ToCast privacy policy
Controller and account identity
The controller is ToCast, an individual. Contact: support@tocast.io. Website: tocast.io. ToCast is intended for adults aged 18 or older.
A guest installation uses a technical identifier. You may optionally save an account by verifying one email address; that address is immutable. No name, phone or other editable profile fields are required. A saved account can restore only server data that still exists, not deleted audio, local history, queue or settings.
Data, purposes and recipients
- Email, verification operations and sessions support account access, recovery, inactivity warnings and deletion. Codes and secrets must not enter operational logs.
- Subscriptions, private feed credentials, searches, push registrations and selected content support the functions you request. Source links/text, generated audio and owner-only reports are processed for generation and delivery.
- Minimal account diagnostics contain allowlisted operation/error references, application version and session epoch; correlated diagnostics are not anonymous. Operational logs are for reliability and security. Administrator access and changes create a minimal audit.
- Support processes the sender's address and necessary message content. Do not send excessive personal information.
Depending on enabled functions, catalogue and publisher servers, text/speech/image providers and Firebase Crashlytics, Cloud Messaging and App Check may receive the technical or content data required for their functions. Do not infer that every configured integration is deployed. This revision does not verify the actual processor list, email delivery recipient, Russian infrastructure placement, backup deletion schedule, cross-border transfer arrangements or legal basis for a production release. The operator must establish these facts and update the revision before enabling the relevant processing. Russian account infrastructure does not prove that all independent services process data only in Russia.
The Android app integrates Kotzilla for technical performance monitoring through Koin. The SDK sends component names and lifecycles, resolution timings, Android UI, crash and ANR diagnostics, and device characteristics such as model, OS version and memory to Kotzilla for reliability analysis. This is separate from ToCast account diagnostics and Firebase services; it is not proof that processing takes place only in Russia. Actual SDK configuration, recipients, retention and transfer conditions must be checked for the release.
ToCast does not sell personal data or use it for advertising mail. The policy explains processing; accepting terms does not constitute consent to every purpose. Where consent is required, it is separate and may be withdrawn; other lawful grounds require independent verification.
Retention and security
- Guest server data: 180 days of confirmed inactivity.
- Saved accounts: 12 calendar months of confirmed inactivity, with an email warning at least 30 days before deletion. Active premium, including permanent grants, exempts the account. After expiry or revocation, an overdue account receives a new warning and at least 30 days; renewed activity recalculates the period. Failed or unknown warning delivery is not evidence of notification.
- Account diagnostics: 30 days. Minimal administrator audit: 180 days, with the owner linkage severed after deletion.
- Generated audio: a separate 14-day lifetime. Resolved AI reports: at most 180 days.
- Completed deletion receipt: 180 days without acknowledgement, or 180 days after acknowledgement, capped at 365 days from completion. Deletion-only recovery proof: at most 365 days. Pending deletion is never completed merely because time elapsed.
ToCast uses HTTPS and protected local session storage. The external deletion page stores encrypted deletion-only recovery data in your browser; it does not create a product session. Local downloads and settings are managed in the app or Android. Independent recipients, unlinked anonymous telemetry and backups have separate retention; no immediate universal erasure or verified backup timetable is promised here.
Your rights and deletion
You may ask about processing, request correction, restriction or deletion where applicable, withdraw consent and contact the competent authority or court. Contact the controller through support. Ownership must be verified before data is disclosed or deleted.
Use application settings or the separate saved-account deletion page. See deletion instructions. Blocking does not remove a safe deletion route.