Back to the projects

Privacy in Toki

In short: Toki sends no data to me. There is no account, no server of mine, no ads, no analytics and no tracking. Everything you enter stays on your iPhone unless you pass it on yourself (export, backup). The German version is legally binding.

1. Controller

Dennis Wittke
Gögging 18a
83083 Riedering
Germany
E-Mail: [email protected]

2. What Toki stores on your iPhone

This data lives only in the app's storage on your device and is gone when you delete Toki. If you use the iOS device backup (iCloud Backup or a computer), it is included like all app data; that is handled by Apple or your computer.

3. Location (only if you turn it on)

"Automatic by location" is off until you turn it on. iOS then asks for location access, with "Always" for recording in the background.

4. Map and address search (Apple)

To set the office, Toki shows an Apple map and offers an address search. iOS sends the search text and the approximate map region to Apple, and map images are loaded from Apple. This happens directly between your iPhone and Apple; I receive nothing. Apple's privacy policy applies.

5. Notifications

If you allow it, Toki shows a short notification on arrival and departure. It is created on the iPhone itself; there is no push service and no server.

6. Automatic backup, export and import

7. App Store and TestFlight

Toki is distributed through Apple's App Store and TestFlight. Apple processes data for downloads and updates under its own responsibility. If you agreed in iOS to share analytics with app developers, Apple gives me anonymised crash reports and usage statistics. Feedback sent through TestFlight (text and screenshot) reaches me because you send it. I use this only to fix bugs.

8. Contact by e-mail

If you write to me, I process your message and address to answer and delete them once the request is settled. Legal basis: Art. 6(1)(f) GDPR.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3)). An informal e-mail to the address above is enough.

Right to object (Art. 21 GDPR): where data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time.

You can also lodge a complaint with a supervisory authority. The competent authority is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Last updated: 22 October 2026