes this content solely to provide moderation for us and is contractually barred from using it for anything else — see Section 7
• Notification and email delivery
• Aggregate analytics

4.3 Not with your employer or management. We do not provide your employer, management, or HR with your account, your content, your messages, or any monitoring tool. There is no company login, no admin view for management, and no data feed to an employer — none of it was built. TOCTalk is independent, full stop.

What we cannot do is control who joins. Signing up requires an email address and nothing else, so anyone — including someone who manages you — can create an ordinary member account and will see exactly what any member sees. Treat anything you post publicly accordingly. What we will not do is confirm, hand over, or sell your identity, your anonymity, or your content to an employer.

4.4 For legal reasons, only when compelled. We will disclose information to law enforcement or other authorities only when we are legally required to — such as a valid subpoena, warrant, or court order — or where we reasonably believe it is necessary to prevent imminent harm. We are not in the business of volunteering your data.

4.5 Business transfers. If TOCTalk is ever involved in a merger, acquisition, or sale of assets, your information may transfer to the successor, which will remain bound by this policy or a policy at least as protective.

4.6 With your consent, for anything not described above.

TOCTalk lets you post anonymously when you'd rather not attach your name. Anonymous content is not shown against your public profile, and we do not show your name on it to other members — including a manager or coworker who has signed up as an ordinary member.

5.1 What our moderators can see. TOCTalk administrators and moderators can view the account behind anonymous content — its display name, username, and email address. This is not limited to content someone has reported: our moderators can identify the author of any anonymous post. We disclose this because it is the honest limit of what anonymity here means. We could not enforce the community rules against an account we cannot identify.

5.2 What we do with it. Access is restricted to accounts holding our administrator or moderator role. We use what we see only to moderate content and enforce the community rules. We do not share it with your employer, with management, or with HR — not on request, not ever — and we do not sell it. The only exception is a genuine legal compulsion, as described in Section 4.4.

Anonymity is a feature we protect — but it isn't a shield for breaking the law or our community rules. If content is illegal or seriously harmful, or if we are legally compelled, the underlying account may be identified to others as described in Section 4.4.

Our memorial feature lets members share an obituary for a coworker who has passed away — their name, photo, how the crew knew them, and service details. If you post a memorial, you are responsible for the accuracy and appropriateness of what you share. Family members or representatives of the deceased may request edits or removal at any time by contacting support@toctalk.app, and we will honor those requests promptly.

We use AI and automated processing to:

• Moderate content: detect prohibited content, spam, and rule violations
• Improve the experience: surface relevant content and events in aggregate
• Keep people safe: flag potentially harmful behavior for review

Our AI content moderation is provided by Anthropic, whose Claude models review the text and images you submit before they are posted. What Anthropic receives is the content itself — not your name, username, email address, or any account identifier — and whether a post was made anonymously is not part of what is sent. Anthropic processes this content on our behalf solely to operate moderation for TOCTalk; per its commercial terms, API content is not used to train its models.

We do not currently use AI for personalization. AI content moderation reviews text and images before they are posted; it processes your content solely to operate the app, cannot be disabled, and is never used to track you or build advertising profiles.

8.1 In-app controls: update your information, manage notifications, and adjust privacy settings any time.

8.2 Your rights:

• Access a copy of your personal information
• Correct inaccurate information
• Delete your account and associated data
• Port your data in a portable format
• Opt out of certain processing
• Object to processing in certain circumstances

To exercise any of these, email privacy@toctalk.app.

• Account deletion is immediate and permanent: deleting your account in the app removes your account and associated content right away, and it cannot be recovered
• Posts and content: kept until you delete them or delete your account
• Messages: kept until deleted by a participant
• Log data: up to 90 days for operational purposes
• Legal and safety records: feedback you submitted and records we must keep for legal or safety reasons (for example, moderation logs) may be retained after deletion, and longer where required by law

We use reasonable measures to protect your information, including encryption in transit (TLS/SSL), encryption of sensitive data at rest, access controls, and ongoing review. No system is perfectly secure, so while we work hard to protect your data, we can't guarantee absolute security.

TOCTalk is intended for adults 18 and older, consistent with its App Store rating. You must be at least 18 to create an account. We do not knowingly collect information from anyone under 18; if you believe we have, contact privacy@toctalk.app and we will delete it.

We do not currently collect or use device location, and location-based features are disabled. If we introduce location features in the future, they will be optional, we will ask for your device's permission first, and this policy will be updated before they launch.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand aggregate usage and performance. You can control these through your device or browser settings.

Your information may be processed in the United States and other countries, which may have different data-protection laws. By using TOCTalk, you consent to these transfers.

California residents have the right to know what personal information we collect, to request deletion, to opt out of the "sale" or "sharing" of personal information (we do not sell your personal information), and to non-discrimination for exercising these rights. To make a request, email privacy@toctalk.app with "California Privacy Rights" in the subject line.

If you are in the European Economic Area or the UK, you have rights to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent and lodge a complaint with a supervisory authority. Email privacy@toctalk.app to exercise these rights.

We may update this policy from time to time. For material changes, we'll post the updated policy in the app and on this page and, where appropriate, notify you directly. Continued use of TOCTalk after changes take effect means you accept the updated policy.

Privacy: privacy@toctalk.app
Support: support@toctalk.app
Website: https://toctalk.app

We aim to respond within 30 days.