TOXICA — THE FINE PRINT
Privacy Policy
Last updated: July 18, 2026
TOXICA is a daily social voting app: ten fictional scenarios of bad behavior a day, you vote, you see the split, you argue about it. This policy explains what data we collect to run that, what we do with it, and what we deliberately don't do.
What we collect
- Account data — your email address (sign-in), an internal user ID, and your date of birth. Date of birth exists for one reason: TOXICA is strictly 17+ and we have to be able to prove we checked.
- Your content — votes, comments, remixed scenarios, follows, blocks, and reports you file.
- Usage data — product analytics events (screens viewed, votes cast, shares) tied to your user ID, never your email. We use this to learn whether the ritual works, not to profile you.
- Crash diagnostics — if the app breaks, an error report is sent without personally identifying information.
- Purchase status — whether you hold a Community subscription. Payment itself happens through Apple or Google; we never see your card.
- Push token — only if you opt in to the daily notification. Opting out removes it.
What we don't do
We do not sell your data. We do not share it with data brokers. We do not track you across other apps or websites, and we show no ads. Analytics are first-party product analytics, full stop.
Who processes data for us
A small set of service providers process data on our behalf, under their own security obligations: Supabase (database and authentication), PostHog (product analytics), Sentry (crash reporting), RevenueCat (subscription status), and Expo (push notification delivery). Text you post publicly (comments, remixes) is additionally scanned by an automated moderation service, and flagged content is reviewed by a human. All data is encrypted in transit.
Retention and deletion
Your data lives as long as your account does. You can delete your account in the app — Settings → Delete my account — and deletion is real: your sign-in record, profile, votes, comments, preferences, and push tokens are erased server-side. One disclosed exception: remixed scenarios you published stay live, de-identified, because other people's votes and comments hang off them.
Subscription billing records are managed by Apple or Google under their policies; cancel through your store account.
Age
TOXICA is for people 17 and older. An age gate runs before anything else in the app, and we do not knowingly collect data from anyone under 17. If you believe someone under 17 is using TOXICA, contact us and we'll remove the account.
Your rights
Depending on where you live, you may have rights to access, correct, export, or erase your personal data. Deletion is self-serve in the app; for anything else, email us and we'll sort it out.
Changes
If this policy changes in a way that matters, we'll say so in the app before it takes effect. The date at the top always tells you when it last moved.
Contact
legal@toxi.life