Privacy policy

Without an account

You can use Tooti without signing up. Your progress is then stored only on your device, in your browser’s storage, and never leaves it.

With an account

If you create an account we store your username, your email address and a securely hashed version of your password. We never store your password itself.

To sync your progress between devices we store your learning history: the lessons you completed, your answers and your settings.

Sign in with Google

If you continue with Google, Google tells us your email address and a Google account ID, and we store both to recognise you. We never see your Google password.

Error reports

When something goes wrong, the app sends a short technical report (what failed, on which page, the app version and your browser) so we can fix it. Reports never include your answers or passwords, and they are deleted after 30 days.

Who can see your data

Only a few authorised Tooti team members can see account details (username, email, sign-up date and learning activity), and only to solve problems. They sign in with two-step verification, and every time they open personal data it is recorded in an audit log.

What we never collect

Tooti does not record your voice, does not use advertising trackers and does not build advertising profiles.

Cookies and storage

When you sign in we set one essential cookie that keeps you signed in. The website remembers your language choice on your device. There are no marketing cookies.

Where your data is stored

The app is hosted on Vercel and the database on Neon, both in Frankfurt, Germany (EU). Connections are always encrypted.

Messages you send us

If you use the contact form we store your name, email and message so we can reply. We use them for nothing else.

Your rights

You can delete your account and all synced data at any time in Settings. You can also ask us for a copy of your data or for any correction through the contact page.