Privacy Policy

Who we are

Tocktopus is made and published by Nonius BV, a company registered in Belgium under enterprise number 0807.240.235 — the same figure as its VAT number, BE 0807.240.235 — with its registered office at Bareelstraat 5, 9200 Dendermonde, Belgium.

For anything on this page, write to privacy@tocktopus.com. We are the data controller for the little that is described below.

What the app stores

On your device, and only there:

• Your tempo, time signature, subdivision and volume.
• The four sounds in use and any sounds you have saved into groups.
• Which skin is active.
• Whether you have an active subscription or a purchased skin.

This is held in the operating system's own app storage. Deleting the app deletes all of it. We cannot read it, and there is nowhere for us to read it from — the app has no server.

What the app does not do

• No account. There is nothing to sign up to, so there is no name, no email address and no password.
• No analytics. We do not measure sessions, taps, tempos, retention or crashes. We genuinely do not know how you use it.
• No advertising network. The single line of text in the free tier is written by us and stored inside the app. No third party is contacted to decide what it says, no advertising identifier is read, and nothing about you is used to choose it. Everyone sees the same lines in the same order.
• No permissions. The app does not ask for the microphone, the camera, contacts, storage or location, and it cannot request them later without an update you would have to install.
• No cookies in the app. This website sets none either.

Purchases

When you buy a subscription or a skin, the transaction is handled entirely by Apple or Google. We never see your card, your address or your name. What comes back to the app is the answer to one question: is this entitlement active.

To keep that answer correct across your devices and after a reinstall, we use RevenueCat, Inc. as a processor. RevenueCat receives a randomly generated identifier that is not linked to you, the purchase receipt issued by the store, and coarse technical data such as the country and platform of the purchase. It does not receive your name or your payment details, because we do not have them either.

RevenueCat processes this data outside the European Economic Area. That transfer is covered by the European Commission's Standard Contractual Clauses under our data processing agreement with them.

The links in the free tier

Tapping the promotional line opens a page in your browser. Some of those links carry a referral tag, which tells the shop that the visit came from Tocktopus and nothing about who you are. Once you are on someone else's website, their privacy policy applies and not ours.

Legal basis

Under the GDPR, the only processing we carry out is the purchase validation described above, and its basis is performance of a contract (Article 6(1)(b)) — you bought something and it has to keep working. There is no processing based on consent, because there is nothing here that would need it, and therefore no consent banner.

How long anything is kept

Settings live on your device until you delete the app. Purchase records are kept by RevenueCat and by the stores for as long as the entitlement can be restored, and by the stores for as long as their own tax and accounting obligations require.

Children

The app is rated for all ages and is safe for children to use, but it is not directed at children specifically and it collects nothing from anyone, of any age. There is no chat, no user-generated content and no way for one person using the app to reach another.

Your rights

You have the right to access, correct, erase, restrict and object to the processing of your personal data, and to data portability. In practice there is very little to exercise them against: to erase everything the app holds, delete the app. For the purchase records, write to privacy@tocktopus.com and we will pass the request to our processor.

If you think we have handled your data badly, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels.

Changes

If this policy changes in a way that matters — a new processor, a new category of data — the version and date at the top change with it, and the app will say so before the change takes effect. Older versions are available on request.