Privacy Policy

Tokmia is operated by Veloro Labs LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA (“we”, “us”). This policy explains what we collect when you use the Tokmia app and tokmia.com, why, who else sees it, and what you can do about it.

1. What we collect

Things you give us

• Account details — your email address and password. Your password is stored only in a scrambled form that can’t be turned back into the password, never in readable form. If you sign in with Google or Apple, the identifier and email address those services return to us instead.
• Date of birth — asked once at sign-up to confirm you are an adult. It is private, is never shown on your profile or to other users, and cannot be changed afterwards. We also record when you agreed to our Terms and Community Guidelines.
• Profile — display name, username, avatar, bio, country, your native language, the languages you are learning, and your proficiency level.
• What you write and share — messages in lives, direct messages, voice messages you record and send, practice recordings you save, vocabulary and grammar cards, content pinned to the board in a live, and anything you submit when reporting another user.

Things using the app produces

• Learning and activity — XP, streaks, achievements, daily challenge progress, spaced-repetition review schedules, lives you hosted or attended, and per-session analytics for lives you host.
• Social graph — who you follow, who follows you, who you have blocked, and who you have chosen not to be paired with again in matched practice.
• Coins and purchases — your coin balance, the history of your coin transactions, and whether a Pro subscription is active.

Things collected automatically

• Device and delivery — a push notification token, device model, operating system version and app version.
• Device identifier for safety bans — a random ID generated when you install the app and, on Android, the device’s Android ID. The Android ID is stored only as a one-way hash. We use them only so that an account permanently banned for serious abuse, or a sign-up refused because of age, can’t be bypassed by reinstalling the app. They are not used for advertising or tracking across other apps.
• Connection records — your IP address, your app or browser user-agent, and the time of each sign-in. We derive an approximate location from your IP address (city, region, country) and store it next to the session so you can recognize your own logins. Section 4 explains how that lookup happens.
• Presence — when your app last held an open connection, used to show “online” or “last seen”. You can hide this.
• Diagnostics and product analytics — crash reports and usage events. See section 4.

2. Voice

We do not record your voice calls. Not lives, not one-to-one practice sessions. Audio is relayed between participants in real time. It is not written to storage by us, not retained, and not used to train anything.

Two things are audio but are not live calls, and we do store them because their whole purpose is to be kept:

• Voice messages you deliberately record and send in a direct message, stored so the recipient can play them.
• Practice recordings you deliberately record and save to your account.

3. Why we use it

Where UK or EU data protection law applies to you, these are our legal bases:

• Performance of a contract — creating and running your account, delivering messages and lives, the learning features, and taking payment.
• Legitimate interests — keeping the service safe (moderation, handling reports, enforcing blocks, detecting abuse), account security records, and diagnostics that keep the app working.
• Consent — push notifications, given through your device’s permission prompt, and product analytics where your local law requires consent for it. You can withdraw either at any time.
• Legal obligation — where we are required to keep or disclose something.

We do not sell your personal data, and we do not share it for advertising or cross-context behavioral advertising. There are no ads in Tokmia.

4. Who else processes your data

These providers act on our instructions and may only use your data to provide their service to us.

Three things worth stating plainly rather than leaving inside a table:

• Text is screened automatically for safety. Messages in lives and direct messages are checked on our own servers against a list of banned words. Text such as profile names, live titles and community names is also checked by an automated moderation service (one of the AI providers above) to catch abuse, harassment and similar content. Only text is sent — never voice. Content that looks unsafe can be blocked or held, and reports and serious cases may be reviewed by a person.
• Images are screened too. Profile photos, community pictures and images sent in direct messages are checked by an automated image-moderation service (one of the AI providers above) for nudity, graphic violence and hate imagery. The image itself is sent to that provider for the check. An image that looks unsafe is removed; one that may show a child in a sexual context is kept securely so it can be reported to the authorities.
• When you report something, we keep a copy. If you report a person, a message or a live, we save a limited copy of the relevant content ourselves, such as the reported messages and those around them, and the reported profile as it looked when you reported it (name, username, bio and photo). We keep it so a person can review the report, handle appeals and keep people safe, even if the content is later edited or deleted. We keep it only as long as we need it for those purposes, and longer where the law requires it, for example reports of child sexual abuse.
• Chat from a live goes to an AI provider when grammar is extracted. When you ask Tokmia to pull grammar points out of a session you attended, up to the last 100 text messages from that live are sent to our AI provider — including messages written by other participants. Voice is not included, because it is not recorded.
• Your IP address is sent to an IP location service each time a new session is recorded, so we can store an approximate city alongside your sign-in.

You can turn off usage analytics at any time in Settings → Privacy → Share usage analytics.

On AI providers and model training: we do not use your content to train AI models. When a feature sends your text to one of the AI providers above, that provider processes it to return a result, and its own terms govern whether it may retain or learn from what it receives. We choose providers and plans on that basis. If you would rather no text of yours reached an AI provider at all, do not use the AI features — lives, messages and the decks all work without them.

We may also disclose data where we are legally required to, or where it is necessary to investigate a credible risk to someone’s safety.

5. International transfers

We are based in the State of New Mexico, USA. Your data may be processed in both the EU and the United States: our database is hosted in Ireland and our backend in Virginia, and several other providers above are US-based. Where we transfer personal data outside the UK or EEA, we rely on Standard Contractual Clauses and, where the provider participates, the EU–US Data Privacy Framework.

6. How long we keep it

• While your account exists, we keep your account and content so the service works.
• If you delete your account, it becomes inaccessible immediately and is permanently deleted after about 30 days, unless we are legally required to keep something. Signing back in within that time restores it. After that we cannot recover it.
• Deactivating hides your profile and lives without starting that clock.
• After permanent deletion your user record is anonymised. Coin and payment ledger entries are retained in anonymised form, because deleting a historical transaction would retroactively change balances and payment records — including other people’s. These entries are not linked to an identifiable person.
• Messages you sent to other people remain in their copy of the conversation, as they would in any messaging service.
• Reports are retained for as long as we need them to enforce our rules.
• Sign-in and session records are kept while your account exists and are deleted with it.

Full detail on deletion, including what happens to coins and subscriptions, is on our account deletion page.

7. Your rights

Depending on where you live, you have the right to access, correct, delete, export, restrict or object to our processing of your personal data, and to withdraw consent where processing relies on it.

Two of these are built into the app and need no request from you:

• Access and portability — Settings → Account → Download my data compiles your profile, lives, messages, vocabulary, achievements, social graph, notifications, coin history and reports.
• Erasure — Settings → Account → Delete account, or the request route if you have already uninstalled the app.

For anything else, contact privacy@tokmia.com. We respond within one month. If you are unhappy with our response you can complain to your local data protection authority; in the UK that is the Information Commissioner’s Office.

Your controls in the app: who can message you (mutual follows, or nobody), whether your online status and last-seen are visible, which parts of your profile are visible and to whom, and which push notifications you receive.

8. Children

Tokmia is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and we delete such accounts when we find them. Where your country sets a higher minimum age, that age applies to you.

If you believe a child has given us personal data, contact privacy@tokmia.com and we will delete it.

9. Security

Passwords are stored only in a scrambled form that can’t be reversed. Traffic between the app and our servers is encrypted in transit. Access to production data is limited to named administrator accounts. No system is perfectly secure and we cannot guarantee absolute security.

10. This website

tokmia.com is a static site. It sets no cookies, runs no analytics, and does not track you. Every file it loads — including the typeface — is served from tokmia.com itself, so browsing this website sends your details to no one but us. Our server keeps ordinary web logs.

11. Changes

If we change this policy materially we will update the date at the top and, for significant changes, tell you in the app.

12. Contact

Privacy: privacy@tokmia.com
General support: support@tokmia.com
Operator: Veloro Labs LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA