Taviloq Privacy Policy

What we collect

Your account

You sign in with Apple. From Apple we receive a user identifier that’s unique to Taviloq, an email address (often an Apple private relay address that forwards to you), and your name if you choose to share it. We use this only to sign you in. Your sign-in email is never shown on your card.

When you use the app, our hosting provider records technical details about your sessions, such as your IP address, device information and sign-in times. These keep your account secure and the service working.

Your professional profile

Your first and last name, job title, company and work email, as you enter them in Edit Profile. They appear on your Taviloq card and on your own entry in your team list. Your work email is separate from your sign-in email, and changing it never changes how you sign in.

The people you capture

When you capture someone, by scanning a card or typing their details, Taviloq stores:

• Contact details: first and last name, company, and if you add them, job title, email address and phone number.
• The conversation: when you met, whether you scanned a card or typed the details, the reason to follow up (from a short list such as “new opportunity” or “partnership”), and any notes you write.
• Follow-ups: who owns the follow-up, its due date, whether it’s done, and the history of changes, such as handing it to a teammate.

Your team list

Colleagues you add so you can hand follow-ups to them: their name, job title and email address. They don’t need a Taviloq account.

What we don’t collect

Taviloq doesn’t use your location, doesn’t read your iPhone’s address book, and doesn’t include advertising, analytics or tracking tools. The holo effect on your card uses your iPhone’s motion sensors on the device only; nothing about it is stored or sent.

Camera, photos and card scanning

Taviloq asks for camera access to scan business cards. You can also pick one photo from your library instead; Taviloq sees only the photo you choose. The text on the card is read by Apple’s on-device text recognition, so the image isn’t sent to us or to anyone else.

The photo is held in memory only while that capture is open and is discarded when you finish or cancel. It’s never saved to your photo library, to files or to our servers. Only the details you review and save are stored.

How we use your information

• To provide Taviloq: signing you in, saving your captures and follow-ups, and showing them on your devices.
• To prepare the follow-up and introduction messages you ask for.
• To answer your support requests and handle deletion requests.
• To keep the service secure and working, and to meet legal obligations.

We don’t sell your information, use it for advertising, or share it with data brokers.

Who receives your information

• Supabase (our hosting provider): Everything Taviloq stores, plus the session details above. Why: To store your data and run the service, on our behalf.
• Apple: Your sign-in request; when you delete your account, a request to disconnect Taviloq from your Apple ID. Why: Sign in with Apple, and revoking it on deletion.
• People you choose to message: The email or text you send from Mail or Messages, which can include a contact’s details and your notes. Why: Follow-ups and introductions. Taviloq opens the message for you to review; you decide whether to send it.
• People who scan your card’s QR code: Your name, job title, company and work email. Why: Sharing your card when you show it.
• Authorities, if required: What the law requires. Why: To comply with a valid legal request.

Messages you send go through your own email account or phone carrier, whose own privacy terms apply.

Who can see your data

Today every account has its own private workspace, and only you can see its contents in the app. If Taviloq later lets you join a team workspace, its members will see the contacts, conversations and follow-ups in that workspace, and we’ll update this policy first.

We can access stored data only to provide support, fix problems, handle deletion requests, protect the service and meet legal obligations.

Information about other people

Much of what Taviloq stores is about people other than you: the people you meet and the colleagues on your team list. Taviloq stores that information on your behalf, to help you follow up with them. Please only enter information you have a right to use, and avoid sensitive personal details in your notes.

If you’re someone whose details were captured in Taviloq and you’d like them removed, email support@taviloq.com with the email address or name we should look for. We’ll find and delete the record.

What stays on your iPhone

• Your sign-in session, kept in the iPhone Keychain so you stay signed in. It’s removed when you sign out or delete your account. If you delete the app, the next install starts signed out.
• Small app settings, such as which tab you last used.

Your contacts, team and profile are kept in memory while you use the app and aren’t saved on the device. They’re cleared when you sign out.

Where it’s stored and how it’s protected

Taviloq’s data is stored by Supabase in Canada (Amazon Web Services, ca-central-1). If you use Taviloq from another country, your information is transferred to and stored in Canada.

• All traffic between the app and our servers is encrypted.
• Each workspace is isolated at the database level, so one account can’t read another’s data.
• Only the app’s limited public key ships in the app; administrative keys and Apple signing keys stay on the server.

No system is perfectly secure. If we learn of a breach that affects your information, we’ll notify you as the law requires.

How long we keep it

• While your account exists: we keep your data so Taviloq works. Things you add stay until you delete your account.
• When you delete your account: your information is removed from Taviloq’s active database. Residual copies may remain temporarily in infrastructure backups or system records maintained by our service providers and are handled according to their retention practices. We do not use such residual copies for ordinary Taviloq operations.
• Support emails: kept only as long as needed to handle your request.

Deleting your account

You can delete your account from inside the app:

1. Open Taviloq and tap your account button, then Account.
2. Tap Delete Account and confirm.
3. Confirm with Sign in with Apple, using the Apple ID you signed in with.

This permanently deletes your profile, your workspace, and every contact, conversation, follow-up and team member in it. It also disconnects Taviloq from your Apple ID and signs you out. It can’t be undone. If deletion can’t finish, your data isn’t deleted and the app tells you what happened.

If you later belong to a team workspace, the team keeps the records it relies on, such as the contacts and follow-up history, but your account and profile are deleted. Your entry on that team’s list is replaced by “Former team member”.

If you can’t delete your account in the app, email support@taviloq.com from any address and include your sign-in email so we can find it. Signing in again later with the same Apple ID starts a new, empty account.

Your choices and rights

• See and correct: your profile, contacts and follow-ups are all visible in the app, and you can edit your profile at any time.
• Delete: delete your account in the app, as described above.
• Camera: turn camera access off in iPhone Settings; you can still choose a photo or type details in.
• Sign in with Apple: you can stop using Sign in with Apple for Taviloq in your Apple ID settings. That signs you out but doesn’t delete your data; use Delete Account for that.

Depending on where you live, you may have further rights, such as asking for a copy of your data or objecting to how it’s used. Email support@taviloq.com and we’ll respond within the time the law requires.

Beta testing

Taviloq is currently in a private beta through Apple’s TestFlight. If you choose to send feedback or a crash report through TestFlight, Apple shares it with us under Apple’s terms.

Children

Taviloq is intended for business and professional use and is not directed to children. We don’t knowingly collect information from children. If you believe information about a child has been provided to Taviloq, email support@taviloq.com and we’ll delete it.

Changes to this policy

If we change how Taviloq handles your information, we’ll update this policy and its effective date. If a change is significant, we’ll take reasonable steps to let you know, such as emailing you or showing a notice in the app.

Contact us

Questions or requests about your privacy, including deletion requests: support@taviloq.com. Taviloq is operated by Michael Tomboc.