Privacy notice

This is a private build, and the wording here is subject to legal review. It describes how Tollamus actually handles your data today. A formally reviewed policy will replace it before any public launch.

What we collect

The account details you provide (a username and an email address) and your learning activity within the app — the reviews and exercises you do, and the progress derived from them. This is used only to operate the service and to develop the learning engine. Tollamus does not sell your data and does not share it with advertisers.

Your data export

From Account settings you can download a structured copy of your data: your profile, preferences, learner profile, enrolments, progress, your own activity history, the analytics derived from it, and any content drafts you authored. An export never includes your password, security tokens, or any other person's data, and it is delivered over a single secured, password-confirmed response rather than a file left lying around.

Account deletion

You can delete your account yourself from Account settings. Deletion is permanent and is confirmed by re-entering your password and typing your username. When you delete:

• your account and the data tied to your identity are deleted outright, and you are signed out everywhere;
• your learning events are anonymised — detached from your identity and kept only in a non-identifying, aggregate form to improve the learning engine. This is irreversible: we keep no key that could re-link them to you;
• population statistics that are not about you individually may be retained in aggregate, and are recomputed after your deletion.

Retention & backups

Operational records (such as login-attempt and session records) are swept on a routine schedule. Encrypted backups exist for disaster recovery and age out under their retention schedule; they are not surgically edited, so a deletion that predates a backup is reconciled when that backup is restored and as the backup ages out. Offline-queued activity stored on your own device is cleared when you log out or delete your account.

Exercising your choices

Export and deletion are self-service: sign in and open Account settings. If you need help, or would rather make the request another way, email privacy@tollamus.com and we will action it promptly.

The version you accept

The version of this notice in effect when you register is recorded with your account, so we can tell which terms you agreed to as this notice evolves.