Tols ยท Last updated: September 28, 2026
Tols is the product name. The operator is responsible for the app and these documents. [REQUIRED BEFORE PUBLICATION: insert the operator's legal name, postal address and support telephone, and any legally required privacy representative or data-protection contact.] Contact email: ricardoalvarezlda@gmail.com.
This Policy describes the current Tols app: camera capture, on-device retouching, filters, adjustments, cropping, rotation, blur, frames, collages and text overlays, a bundled template catalog, account and profile services, and an assistant conversation interface. Reading this Policy or accepting general terms does not constitute consent to unrelated processing or waive privacy rights.
Supabase Auth processes the email address or generated account alias, password and authentication requests you submit. It maintains account identifiers and authentication records needed for account services. Tols stores the active session, access and refresh tokens, user information and a cached profile in device-only Keychain storage.
When you save profile changes, your nickname and signature are sent to the hosted profile database. A selected avatar is encoded as an image and uploaded to hosted Storage; its path is associated with your account. The app retrieves profile records and avatar images for display. These profile changes are not local-only. Avatar URLs may be publicly accessible to anyone who obtains the URL; do not choose a confidential image. Replacing an avatar does not itself demonstrate deletion of older uploaded files.
Tols uses the system photo picker to access the images you choose. Camera permission and permission to add exported images to Photos are requested separately. Declining a permission prevents the related operation. Selecting a photo for local editing does not upload it; explicitly saving a selected photo as your profile avatar does. Photos can contain faces, locations and other personal information. Only provide content you are entitled to use.
The current Apple option uses the user identifier returned by Apple to locate generated Supabase email-and-password credentials in this device's Keychain. On first use, the app creates an account alias using the configured alias domain and a random password. That alias is not an Apple private-relay address or a personal mailbox assigned to you, and should not be relied on for email recovery. The app does not implement a standard backend Apple identity-token exchange through this flow.
The generated credentials do not synchronize through iCloud Keychain. Changing devices or losing those credentials can prevent access through this flow. Sign-out retains them; after a successful account-deletion response, the app attempts to remove matching credentials. Uninstalling is not a reliable way to erase Keychain records. These limitations do not remove your privacy rights.
Tols processes image pixels that may include faces. The current camera and editing implementation does not extract facial landmarks, face geometry, face embeddings, biometric templates or face-recognition identifiers. It does not identify people or authenticate them by their face. Photos containing identifiable people can still be personal data.
Camera and editing operations run on the device to show previews, capture images, reduce noise, adjust brightness and color, apply filters and blur, crop, rotate, flip, add borders or text, and compose collages. The retouching softening control is image-wide noise reduction, not a facial model or face-specific analysis.
Camera frames, local editing photos and assistant messages are not uploaded by those features to Supabase or an AI provider. There is an important exception for profile avatars: when you save one, the selected avatar image, including any face it contains, is uploaded to hosted Storage for profile display. No separate face measurements or biometric templates are generated or uploaded. Tols does not use these photos for advertising or AI-model training.
Working images are retained in memory while the relevant screen or processing state is retained, until replaced, released or the app process ends. Exported images remain in Photos until you delete them, subject to Recently Deleted, backup and iCloud settings. Uploaded avatars and account records are subject to Section 6; app removal does not delete those hosted copies. No separate biometric database is maintained.
The current assistant is a conversation interface. It displays a notice that replies are not available, and adds typed messages to the current screen. It does not call a generative-AI service, download a guide library, match prompts to photography plans or transfer assistant-generated settings to the camera.
Messages and unsent input are held in the current screen's memory. The current feature does not send them to a backend or AI provider, or provide persistent or synchronized conversation history. They can be lost when the screen is released or the app process ends. Data practices must be disclosed before any future online assistant is enabled.
Hosted account and profile data are used while needed to provide the account. Account deletion sends an authenticated request to the account service. The app checks for a successful deletion response and then attempts to remove the active session and matching generated credentials. The client alone does not establish whether every Storage object, historical avatar, server log or backup has been removed. Legal-retention exceptions and production deletion procedures must be documented accurately.
Active session records and a cached profile are stored in device-only Keychain storage until cleared by sign-out, invalid-session handling or account-deletion cleanup. Generated Apple-assisted credentials remain after sign-out and are removed by matching deletion cleanup. Do not rely on uninstalling to erase Keychain data.
Template favorites are stored as identifiers in UserDefaults on the device, not as a cloud-synchronized collection. Account deletion does not currently clear this device-level preference. Avatar downloads and agreement webpages may leave system-managed networking or WebKit cache and website data. Such caches can remain until evicted, cleared or removed with relevant app data; no fixed expiry is promised.
Unsaved photo edits, text overlays, collage selections and assistant messages are not persistent cloud-backed drafts. Exported images are separate Photos-library copies and are not erased by sign-out, account deletion or app removal. Device backups and synchronization can retain copies according to your settings.
Support emails are retained while needed to answer the request and resolve related matters, subject to applicable law. [REQUIRED BEFORE PUBLICATION: confirm production retention periods or specific criteria for account records, current and superseded avatars, authentication/security logs, backups and support correspondence; document deletion processing times and lawful exceptions.]
The current template catalog is bundled with the app. Template covers and creator cards are previews or prepared content, not evidence of a live cross-user community. Template detail parameters currently display defaults and the Use template action is not connected to a camera-parameter application service.
The current client does not provide an operational photo-publication, public-comment or in-app report-submission service. Editing a photo or using an inactive reporting control does not publish content or submit a report. Contact ricardoalvarezlda@gmail.com for privacy, safety or copyright concerns.
The current app does not initiate subscription or virtual-gift purchases or maintain a gift balance or creator payout service. The subscription entry opens Apple's subscription-management interface. Gift or promotional controls do not themselves authorize a charge or create an entitlement.
Apple provides system sign-in authorization, photo selection, device permissions, Photos storage and subscription management under its own applicable terms and privacy practices. Before a future paid offering is enabled, its benefits, price, billing, renewal and cancellation terms must be disclosed. Deleting an account or app does not itself cancel an Apple-billed subscription.
Supabase provides authentication, hosted profile records and avatar storage. These services receive the data described in Sections 2 and 3. Requests can also expose an IP address, time, requested resource and security or response metadata. Policy webpages opened in WKWebView communicate with their host and can use networking caches, cookies or website storage. Uploaded avatars may be served through publicly accessible URLs.
Information you send to ricardoalvarezlda@gmail.com is processed by the email provider to deliver and manage support correspondence. Do not send passwords, authentication tokens or unnecessary sensitive photos. Tols does not send local editing photos or assistant messages to an advertising or AI provider. Profile-avatar upload is a separate action described above.
Disclosure may occur where legally required, to address service security or protect people, or in a lawful business transfer with required notices and safeguards. This does not remove the operator's responsibilities for its processing or providers acting on its behalf. [REQUIRED BEFORE PUBLICATION: verify the actual hosting, email and other production providers and any additional data collection.]
Where applicable, requested account and profile processing is necessary to provide the service; support and proportionate security processing may rely on legitimate interests, and legally required processing on legal obligations. Consent is obtained where the law requires it. Device permission and agreement to terms do not waive privacy rights or replace consent for unrelated uses. Withdrawing consent does not affect earlier lawful processing.
Hosted account information, avatars, technical logs and support emails may be processed outside your country. [REQUIRED BEFORE PUBLICATION: identify the actual controller and processing countries and applicable transfer safeguards, such as contractual safeguards where required, and explain how to obtain information about them.] No particular hosting region, adequacy status or transfer mechanism is asserted without verification.
You can choose which photos to import, revoke camera or Photos permissions in iOS Settings, edit your profile and delete exports in Photos. While signed in, Settings provides sign-out and account-deletion actions. Sign-out ends the current session but does not delete your hosted account, profile, avatar or generated Apple-assisted credentials.
Account deletion sends a service request; local session and matching credential cleanup follows a successful response. Failures can interrupt completion. If deletion is not confirmed or cleanup fails, contact ricardoalvarezlda@gmail.com. Exported images, independent copies and device favorites are not automatically removed. Removing the app does not substitute for account deletion. Production handling of retained backups, logs and avatars is subject to Section 6.
Depending on applicable law, you may request access, correction, deletion, portability, restriction, object to certain processing, withdraw consent, or complain to a competent supervisory authority. Send requests to ricardoalvarezlda@gmail.com. We may request proportionate verification, but not your password or authentication tokens. Requests are handled within applicable legal deadlines, and lawful exceptions will be explained.
Tols uses HTTPS for account-service requests and device-only Keychain protection for credentials and cached account data. No system guarantees absolute security. Protect your device and account. Publicly accessible avatar URLs are not confidential storage, and independent copies may be outside our control.
The service is not directed to children under 18. If a child has provided personal information, a parent or guardian should contact us so appropriate steps can be taken under applicable law. Higher local age or parental-consent requirements apply. The actual audience, registration flow and App Store age information must be consistent with this statement before publication.
Changes to this Policy will be dated. Material changes require notice or consent where legally required and do not retroactively authorize incompatible uses of personal data. Third-party policies do not eliminate our responsibilities for providers acting on our behalf.
Tols is the product name. The operator is responsible for the app and these documents. [REQUIRED BEFORE PUBLICATION: insert the operator's legal name, postal address and support telephone, and any legally required privacy representative or data-protection contact.] Contact email: ricardoalvarezlda@gmail.com.