Welcome to Toots ("we", "our", or "us"). Toots is a real-time Push-to-Talk (PTT) walkie-talkie and voice messaging application designed to provide instantaneous, seamless audio communication among friends and channels.
This Privacy Policy outlines how we collect, use, process, and protect your information when you use our mobile application and related services. By using Toots, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We collect information to provide, personalize, and improve our Push-to-Talk and social messaging features.
A. Information You Provide
Account Information: Your phone number used for OTP authentication, profile display name, and user preferences.
Profile & Group Media: Profile pictures or group avatars uploaded using your device camera or photo library.
Voice Content: Voice recordings, voice notes, and live audio streams transmitted during Push-to-Talk sessions.
B. Automatically Collected Information
Device Identifiers & Technical Data: FCM push notification tokens, IP address, device model, operating system version, and network connection status (required for WebRTC audio routing).
Usage Data: App interaction logs, background session status for audio playback, and audio waveform data generated for visual playback representation.
3. Device Permissions
To provide core voice messaging and walkie-talkie features, Toots requests specific permissions on your device:
Required to record voice messages and transmit live audio during Push-to-Talk calls. Microphone access is active only when you record a note or participate in an active audio channel.
Camera & Photo Library (NSCameraUsageDescription / NSPhotoLibraryUsageDescription)
Required to take photos or select images from your gallery for your profile picture and channel avatars.
Required to alert you to incoming voice messages, wake the app for Push-to-Talk auto-play, and manage background audio streaming.
4. How We Use Information
We process your data strictly to fulfill operational and communication requirements:
Real-time Voice Communication: Routing and streaming Push-to-Talk audio live via WebRTC and Socket.IO servers.
Push Notifications & Auto-Play: Delivering instant incoming voice note alerts and playing incoming walkie-talkie audio.
Authentication & Security: Verifying phone numbers via SMS OTP and protecting against unauthorized access.
Service Reliability: Monitoring connection quality, resolving network latency issues, and improving app stability.
5. Data Sharing & Third-Party Services
We do not sell, rent, or monetize your personal information. We share data only with third-party service providers essential for operating the application:
Firebase Cloud Messaging (FCM): Used to deliver push notifications and payload wake locks for incoming voice calls.
WebRTC & Socket Infrastructure: Used to establish peer-to-peer or server-mediated live audio streams.
We may also disclose information if required by law or to protect the rights, safety, and security of Toots users.
6. Data Retention & Security
We implement robust technical and organizational security measures to protect your audio data and account details:
Data Encryption: Audio streams and network communication are encrypted in transit using industry-standard TLS/WSS protocols.
Audio Storage: Temporary voice messages are retained only as long as necessary to complete delivery to channel recipients.
Local Storage: Account tokens, application settings, and cached waveforms are stored securely on your local device storage.
7. Children's Privacy
Toots is not intended for use by individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take immediate steps to delete such data.
8. Your Rights & Choices
You maintain full control over your personal data:
Permission Management: You can revoke access to Microphone, Camera, Contacts, or Notifications at any time in your device system settings.
Data Deletion: You may request the deletion of your account and associated data by contacting our support team.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
At Toots, we value your privacy and give you full control
over your personal data.
How to Request Account Deletion
Method 1: In-App Deletion
Open the Toots app on your device.
Go to Settings > Account.
Tap Delete Account and confirm your choice.
Method 2: Email Request
If you no longer have access to the app, you can send an account
deletion request by emailing us.
Email: support@toots.app
Subject: Toots Account Deletion Request
Content: Please include the registered phone number associated with your account.
What Data Will Be Deleted?
Your profile details (Name, Profile Picture, Phone Number)
Your contacts sync data
Your sent and received voice messages and chat history
Your device FCM tokens
Data Retention
Certain non-identifying transaction or security logs may be retained for
up to 30 days for system security and regulatory compliance, after which
they are permanently deleted.