Privacy Policy

This policy explains what TobyVerse collects, why it is used, where it may be processed, and how you can manage or delete it. It applies to TobyVerse at tobyverse.ge and its related features.

Who is responsible

TobyVerse operates this service and is responsible for the information described here. For privacy questions or requests, email hello.tobyverse@gmail.com. Please do not send passwords, identity numbers, or other sensitive details in your request.

Information TobyVerse handles

• Account and sign-in details: your Firebase user identifier and, when provided by Google or Apple, your name, email address, and profile image. The sign-in provider handles its own sign-in data under its privacy terms.
• What you put into TobyVerse: prompts, conversation history, project names and settings, uploaded materials, extracted text, notes, generated study or work items, feedback, and files you choose to share. Material text and images can contain personal information about you or other people.
• Usage and account settings: model-token usage, chat and generation counters, storage size, plan status, selected model and chat mode, theme, and other preferences needed to provide the service and enforce its limits.
• Memory and adaptation: preferences you ask TobyVerse to remember, and concise patterns about how you communicate, learn, or work. During ordinary signed-in conversations, TobyVerse may analyze a bounded sample of recent turns to update these notes and project-topic connections. This background process is limited in frequency; it stores the resulting notes, not a separate transcript of the sample. It is intended to make replies more useful, not to make decisions with legal or similarly significant effects about you.
• Technical and security information: authentication/session identifiers, request status, upload size and content type, timestamps, and infrastructure logs that may include IP address and browser/device details. We use these to operate, troubleshoot, and protect the service. We do not use a third-party advertising or cross-site analytics service in the current app.

How we use it

We use information to:

• Sign you in, maintain your account, and keep your projects and conversations available.
• Read and index materials, answer requests, create notes and other items you ask for.
• Apply your saved preferences and, where relevant, adapt replies to recurring patterns.
• Measure service usage, apply plan limits, prevent abuse, debug failures, and secure TobyVerse.
• Respond to support, legal, and data-rights requests.

AI processing

TobyVerse sends text prompts, relevant conversation context, selected project text, and TobyVerse instructions to Anthropic's Claude API to generate responses. When a request includes an image that needs visual understanding, TobyVerse sends that image and request to Google's Gemini 3.1 Flash Lite API. Saved-material search also sends text to Google's Gemini embeddings API. Each provider processes inputs under its applicable terms.

Do not submit confidential, highly sensitive, or third-party information unless you have the right to do so and accept the processing described here. Gemini's API terms may distinguish between paid and unpaid usage; TobyVerse does not show the billing status of its Google API project in the app.

Read Anthropic's legal terms and policies and Google's Gemini API terms for the details that apply to provider processing.

Uploads, OCR, and storage

• Photos: TobyVerse compresses and re-encodes supported photos before storing them. It keeps the compressed image and an extracted-text file for OCR results; that text file can be empty when no text is readable. When visual understanding is requested, the image is sent to Google Gemini 3.1 Flash Lite as described above.
• Other documents: the original file is used for processing and is normally removed from material storage after its extracted text has been successfully saved. Extracted text remains attached to the material so TobyVerse can search it and answer questions. If processing fails, the uploaded file may remain temporarily so processing can be retried or the material can be removed.
• Deletion: deleting a material or project removes its active records and associated stored objects through the app's deletion flow. Provider logs, security records, or backups may retain limited copies for the time their systems require or the law permits. Do not treat deletion as a way to revoke copies someone has already downloaded from a shared link.

Memory and your controls

Memory is part of normal signed-in use. It can include response instructions you shared, useful communication or work preferences, and cautious observations based on conversation patterns (up to 14 recent turns per sample, with no more than one observation every 90 seconds or 12 in a UTC day for an account). Saved preferences and observations are used only when relevant, and your current request takes priority. TobyVerse filters recognizable sensitive information before Memory updates, but these filters are not perfect and cannot guarantee that every sensitive detail will be detected. You can review and remove saved entries in Account Settings. Clearing them does not prevent future conversations from producing new, relevant Memory entries. A request not to remember something, or a confidential marker, is excluded from Memory processing; it can still remain in the chat or project where you sent it until you delete that content.

Sharing

If you create a public share link, the conversation and the materials or generated items selected for that share can be viewed by anyone who has the link. Do not share content you want to keep private. You can turn off a link in the app; people may still have copied or downloaded content while it was available.

Service providers and international processing

TobyVerse shares information with Google services for sign-in, hosting, database and file storage, Gemini image understanding, and Gemini embeddings, and with Anthropic for Claude text generation. Each service is governed by its applicable provider terms. Processing may occur in the United States or other countries where these providers operate. The protections for an international transfer depend on the service and the terms that apply to it. We do not sell personal information or use it for targeted advertising.

Cookies and device storage

TobyVerse uses the browser storage required for sign-in/session handling, theme and display preferences, and limited scheduling or interface state. Google sign-in and hosting may also use their own essential cookies or similar technologies. You can manage browser storage in your browser; removing it may sign you out or reset preferences.

How long we keep information

We keep account, project, chat, Memory, and retained material data while your account and content remain active, or as needed to provide the feature you chose. Usage counters follow the plan periods shown in the app. We remove active account and project data when you delete it or delete your account, subject to legal obligations and limited provider log or backup retention. Temporary upload files are kept only as needed to complete or retry processing.

Your choices and rights

Account Settings lets you export a limited JSON summary of profile, plan, usage, Memory, and project metadata, and request account deletion. You can also delete individual chats, projects, materials, and Memory entries in the app. For access, correction, deletion, restriction, portability, objection, or other rights available under the law that applies to you, email hello.tobyverse@gmail.com. We may ask for enough information to verify that the request is yours. You may also complain to the competent data-protection authority.

Children

TobyVerse is not designed for children under 13, and they may not create an account or use the service. If you believe a child under 13 has provided personal information, contact us so we can review and remove it. A parent or guardian should supervise use by anyone who is not yet an adult where local law requires it.

Security and changes

We use access controls and service-provider security features to protect information, but no internet service can promise absolute security. We will update this page when our data practices materially change and revise the date above. If a change requires notice or consent, we will provide it as required by law.

Contact

For privacy requests or questions, contact hello.tobyverse@gmail.com.