Privacy Policy
Effective 29 October 2026 · Toehold (“we”, “us”) is made by Owais Builds. Contact:
Toehold is a focus app. We collect only what the app needs to work. We don’t sell your data, we don’t show ads, and we don’t use advertising or tracking SDKs.
What we collect
| Data | Why | Who sees it |
|---|---|---|
| Email address | To sign you in with a one-time code | Only you, and our sign-in provider. Never shown to other users. |
| Name (optional, a first name or nickname) | To show you to friends in a focus room | People in a room you join |
| Tasks and toeholds you type | To show you one thing at a time | Only you |
| Focus sessions: start time, planned and actual length, kind, linked task | To run the time band, the week view and (with Plus) your patterns | Only you. A count of people in a session right now is shown publicly, with no names. |
| Room membership and status line (one line of up to 80 characters, usually the task you’re on) | To run rooms with friends | People in the same room |
| Reports and blocks you make | To keep rooms safe | Our team (reports); nobody else |
| Subscription status | To unlock Toehold Plus | Only you |
| Crash reports (device model, OS version, app version, the error) | To fix crashes | Our team. No names, emails or IP addresses are attached. |
We do not collect your location, contacts, photos, microphone, advertising ID, or browsing data. Reminders and the lock-screen notification are created on your phone and need no data from us. Share cards are made on your phone and only leave it if you share them.
Service providers
We use a small number of processors, each only to run the service:
- Clerk: sign-in with email codes.
- Neon: our Postgres database, hosted in the United States.
- Vercel: hosting for our website and API.
- Sentry: crash reports, without personal data.
- Google Play and RevenueCat: subscription purchases and their status. Google processes payments. We never see your card details.
Data is encrypted in transit (HTTPS) and at rest by our providers.
How long we keep it
We keep your data while your account exists. Tasks you mark done or let go of stay in your history until you delete your account. When you delete your account, we delete your data from our database immediately. Backups roll off within 30 days. Crash reports are kept for 90 days.
Your choices and rights
- Change your name: Settings.
- Leave a room: the room screen, any time.
- Delete your account and data: in the app under Settings → Delete account, or see Delete your account.
- Access or correct your data: email us and we’ll respond within 30 days.
Depending on where you live (for example under GDPR or CCPA), you may have extra rights to access, correct, delete or port your data, or to object to processing. Email us to use them. We process your data to provide the service you asked for (contract), and for safety features like reports under our legitimate interest in keeping rooms safe.
Age
Toehold is for adults 18 and over. We don’t knowingly collect data from anyone under 18. If you believe a minor is using Toehold, contact us and we’ll delete the account.
Not medical advice
Toehold is a focus tool. It isn’t a medical device and doesn’t diagnose or treat ADHD or any other condition.
Changes
If we change this policy, we’ll update the date above. If the changes are significant, we’ll also tell you in the app.