Privacy Policy

Effective date: January 2026

1. Introduction

This Privacy Policy explains how Tookle (“we”, “us”, “our”) collects, uses, and protects personal data when you use the Tookle application and website (the “Service”). We are committed to processing personal data in accordance with applicable data protection laws, including the Swiss Federal Act on Data Protection (nLPD) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Data Controller

The data controller is:
Tookle
📧 Contact: contact@tookle.io

3. Personal Data We Collect

3.1 Account Information

When you create an account, we may collect:

  • Name
  • Email address
  • Encrypted password
  • Authentication method (email/password, Google OAuth, or wallet login)

3.2 Web3 & Blockchain Data

When using blockchain-related features, we may process:

  • Wallet addresses
  • Blockchain network identifiers
  • Transaction hashes and on-chain interactions

Note: Blockchain data is public by nature but may still be considered personal data under applicable law.

3.3 Technical & Security Data

We may collect:

  • IP address
  • Device and browser information
  • Login timestamps
  • reCAPTCHA verification data

3.4 Cookies

We use essential cookies only, necessary for:

  • User authentication
  • Session management
  • Security

We do not use advertising cookies. If analytics cookies are added in the future, this policy will be updated accordingly.

4. How We Use Your Data

We use personal data to:

  • Provide and operate the Service
  • Create and manage user accounts
  • Secure the platform and prevent abuse
  • Comply with legal obligations
  • Communicate with users regarding their account

We do not sell personal data.

5. Sharing of Data

We may share data with trusted third-party service providers, strictly for operating the Service, including:

  • Hosting and infrastructure providers
  • Authentication providers (e.g. Google OAuth)
  • Security services (e.g. reCAPTCHA)

All providers are bound by confidentiality and data protection obligations.

6. Data Retention

We retain personal data:

  • As long as your account is active
  • As required to comply with legal obligations
  • Or until you request deletion, subject to legal constraints

Blockchain data cannot be deleted due to its immutable nature.

7. Your Rights

Depending on your location, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Request data portability

Requests can be sent to: contact@tookle.io

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. However, no system is entirely secure, and we cannot guarantee absolute security.

9. International Transfers

Personal data may be processed outside your country of residence. Where applicable, we ensure appropriate safeguards are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will require renewed acceptance where legally required.

11. Contact

For any privacy-related questions or requests, contact:
📧 contact@tookle.io