Privacy Policy

Last updated: September 19, 2026

Operator Identity

Tolbo, previously known as StreakUp, is operated by Oleksii Yehorov. In this Privacy Policy, "Tolbo," "we," "us," and "our" refer to Oleksii Yehorov operating the Tolbo service.

1. Information We Collect

To provide, protect, understand, and improve Tolbo, we collect the following information:

  • Account Information: When you create an account, we collect your email address and, when provided through Sign in with Apple or Google Sign-In, your name and authentication identifier. Authentication credentials are handled by Supabase and the sign-in provider; Tolbo does not have access to your plain-text password.
  • Sobriety Setup and Profile Data: This may include your chosen sobriety start date, estimated average weekly alcohol spend, preferred currency, self-reported gender, how you heard about Tolbo, timezone, and notification preferences.
  • Sobriety Progress and User Content: This includes streak history, milestones, daily check-ins, mood and craving ratings, journal entries and prompts, reasons for quitting, Savings Goal names, amounts and reasons, retention feedback, and other content you choose to enter.
  • Future Damage Scan Data: If you choose to use a Future Damage Scan, we collect the confirmed square portrait crop, whether it depicts you or another consenting adult, the drinking-pattern answers entered for that scan, your required consent confirmations, the generated ten-year portrait, and the illustrative report. The original uncropped photo remains on your device and is not uploaded.
  • Subscription Information: Apple and RevenueCat may provide us with subscription product, entitlement, purchase-history, storefront, pricing, and currency information. We do not directly collect or store your full payment-card details.
  • Product Analytics and Session Data: We collect app and website interactions, screens and features used, session timing, attribution information, device and app identifiers, device/browser/app details, IP-derived approximate location, and diagnostic events. When session replay is enabled, PostHog reconstructs in-app sessions from captured interface snapshots and interactions so we can understand behavior and diagnose problems. These reconstructions may include content visible or entered on captured screens, including sobriety-related content. Password-style fields and system-controlled payment surfaces are designed to remain masked or excluded.
  • Support Communications: If you contact us, we collect the information you choose to include in your message and basic device/app details included with a bug report.

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our sobriety tracking services
  • Personalize your experience and recovery journey
  • Create a ten-year illustrative future portrait and deterministic damage report when you explicitly request a Future Damage Scan
  • Send you important updates about your progress
  • Improve our app's features and functionality
  • Analyze website and app usage, attribution, onboarding, subscriptions, and feature performance
  • Reconstruct sessions, investigate defects, prevent abuse, and improve reliability
  • Provide customer support when needed
  • Comply with legal obligations and enforce our agreements (like our Terms of Service)

3. Data Storage, Service Providers, and Security

Your privacy and data security are our top priorities.

  • Supabase: Provides authentication, database, and cloud storage for account information, sobriety data, settings, and other core app records.
  • PostHog: Provides product and website analytics, attribution, and reconstructed session replay used for research, debugging, and product improvement.
  • RevenueCat: Helps us manage subscription entitlements, product and purchase information, and subscription-related attribution.
  • OpenRouter and Google Gemini: When you explicitly consent and start a Future Damage Scan, Tolbo sends the confirmed square portrait crop and that scan's drinking-pattern answers through OpenRouter to Google Gemini using a Google Vertex endpoint. OpenRouter acts as the routing intermediary and Google processes the request to generate one illustrative ten-year portrait. Tolbo pins this request to the approved Google Vertex route with provider fallback disabled. OpenRouter states that it does not retain prompts unless prompt logging is enabled and does not use inputs or outputs for model training; its configured Google zero-data-retention route excludes Google AI Studio. Review OpenRouter's Privacy Policy, OpenRouter's Zero Data Retention documentation, and Google's Privacy Policy.
  • Apple and Google Sign-In: Provide optional sign-in services. Apple also provides iPhone app distribution, subscription payments, and system services such as notifications. Our website hosting and delivery providers process technical request data needed to serve the site.
  • Local Caching: Some data, like your current streak start date, may be cached locally on your device for faster app performance and offline access to the timer.
  • Encryption: Data transmissions between your device or browser and our service providers use HTTPS/TLS. Our core database provider encrypts stored data.
  • Security Measures: We implement reasonable technical and organizational measures to protect your data, but please remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

4. Information Sharing

We do not sell your personal information or use it for third-party advertising or cross-company advertising tracking. We disclose information only in these limited circumstances:

  • With your explicit consent
  • For a Future Damage Scan, with OpenRouter and Google Gemini only after you confirm that you are 18 or older and agree to that specific transfer and processing
  • To comply with legal requirements or court orders
  • To protect our rights, property, or safety, or that of our users
  • With service providers described above who process data for authentication, hosting, analytics, session reconstruction, subscriptions, app delivery, and support under their contractual obligations
  • In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

5. Data Retention

We retain account and operational data while your account is active and for as long as reasonably needed to provide the service, protect its integrity, resolve disputes, and meet legal obligations. A confirmed Future Damage Scan crop and its generated portrait are stored privately with the saved report so you can reopen it; temporary upload and processing files are removed after completion or failure. Deleting a saved scan removes its report and associated stored images, and deleting your account deletes or schedules deletion of the account and core user-facing records from our operational systems. Historical analytics, support, security, and product-research records may be retained for legitimate business and legal purposes, including records linked to an internal user identifier or account email and content previously captured through analytics or session reconstruction, subject to applicable law. You may contact us to request access to or deletion of personal data retained outside the active account.

6. Cookies and Similar Technologies

Tolbo uses cookies, local storage, and similar device or browser identifiers to authenticate users, remember preferences, measure website and app usage, connect related interactions, and support the analytics and session-reconstruction practices described above. Browser settings can limit some cookies or local storage, but doing so may affect website functionality.

7. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Delete an individual saved Future Damage Scan in the App, or request deletion of your account and data
  • Portability: Export your data in a readable format
  • Opt-out: Unsubscribe from marketing communications and object to certain processing where applicable

8. Additional Rights for Certain Jurisdictions

If you are a resident of the European Economic Area (EEA), United Kingdom (UK), Switzerland, or California, you may have additional rights regarding your personal information under applicable laws. These may include:

  • For EEA, UK, and Switzerland Residents (under GDPR and similar laws):
    • The right to object to processing of your personal data.
    • The right to restrict processing of your personal data.
    • The right to lodge a complaint with a supervisory authority.
  • For California Residents (under CCPA/CPRA):
    • The right to know what personal information is being collected about you and whether it is sold or shared.
    • The right to opt-out of the sale or sharing of your personal information (Note: Tolbo currently does not sell your personal information).
    • The right to non-discrimination for exercising your CCPA rights.

To exercise any rights applicable to you, please contact us using the details provided in the "Contact Us" section. We will respond to your request in accordance with applicable data protection laws.

9. Children's Privacy

Tolbo is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Users

Your information may be transferred to, stored, and processed in the United States and other jurisdictions where Tolbo or its service providers operate. Where required, we rely on appropriate legal safeguards for international transfers.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification for significant changes
  • Displaying a notice in the app

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Operator: Oleksii Yehorov

Email: support@tolbo.app

Back to Home