Toya Privacy Policy

Last Updated: October 10, 2026

Your privacy and security come first at Toya. This Privacy Policy describes what personal data we collect, how we use it, and the steps we take to keep it safe—all so you can enjoy a secure, reliable, and high-quality experience. We handle your information responsibly and follow all applicable laws.

As the provider of Toya, The Bay Limited acts as the data controller responsible for processing your Personal Data under this Policy. We aim to safeguard your data and provide you with clear information about our data practices.

Please take a moment to review this Privacy Policy so you understand our practices and your rights. If you have any questions or concerns, you can get in touch with us at w55791194@gmail.com.

1.Categories of Personal Data Collected

With a view to preserving the quality, security, and operational integrity of our Services, we are committed to minimizing the volume of personal data collected, restricting our collection to information that is reasonably indispensable for the operation, upkeep, and advancement of the Services. The categories of data obtained are contingent upon the nature of your interaction with the application and the specific functionalities you opt to employ.

1.1 Account and Profile Information

When you register for or use our Services, we may collect the following information you provide voluntarily:

• Account Information: Such as account ID, login credentials, phone number, email address, or third-party account information (e.g., Google), where applicable.
• Profile Information: Including nickname, profile picture, gender, date of birth, personal signature, and other profile details you choose to share.
• Third-Party Account Data: If you sign in through a third-party platform, we may access basic public profile information or other data you authorize through that platform.

1.2 Device and Technical Information

When you access or use the Services, we may automatically collect limited technical information about your device, including:

• Device Information: Device ID or identifiers, device type, brand and model, operating system, app version, country or region code, language settings, and mobile network operator.
• Network Information: IP address, network type (Wi-Fi or mobile data), connection status, and access network state information, used to ensure service stability, optimize performance, and prevent abuse or fraud.
• System and Usage Data: Login history, basic usage patterns, interaction frequency, and feature usage data, used solely for analytics and service improvement.

1.3 Permissions and Feature-Related Data Access

Depending on your use of specific features, the app may request access to certain device permissions. These permissions are used only when necessary and only for the intended functionality:

• Internet & Network State: To enable core app functionality and optimize network performance.
• Camera & Microphone: To support video calls, voice chats, and audio-related features.
• Audio Settings & Wake Lock: To improve audio output quality and ensure uninterrupted playback or calls during active use.
• Storage & Media Access: Access to photos or media files is requested only when you actively choose to upload, select, or share media content within the App, such as setting a profile picture or sending media in chats. On Android 10 or below, external storage access is requested only if you choose to save images or media files to your device.
• Notifications: To deliver service-related alerts and updates. You may disable notifications at any time through device settings.
• Bluetooth: To connect and use Bluetooth audio devices during voice or video interactions.

1.4 User Content and Interaction Data

When you use interactive features of the Services, we may process:

• User-Generated Content: Including text messages, comments, images, audio, video, and live-streaming content you choose to create or share.
• Behavior and Interaction Data: Such as friend lists, browsing or interaction history within the app, and audio-video streaming activity, processed only to provide the requested features and comply with applicable laws.

1.5 Virtual Currency and Payment Information

If you make purchases within the Services:

• Payment details are processed directly by authorized third-party payment providers and are not stored by us.
• We may retain limited transaction records, such as order ID, transaction date, purchase amount, and virtual currency balance, for accounting, fraud prevention, and compliance purposes.

1.6 Communication and Support Data

If you contact us via email or in-app support, we may collect the information you provide, such as your name, email address, and the content of your communication, in order to respond to your request and provide support.

1.7 Additional Feature-Specific Data

• Third-Party App Detection: The app may detect whether certain third-party applications (such as WhatsApp or Google Play) are installed, solely to enable related features, provide compatibility support, or guide user actions. No content or personal data from those apps is accessed.
• Clipboard Access: Clipboard data is accessed only when you actively perform a copy or paste action within the app, and is not accessed in the background, stored, or shared.

2.Purposes of Personal Data Collection

We collect and process your personal information with the objective of furnishing you with a service experience that is more secure, more convenient, and more closely tailored to your individual preferences. The primary purposes underlying our use of your information are enumerated below.

2.1 Providing, Maintaining, and Optimizing Services

We use your registration information and usage data to ensure the proper functioning of Toya's features, identify and resolve technical issues promptly, and continuously improve product performance and user experience.

2.2 Ensuring Account Security and Preventing Risks

Your information helps us verify your identity, detect abnormal logins or suspicious activity, protect your account from unauthorized access and abuse, and safeguard your personal assets and privacy.

2.3 Customer Service and Technical Support

When you reach out for help or report an issue, we use the information we have collected to quickly identify the root cause and provide effective customer support, ensuring your questions are properly addressed.

2.4 Legal Compliance and Regulatory Requirements

To comply with applicable laws, regulations, and regulatory requests, we may use your information to assist with investigations, legal proceedings, or other lawful matters. This helps us ensure the platform operates in a compliant manner and protects the legitimate rights and interests of our users.

We are committed to using your personal information only to the extent necessary to achieve the purposes described above, and we strictly adhere to privacy protection principles to safeguard your information security and rights.

3.Disclosure of Personal Data

We do not sell our users' Personal Data to any third parties.

Toya may use your personal information—including your name, email address, phone number, and other relevant details—either directly or through our third-party service providers to deliver services to you. We may also combine this information to operate, enhance, and develop our products and services.

We may share your information with the following parties:

3.1 Authorized Service Providers

We work with third-party vendors that provide services such as cloud hosting, customer support, analytics, and fraud detection. These providers are granted access to your data solely for the purpose of fulfilling their contractual obligations and are required to protect your information.

3.2 Payment Processors

We engage third-party payment processors to securely manage transactions. They may access billing information and transaction metadata necessary to complete your purchases. We do not store your full payment details.

3.3 Third-Party Integrations

You have the option to link your account with third-party services (such as Google or Apple). These integrations may share limited information, including your user ID, profile details, or authentication tokens, to enable the connection.

3.4 Legal and Regulatory Requests

We may disclose your data when required by law, court order, or other valid legal processes. We may also share information to prevent fraud, enforce our Terms of Service, or protect the rights, safety, and property of our users and the public.

3.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will take reasonable steps to ensure that your data continues to be protected in accordance with this Privacy Policy.

4.Privacy Protection of Minors

Toya is strictly prohibited for use by anyone under the age of 18. The Service is designed exclusively for adult users, and we do not permit, under any circumstances, the use of the Service by minors.

We do not knowingly collect, use, or disclose personal information from minors. If we discover that a minor has registered an account or provided us with personal data, we will take immediate steps to delete the information and deactivate the associated account. If you believe that a minor has provided us with personal information, please contact us at w55791194@gmail.com, and we will assist in reviewing and deleting the minor's data.

Toya is committed to protecting minors' privacy and following all applicable child protection laws in the regions where we operate. The age requirement of 18 is firm, with no exceptions.

5.Personal Data Security

We take the safety of your personal information seriously and work hard to protect it using both technical and organizational measures. With the aim of preventing unauthorized access, disclosure, alteration, or destruction of your data, we employ the following measures:

• Encryption: We use industry-standard encryption protocols (such as HTTPS/TLS) to secure data during transmission and storage.
• Access Controls: We limit access to personal information to authorized personnel only, and all access is logged and monitored.
• System Monitoring: We conduct regular vulnerability assessments and employ security tools to detect and respond to potential threats.
• Staff Training: Our team receives ongoing training on data protection and security practices.

While we strive to protect your information, no system is completely infallible. We encourage you to take precautions when sharing personal data online and to keep your account credentials confidential.

We have also established an incident response plan to address any suspected security breaches. If we detect a potential risk, we will act promptly to contain it and notify affected users as required by applicable laws.

If you have any security concerns or suspect misuse of your account, please contact us immediately at w55791194@gmail.com.

6.Data Storage and Retention

6.1 Storage Location

The information we collect through our Services may be stored and processed in various countries where we or our service providers maintain operations. We ensure that all such transfers comply with applicable data protection laws and that your information remains adequately safeguarded.

6.2 Retention Period

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law.

• For active account holders, we keep your data throughout the duration of your account activity or as needed to deliver our Services.
• For temporary users, we retain your data for a limited period following your last interaction, in accordance with legal requirements.

Once your personal information is no longer needed for the purposes for which it was collected, we will securely delete or anonymize it. In certain cases, we may be required to retain specific data for legal or regulatory reasons, such as fraud prevention, dispute resolution, or compliance with government directives. Such data will be used only for those lawful purposes and deleted once the retention period expires.

6.3 International Data Transfers

Your information may be transferred to and processed in countries outside your own, strictly for the purposes described in this Policy. We take appropriate measures—such as Standard Contractual Clauses—to ensure that cross-border data transfers are adequately protected in accordance with applicable laws.

We are committed to reviewing our retention practices regularly, minimizing data storage where possible, and ensuring a secure environment for all data processing activities.

7.Your Rights

Depending on your place of residence and the data protection laws applicable to you, you may be entitled to certain rights concerning your Personal Data. These rights may include:

• Right of Access: You can ask us whether we are processing your Personal Data and request a copy of the information we hold about you.
• Right of Data Portability: You may request your Personal Data in a structured, commonly used, and machine-readable format, which can be provided to you or transmitted to another service provider where technically feasible.
• Right to Deletion: You may request that we delete your Personal Data, subject to certain legal exceptions that may require us to retain it.
• Right to Rectification: If you believe any information we hold about you is inaccurate, incomplete, or outdated, you can ask us to correct or update it.
• Right to Restrict or Object to Processing: You may ask us to limit or stop processing your Personal Data in specific circumstances.
• Right to Limit Use of Sensitive Data: You can request that we restrict the collection and use of your sensitive Personal Data to what is strictly necessary for providing our Services.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
• Right to Opt Out of Automated Decisions: You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects on you, except where necessary for providing our Services or where you have given explicit consent.
• Right to Opt Out of Data Sales or Sharing: If we share your Personal Data for targeted advertising purposes, you may opt out. Please note that we may still share limited information with trusted service providers for essential business operations.
• Right to Non-Discrimination: We will not treat you differently for exercising your privacy rights. This means we will not deny you services, charge different rates, or provide a lower level of service simply because you have made a privacy-related request.

Please be aware that the aforementioned rights are not absolute in nature and remain subject to the exceptions and limitations prescribed by applicable law. We may be obligated to retain certain information for reasons pertaining to security, legal compliance, or operational necessity.

If you wish to exercise any of these rights, please contact us at w55791194@gmail.com.

8.Exercise Your Rights

8.1 Submitting a Request

If you wish to access, correct, delete, or exercise any other rights over your Personal Data, please email us at w55791194@gmail.com. To help us process your request efficiently, include sufficient information for us to verify your identity and clearly describe what you are requesting. Any information collected during verification will be used solely for handling your request and will not be retained afterward. You do not need to have an account to submit a privacy request.

8.2 Deleting Your Account and Data

You may delete your account at any time through the app: go to Settings > Account Cancellation and confirm your choice. Once confirmed, your account and all associated data will be permanently removed and cannot be restored. Please note:

• Information others have shared about you (such as messages they sent) will not be removed.
• We may retain certain data where required by law, or for purposes such as fraud prevention, dispute resolution, or regulatory compliance.
• Backup copies may be kept temporarily for system recovery or auditing purposes.

If you need help with the deletion process, contact us at w55791194@gmail.com.

9.Third-Party Services and Websites

Our Services may contain links to or integrate with external websites, apps, or platforms operated by third parties. Please note that this Privacy Policy does not apply to the data practices of those third parties—we do not control, endorse, or assume responsibility for their content, security, or privacy practices. If you choose to connect your account with an external service, we may share limited information with that service to enable the integration, such as your user ID or profile details. Your use of any third-party service is entirely at your own risk, and we encourage you to review their privacy policies carefully before interacting with them. We are not liable for any loss or damage arising from your use of or reliance on any third-party services, content, or products.

10.Updates to This Privacy Policy

We may update this Privacy Policy from time to time to keep up with changes in laws, technology, or how we operate. If we make important changes, we will let you know through the app or by email before they take effect, and we will point out the key updates. The "Last Updated" date at the top will be changed accordingly. If you keep using our Services after the updates take effect, that means you accept the revised terms. We encourage you to check this policy regularly to stay informed about how we protect your information.

11.Contact Us

If you have any questions, concerns, or feedback about this Privacy Policy or our data practices, please contact us at w55791194@gmail.com. You can also reach us through the in-app customer support feature for app-related inquiries. We will do our best to respond within a reasonable timeframe.