Legal

Tomoriva – Privacy Policy

Version: PP-2026-11-v4 · Last updated: 6 November 2026

Summary

• Tomoriva is for adults 18 or older. We ask for your birth year once to check this.
• What you type or say is used only to run your own plan. We never sell it, never use it for ads and never use it to train AI.
• Your plan is saved on your phone and, once you sign in, backed up on our secure server in the EU so it syncs across your devices.
• Kai, the AI guide, works only if you turn it on. It then sends only the text needed for your request to our AI provider, Anthropic.
• A few service providers help us run the app. They are listed in section 5.
• You can download, correct or delete everything in Me → Privacy Centre.

1. Who we are

Tomoriva is provided by Gifson Dsouza, individual developer (trading as Tomoriva), Al Warqa 1, Dubai, United Arab Emirates ("we", "us"). We decide how your personal data is used (we are the "controller"). Contact: [email protected] (privacy) or [email protected] (everything else).

We plan to set up a company that will take over Tomoriva as the provider. When that happens, we will tell you in the app before the change and update this policy.

This policy covers the Tomoriva apps for iPhone, iPad and Android and the website version at tomoriva.app.

2. What we collect

• Account: email address, or your Apple or Google sign-in ID. A password only if you set one; our sign-in provider stores it scrambled and we never see it.
• Age: your birth year (required) to confirm you are 18 or older, show ages on your plan and plan goals by age.
• Your plan: items, goals, savings and amounts you log, checklists, notes, people you add (such as names and birthdays), life roles and family details you choose to add (such as children's first names and birth years), optional profile answers (such as what you do, your aims, an income range), Kai's memory notes, and photos or PDFs you attach.
• Subscription: trial dates, plan, status and store transaction IDs. We never see your card or bank details.
• Invites: if you invite someone or join with an invite, we keep a random code, a link between the two accounts, the date and whether a reward was given. We use it only to give rewards, apply limits and prevent abuse. The code holds no name or email. The inviter sees only how many invites were used, never who joined. If either account is deleted, we delete the link and keep only an unnamed count. To stop misuse of invite codes, we also keep a record of each attempt to enter a code (your account and a scrambled network code that changes daily). It is deleted after 2 days.
• Technical: push token (if you allow notifications), device type, system and app version, a scrambled daily code from your network address to limit abuse, and counts of AI requests (never their text).
• Records: which Terms and Policy you accepted, your consent choices, and support messages.

We do not collect voice recordings, contacts, location, advertising IDs or biometric data. Your phone turns your voice into text; only the text reaches us. If your phone cannot do this itself, we ask first before using Apple's or Google's speech service. In the website version, Chrome voice typing sends audio to Google.

Sensitive details. You may write about health, money, religion or family. We treat everything you add as sensitive and handle such details only with your explicit consent, asked at sign-up.

Other people. If you add family or friends, we use their details only for your reminders and never contact them. Add only what you need.

3. How we use your data

We use your data only to store, sync and back up your plan and send your reminders; check your age; run Kai if you turn it on; manage your trial and subscription; give invite rewards and apply their limits; send sign-in codes and account emails; keep Tomoriva secure; answer you and meet legal duties; and, only if you opt in, send marketing emails or count app usage without your content.

We never sell your data, use it for advertising, track you across other companies' apps or websites, or use your content to train AI models.

Legal bases (EU and UK): contract (running the app, including invite rewards), consent (Kai, sensitive details, optional profile answers, analytics, marketing), legitimate interests (security, abuse prevention including invite limits, details of people you add) and legal obligation (consent and request records). Withdraw consent any time in Me → Privacy Centre.

4. Kai and AI

• Kai works only after you allow AI processing. Without it, you can still use Tomoriva yourself.
• When you use Kai, our server sends only the text needed for that request to Anthropic, with email addresses and long numbers masked. We never send your account name, email, account ID or birth year; Kai sees your age only where a suggestion needs it.
• Life roles: Kai gets the kind of role (for example "parent" or "carer") and your children's ages, never your children's names, unless you type them in your request.
• Files: if you ask Kai to read a photo or PDF, the file is sent and Anthropic can see everything in it. Our server does not keep it.
• Memory: when Kai is on, it saves short notes about you so its help fits you. You can see, edit or delete each note, or switch Memory off, in Privacy Centre.
• We use Anthropic under its commercial terms. It does not train its models on our data, and keeps request data only for a limited time (up to 30 days), or longer only where needed for safety checks or by law.
• Kai can be wrong. Check suggestions before you save them. Kai only suggests; you decide.

5. Service providers

These companies process data for us, only to provide their service and under terms that require them to protect it.

Apple and Google also act under their own privacy policies when you sign in with them, buy through their stores or use their speech services. We may also share data where the law requires, or with a company that takes over Tomoriva, which must keep the same protections; we will tell you first.

6. Where your data goes

Your plan is stored in the EU. Some providers are in the USA, and we are based in the UAE. Where the law requires, we rely on legal safeguards for transfers, such as the EU Standard Contractual Clauses in our providers' data processing terms.

7. How long we keep it

• Your account and plan: until you delete them or your account. Deleted items are removed from our server straight away; backup copies are removed on our provider's regular backup schedule.
• Invites: the code, the link between the two accounts, the date and the reward status, while both accounts exist. If either account is deleted, we delete the link straight away and keep only an unnamed count. Records of attempts to enter an invite code: 2 days.
• Sync deletion records (no content): 90 days.
• Download-my-data file: the link works for 10 minutes; the file is deleted after about 1 hour.
• Scrambled network code: 2 days. AI request counts: 90 days.
• Support emails: 2 years. Privacy request records: 3 years.
• Crash reports and usage statistics, if switched on: 90 days and 12 months.
• Apple and Google keep their own purchase records.

8. Security

We use encryption in transit and on our server, database rules so each account reaches only its own data, private file storage, and optional Face ID or fingerprint unlock (checked by your phone). Your content is never logged or sent to analytics. Notifications and the widget can show item titles; Me → Security → Hide details on lock screen hides them. No system is perfectly secure; if a breach puts you at risk, we tell you and the authorities as the law requires.

9. Your rights and choices

• Download your data: Me → Privacy Centre → Download my data.
• Correct anything by editing it in the app.
• Delete your account in Me → Privacy Centre, or at https://tomoriva.app/delete-account. This deletes your account and everything on our server. It does not cancel a store subscription: cancel that in your App Store or Google Play settings.
• Switch off Kai, Memory, analytics or marketing in Privacy Centre at any time.
• Object, restrict or ask anything else: email [email protected]. We reply within 30 days and may first confirm it is you.
• You may also complain to your data protection authority.

10. Phone permissions

We ask only when you use a feature: microphone and speech (voice), camera, photos and files (attachments you choose), notifications (reminders), Face ID or fingerprint (app lock), phone calendar (adds your dated items to a "Tomoriva" calendar; we never read your other events) and Apple Reminders (read on your phone; only the reminders you pick are added). Nothing from your calendar or Reminders is sent to us, except the reminders you choose to add.

11. Children

Tomoriva is not for children and is not directed at them. You must be 18 or older wherever you live. If we learn an account belongs to someone under 18, we delete it. Adults may add their children's details to their own plan; we never contact, track or profile children.

12. Extra information for your region

• EU and UK: you can complain to your local supervisory authority or the UK Information Commissioner's Office.
• UAE: we follow Federal Decree-Law 45 of 2021 (PDPL). You may complain to the UAE Data Office.
• India: you can raise a grievance at [email protected] (we answer within 30 days), nominate someone to use your rights, and complain to the Data Protection Board of India.
• California and other US states: we do not sell or share personal information and do not use sensitive information beyond running the app.

13. Changes

If we make important changes, we tell you in the app before they apply and ask for consent again where the law requires.

14. Contact

[email protected] · [email protected] · Gifson Dsouza, individual developer (trading as Tomoriva), Al Warqa 1, Dubai, United Arab Emirates