Privacy Policy
Last updated: October 11, 2026
This policy explains what information TOCO by Dr. Jyotika (“we”, “us”) collects when you use our website and mobile app, how we use it, and the choices you have. By using the service you agree to this policy.
Information we collect
Account information — your name and email address, and your phone number if you add one. If you sign in with Google, we receive your name and email from Google. If you sign in with Apple, we receive your name (the first time only) and either your email or an Apple private relay address, if you choose to hide your email.
Learning activity — the courses you have access to, units you open and complete, MCQ attempts, flashcard reviews, bookmarks, highlights you make in the reader (the highlighted text, its colour and a little surrounding text so we can place it again), study-calendar events, exam goals, the highlight stories you view, and coins you earn. This powers your progress, streak, countdown and highlights.
Searches in the app — what you type into search, how many results it returned, and which result you opened. We use this to improve search, for example by adding medical abbreviations it missed.
Notification token — if you allow notifications, a push token for your device and whether it is iOS or Android, so we can tell you when a course you bought is ready.
Payment records — for each purchase, the course, amount, date, status and Razorpay order and payment references. We never see or store your card or bank details.
Technical data — standard server logs kept by our hosting providers (such as IP address, browser or app version, and time of request), used to run and secure the service. When the app checks for updates, Expo receives your platform and app version.
We do not use analytics or advertising SDKs, we do not track you across other apps or websites, and we do not collect advertising identifiers.
How we use your information
To provide the service — show your courses, track progress, and sync across your devices.
To maintain your streak, accuracy, and exam countdown.
To send notifications you have allowed, such as when a course you bought is ready.
To secure your account and prevent abuse.
To improve the product and respond to your support requests.
We do not sell your personal data, and we do not use it for third-party advertising.
Service providers
Supabase — hosts our database, authentication, and storage. Your data is stored there and protected by row-level security so it's scoped to your account.
Vercel — hosts this website.
Google — used if you choose Google sign-in, to verify your identity. On Android, Google's Firebase Cloud Messaging delivers notifications.
Apple — used if you choose Sign in with Apple, to verify your identity. On iPhone and iPad, Apple's push service delivers notifications.
Expo — sends our notifications on to Apple and Google, and delivers app updates.
Razorpay — processes payments for course purchases. It receives your name and email, pre-filled from your account and editable at checkout, plus an internal reference to your account and the course you're buying. Your card details go to Razorpay directly, not to us.
Cookies & local storage
On the web we use a session cookie to keep you signed in. In the mobile app we store your session, your preferences (such as theme and highlight colour), and a list of units you recently opened on the device, so you can pick up where you left off. These are required for the service to work; we don't use tracking or advertising cookies.
Your rights & choices
You can see your account details and sign-in methods in Settings on the website and Profile in the app.
You can turn notifications off at any time in your device settings.
You can delete your account yourself at any time, from Profile in the app or Settings on the website. How to delete your account.
You can request a copy of your data by emailing us.
Data retention
We keep your account data while your account is active. When you delete your account, we delete it immediately: your profile, sign-in methods, progress, highlights, bookmarks, study plan and course access. We keep payment records (amount, course, date and Razorpay reference) for as long as tax law requires, with no link to your account.
Children
The service is intended for medical students and other adults preparing for examinations. It is not directed at anyone under 18.
Changes to this policy
We may update this policy from time to time. We'll revise the “last updated” date above and, for material changes, give notice in the app.
Contact
Questions or requests? Email jyotika.obgyn@gmail.com.