Last updated: October 18, 2026
Tokki ("we", "our", "the app") is a language-learning messaging application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
Account information: When you create an account, we collect your email address, username, and display name.
Messages: Messages you send are stored on our servers to deliver them to your chat participants. Messages include the original text and the translated version with vocabulary replacements.
Vocabulary: Words you add to your chats are stored to provide the word-replacement feature.
Quiz results: When you complete vocabulary quizzes, we store your scores to display leaderboards and track your learning progress within your chats.
Usage data: We track basic usage statistics such as words learned, messages sent, quiz scores, and login streaks to display your progress.
Push notification tokens: If you enable notifications, we store your device's push token to deliver message notifications.
How you found Tokki: During onboarding we ask how you heard about Tokki. The choices are a stable label such as a class, TikTok, Instagram, X, Threads, Google, a friend, or other. If you choose other, you can add a short note. We ask you not to include names or contact details in that note. If you join from a class, we store that the source was a class and the id of the group. We do not store the invite code.
Campaign parameters: If you open a Tokki page or the app from a link that includes utm_source, utm_medium, utm_campaign, utm_term, or utm_content, we keep the first set of those five values. On the website they are held in the browser's session storage under the key tokki.firstTouch until signup is saved, and that key is then removed. Session storage is cleared when the tab closes. We do not store your IP address, the full page address, the referring address, or a device identifier for this.
The source answer, the group id, and the campaign parameters are used for our legitimate interest in knowing which channels bring people to Tokki. They are not used to advertise to you on other sites.
We do not sell, trade, or share your personal data with third parties. Your messages are only visible to members of your chats. We use Supabase as our backend infrastructure provider, which stores data in secure, encrypted databases in the EU (Frankfurt, Germany).
Signup notice: When you finish onboarding, we may send a message to a private Telegram chat that Tokki operates. That message can include your display name, username, languages, the source you chose, the short note, the group id, and the campaign parameters above. It does not include your email address, the invite code, your IP address, or a device identifier. It is not posted publicly.
Your data is retained as long as your account is active. The source answer, the group id, and the campaign parameters are kept with your account and deleted when the account is deleted. You can request deletion of your account and all associated data by contacting us.
We use industry-standard security measures including encrypted connections (TLS), row-level security policies on our database, and secure authentication via Supabase Auth.
Tokki is not directed to children under 13. We do not knowingly collect personal information from children under 13.
You have the right to:
We may update this policy from time to time. We will notify you of significant changes through the app.
If you have questions about this privacy policy, contact us at: koziel.dev@gmail.com