Privacy Policy
Effective November 13, 2026
Toat is a personal assistant that does tasks for you in your apps, using a phone it operates in the cloud. This policy explains what we collect, why, who helps us run the service, and the choices you have. "Toat", "we" and "us" mean Tulsee Corp., which makes Toat.
- We use your information to do what you ask and to keep Toat working. We don't sell it, and we don't use it for advertising.
- To do tasks, we send your requests, our chats and what's on your Toat phone's screen to Anthropic's AI models (Claude). We ask your permission before you start.
- Toat asks you before it buys anything, sends a message or posts as you.
- You can delete your account, your Toat phone and everything on it, at any time, from Settings in the app.
What we collect
| Information | Why |
|---|---|
| Your mobile number | To sign you in with a text message code and keep your account secure. |
| Invite codes you used or shared | Toat is invite-only during the beta. |
| Your requests and our chats | To understand and carry out what you ask, and to show you the history. |
| Your Toat phone: the apps installed on it, the accounts you sign in to there, what's on its screen while Toat works, and the steps Toat takes | Toat does tasks on this phone for you. You can watch it and take over. |
| Approvals and answers you give Toat | So Toat only acts with your go-ahead. |
| App usage: which screens you open and features you use, and an app install identifier | To understand what works and fix what doesn't. Not used for advertising or tracking across other companies' apps. |
| Device and diagnostic data: app and iOS version, device model, crash and performance reports, and problem reports you choose to send (with the app's recent log) | To find and fix bugs. |
| Notification token | To send notifications you allowed, such as when Toat needs you. |
We don't ask for your passwords. When an app on your Toat phone needs you to sign in, you do it yourself on that phone; the app keeps you signed in there, as it would on any phone.
How we use it
- To provide Toat: carry out your requests, operate your Toat phone, and show you what happened.
- To keep Toat safe and reliable: prevent abuse, limit how many codes and tasks can be requested, and fix problems.
- To improve Toat, using usage and diagnostic data.
- To contact you about your account or the service, for example by notification.
Who we share it with
We share information only with companies that help us run Toat, under contracts that limit how they can use it, or when the law requires it.
- Anthropic (AI models): your requests, chats and what's on your Toat phone's screen while it works, so the AI can understand the task and decide the next step. Anthropic's commercial terms do not allow it to train its models on this data.
- Twilio (text messages): your mobile number, to send sign-in codes.
- Amazon Web Services (hosting): stores and runs the service, including your Toat phone, in the United States.
- Apple: to deliver notifications to your iPhone.
When Toat uses an app on your behalf, that app's own company receives what you or Toat do in it, as it would if you used the app yourself. Their privacy policies apply to them.
We don't sell your personal information or share it for advertising.
How long we keep it
- Your account, chats, tasks and Toat phone: until you delete your account.
- App usage events: 90 days. Crash, diagnostic and problem reports: 180 days.
- Records of sign-in codes sent: 1 day. Signed-in sessions expire after 30 days.
- Encrypted backups are kept for a limited time and deleted as they expire.
Your choices
- Delete your account in the app: Settings → Delete account. This deletes your Toat phone and everything on it, your chats, tasks and invites.
- Notifications: turn them off in iOS Settings at any time.
- Watch or take over: you can see what Toat does on its phone, and you approve purchases, messages and posts.
- Ask us for a copy of your information, to correct it, or to delete it, at the address below. Depending on where you live (for example California), you may have further rights; we won't treat you differently for using them.
Security
Information is encrypted in transit and at rest. Each Toat phone is a separate virtual phone with its own encrypted storage, and it can't reach our internal systems. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.
Children
Toat is for adults 18 and over. We don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect. The date at the top shows the latest version.
Contact
Questions or requests: support@toat.it, or see Contact us.
Tulsee Corp.