1. Who we are
TOC is operated by TOC Global Pty Ltd (“TOC”, “we”, “us”), based in Melbourne, Australia. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy covers our website at toccal.com, the TOC web app, and our mobile apps (collectively, the “Service”).
2. Information we collect
We collect only what we need to run TOC for you and the people you plan with.
Information you give us
- Account details — your name, username, email address, password, and optional profile photo.
- Content you create — events, to-do lists, preset time blocks, habits, photo logs, captions, and messages you send.
- Your connections — the friends you add and the people you invite to events, lists, habits, or chats.
- Business details — if you run a business on TOC, your timetables, bookings, and the regulars who book with you.
- Support & contact — anything you send us when you email or message us for help.
Information we collect automatically
- Usage data — how you interact with features, so we can fix problems and improve the app.
- Device & technical data — device type, operating system, app version, and general (city-level) location inferred from your IP address.
- Cookies & local storage — used to keep you signed in and remember your preferences. We don’t use third-party advertising trackers.
- Analytics — we use Google Analytics to understand how people find and use TOC, so we can improve it. This collects anonymized usage and device data and does not identify you personally.
3. How we use your information
- To provide the Service — show your calendar, sync your content, and deliver messages and invites.
- To make TOC social — share what you choose to share with the specific people you choose to share it with.
- To send service communications — invites, reminders, and important notices about your account.
- To keep TOC safe — detect abuse, prevent fraud, and enforce our Terms of Service.
- To improve and build new features.
- To process payments for business plans.
We do not sell your personal information, and we don’t use your content to target you with third-party ads.
4. How information is shared
- With people you choose — when you invite someone to an event, list, habit, or chat, or follow a business timetable, the relevant details are shared with them. You control who that is.
- With businesses you book — if you book with a business on TOC, that operator can see your booking and that you’re a regular.
- With service providers — trusted vendors who host our infrastructure, send email, and process payments, under confidentiality obligations and only to run the Service.
- For legal reasons — where required by law, or to protect the rights, safety, and security of our users and TOC.
- In a business transfer — if TOC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that deal.
5. Your choices and rights
You have control over your information:
- Access & correct — view and edit your profile and content any time in the app.
- Delete your account — you can delete your account from in-app settings, which removes your personal information and content, subject to limited retention below.
- Control sharing — choose what you share and with whom, and remove people from your shared events, lists, and chats.
- Notifications — manage email and push notifications in your settings.
To make a privacy request or raise a concern, email hello@toccal.com. If you’re in Australia and aren’t satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).
6. Data retention
We keep your information for as long as your account is active. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must keep limited records to comply with legal, tax, or security obligations, or to resolve disputes. Content you shared with others (such as a message in a group chat) may remain visible to those people.
7. How we protect your information
We use encryption in transit, access controls, and reasonable technical and organisational measures to protect your information. No system is perfectly secure, but we work hard to keep yours safe and will notify you and the relevant authorities of any eligible data breach as required by law.
8. Children
TOC is not intended for children under 13, and we don’t knowingly collect information from them. If you believe a child has provided us personal information, contact us and we’ll remove it.
9. International users
We’re based in Australia, and your information may be stored and processed in Australia and other countries where our service providers operate. Where information is transferred overseas, we take reasonable steps to ensure it’s handled consistently with this policy.
10. Changes to this policy
We may update this policy from time to time. When we make material changes, we’ll update the date above and, where appropriate, notify you in the app or by email. Continuing to use TOC after an update means you accept the revised policy.
11. Contact us
This policy is provided in good faith and describes how TOC handles your information. It isn’t legal advice. If you operate a business on TOC, you’re responsible for your own handling of your customers’ information.