Privacy Policy

Toxic Coach is an alarm and habit app that roasts you (with love) until you do what you said you'd do. This policy explains what data the Toxic Coach app and the toxiccoach.com website handle, why, and what you can do about it. The short version: your goals and history live on your phone, we don't sell anything about you, and we don't show ads.

Who we are

Toxic Coach is operated by Sebastian Rodriguez, Uruguay (“we”, “us”), who is responsible for the data described here. You can reach us at support@toxiccoach.com.

The short version

• Your goals, alarms, check-ins, streaks and settings are stored on your device. We don't have a copy.
• No ads, no data sales, no tracking across apps or websites. That's why the app never asks for permission to track you.
• A few service providers help us run the app: RevenueCat (purchases), PostHog (product analytics, never advertising), Sentry (crash reports), Cloudflare (delivers the coach voices) and Google Firebase (the website's waitlist).
• Payments are processed by Apple or Google. We never see your card.
• The coach voices are AI-generated in advance from scripts we write. Nothing you say or type is used to create them.
• You can export or delete your data at any time.

What we collect and why

1. Data that stays on your device

Your goals and their schedules, alarms and wake-up missions, check-ins, the excuses you pick, streaks, XP, badges, the roasts you've heard, your settings (language, coach, intensity, Mercy mode) and the name you want to be called by. All of this is stored in the app on your phone and we can't see it.

Uninstalling the app deletes this data, unless your phone's own backup (iCloud, Google) keeps a copy, which is handled by Apple or Google under their terms.

2. Purchases (RevenueCat)

If you buy Pro, the App Store or Google Play processes the payment. To unlock Pro and restore it on another device, the app uses RevenueCat, which receives a random app user identifier, your purchase details (product, price, currency, store country, dates, renewal and cancellation status) and basic device information. We never receive your card details. Why: to give you what you paid for (performance of our contract with you).

3. Product analytics (PostHog)

To learn which features work and where people get stuck, the app sends usage events to PostHog, such as “onboarding step completed”, “coach picked”, “alarm dismissed”, “paywall shown” or “roast card shared”, together with the app version, device model, operating system, language and approximate country. Events are linked to a random identifier, not to your name, email or phone number. We don't use analytics for advertising, we don't sell it and we don't combine it with data from other companies. Why: our legitimate interest in improving the app. You can object at any time (see “Your choices and rights”).

4. Crash reports (Sentry)

When the app crashes or hits an error, Sentry receives a technical report: what went wrong, the app version, device model, operating system and the random identifier. We use it only to fix bugs. Why: our legitimate interest in keeping the app working.

5. Voice downloads (Cloudflare)

Most of the coach voices download after you install the app, from our file server (voices.toxiccoach.com, run by Cloudflare). It's a plain file download: Cloudflare processes your IP address and basic device information to deliver it, like any web server, and we don't link the download to you. Why: to give you the app you installed (performance of our contract with you).

Social features aren't available yet. Buddies, squads and friend-recorded roasts will need an account on a server. Before they launch, we'll update this policy with exactly what they store, and they'll be optional.

6. Roast-a-friend links

A roast link contains everything needed to show it: which pre-written line to play, the first names you typed (optional) and an expiry date. We don't store these links on a server. When someone opens one, our website host processes standard technical data (IP address, browser, the page requested) to deliver the page and keep it secure. If you report a link, we receive your email and the link.

7. Support emails

If you write to us, we receive your email address and whatever you include, and we use it only to help you.

8. The website

toxiccoach.com uses no advertising cookies and no tracking pixels. Our host, Vercel, processes server logs (IP address, user agent, pages requested) to deliver the site and protect it from abuse. Store links on the site carry a campaign label (“web”) so the App Store and Google Play can tell us, in aggregate, how many installs came from the website.

9. The waitlist

Before the app launches, you can join a waitlist on toxiccoach.com. We store the email address you give us, which phone you have (iPhone or Android), your language and, if you arrived from one of our posts, the campaign that brought you. We use it only to invite you to the beta and to tell you when the app is out. It's stored in Google Firebase. Why: your consent, which you can withdraw at any time by writing to support@toxiccoach.com or replying to any of our emails. We delete the list within 6 months after the launch.

Device permissions

The app asks for a permission only when a feature needs it, and you can always say no:

• Notifications and alarms: to remind you and wake you up.
• Camera: to scan the barcode you register for a wake-up mission. Processed on your device.
• Motion and steps: for the “shake” and “walk” missions. Processed on your device.

AI-generated voices

The coach voices are synthetic: we generate them in advance with AI text-to-speech from lines we write, and they don't imitate any real person. None of your data is used to create them. If we ever add a feature that sends something you type or say to an AI provider, we'll tell you first and ask for your permission.

Who we share data with

• The service providers above (RevenueCat, PostHog, Sentry, Cloudflare, Google Firebase and Vercel), which process data on our behalf and under contract.
• Apple and Google, as the stores that sell and deliver the app and process payments.
• Authorities, when the law requires it.
• A buyer or successor, if Toxic Coach is ever sold or merged, under this same policy; we'd tell you first.

We don't sell or rent personal data, and we don't share it for advertising.

International transfers

Our providers may process data in the United States, the European Union and other countries. When data leaves your country, we rely on legal safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep data

• On your device: until you delete it or uninstall the app.
• Analytics events: up to 24 months.
• Crash reports: up to 90 days.
• Purchase records: as long as you have purchases with us, plus what tax and accounting law requires.
• Waitlist: until 6 months after the launch, or until you ask us to remove you.
• Support emails: up to 3 years after the conversation ends.

Your choices and rights

• Export your data: in the app, go to Me → Settings → Export my data to get a copy of everything stored on your device.
• Delete your data: Me → Settings → Delete all my data erases every goal, alarm, streak and setting on your phone. Uninstalling the app removes local data too.
• Analytics and crash reports: write to support@toxiccoach.com to object, or to have the data linked to your app identifier deleted.
• Access, correction, deletion, portability, restriction and objection: depending on where you live (for example under the GDPR in the EU and UK, Uruguay's Law 18.331 or California's CCPA), you have rights over your personal data. Write to support@toxiccoach.com and we'll answer within 30 days. We may ask for something that links the request to your data, like the identifier shown in the app's settings.
• Complaints: you can contact your data protection authority. In Uruguay, that's the Unidad Reguladora y de Control de Datos Personales (URCDP).

Children

Toxic Coach is for people aged 13 and older, and Uncensored mode is only for adults (18+). We don't knowingly collect data from children under 13; if you think a child has given us data, write to us and we'll delete it. Uncensored mode asks you to confirm you're 18 or older before it turns on.

Security

Data on your device is protected by your phone's own security. Data held by our providers is encrypted in transit and at rest, and access is limited to the people who need it. No system is perfect: if a breach ever affects your data, we'll tell you and the authorities as the law requires.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you in the app before it takes effect. See also our Terms of Service.

Contact

Sebastian Rodriguez, Uruguay · support@toxiccoach.com