Privacy Policy

Privacy Policy for Toolitex

Toolitex (“we”, “our”, or “us”) values your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

Toolitex — Victor Bjørn Media
Kløvervej 5, 8700 Horsens, Denmark
📧 hello@toolitex.com

2. What Data We Collect and Why

a) Core Tools

Inputs you enter into calculators, converters, or generators are processed locally only. We do not receive, track, or store this data.

b) Community Ideas & Voting

Ideas: We store the submitted text, a timestamp, and whether moderators approve it.
Legal basis: Consent (you voluntarily submit the idea).
⚠️ Please do not include personal information in idea submissions. If personal data is inadvertently submitted, it will be deleted upon discovery.

Votes: We store a random device ID (saved locally on your device) and one record of your vote per idea.
Legal basis: Legitimate interest (to ensure one vote per device).

c) Local Storage

We save a random voter ID in your app/browser to support voting. You can delete it anytime by clearing app/browser data.

d) Diagnostics & Performance (via Firebase, if enabled)

• Crashlytics & Performance Monitoring: crash logs, error traces, device model, OS version, network performance.
  Legal basis: Legitimate interest (to improve stability).
• Analytics (if SDK integrated): tool usage events (e.g., which calculators are opened, session length, device type).
  Legal basis: Consent (opt-in required).
• Messaging (if enabled): device push notification tokens.
  Legal basis: Consent (opt-in required).
• Authentication (if enabled): login credentials you provide (email or social login).
  Legal basis: Contract (to provide an account).

3. What We Do Not Collect

We do not collect:

• ❌ Names
• ❌ Addresses
• ❌ Phone numbers or contacts
• ❌ GPS or precise location data
• ❌ Advertising IDs (unless Firebase Analytics is enabled, in which case it requires consent)

4. Data Retention

• Ideas: Retained until deletion is requested or after 24 months.
• Votes: Retained until the related idea is archived or deleted.
• Crash & performance data: Retained per Firebase defaults (~90 days).
• Push tokens: Retained while notifications are enabled.
• Auth data: Retained as long as your account exists.

5. Legal Bases for Processing

We process data only where a valid legal basis applies:

• Consent (ideas, analytics, notifications).
• Legitimate interest (voting integrity, crash reporting).
• Contract (if you create an account).
• Legal obligation (if required by law).

6. Consent Mechanism

For optional features (analytics, notifications, etc.), we ask for your explicit consent in-app before enabling them. You can withdraw consent anytime via settings or by contacting us at hello@toolitex.com.

7. Data Security

All Firebase data is encrypted at rest and in transit. Access is restricted to authorised personnel only. We apply data minimisation principles to collect only what is necessary.

8. Processors and International Transfers

We use Firebase (Google LLC) as our cloud provider. Transfers outside the EU are safeguarded by Standard Contractual Clauses (SCCs).

9. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, port, or object to processing of your data, and withdraw consent at any time.

📧 To exercise your rights, contact: hello@toolitex.com

10. Right to Lodge a Complaint

You may lodge a complaint with your local Data Protection Authority. Our lead authority is the Danish Data Protection Agency (Datatilsynet).

11. Children’s Privacy

Toolitex is not directed at children under 16. If you are under the digital consent age in your country, you must have parental consent.

12. Changes to This Policy

We may update this Privacy Policy. Updates will be posted in-app and on our website with the revised date.

📌 In Summary

Toolitex is privacy by design. Most processing happens locally. Community features (ideas, votes) use Firebase, and optional features (analytics, notifications) require consent. We collect only what’s necessary.