Privacy & data
This policy explains the information Togya needs to run shared tutorial activities, and the choices you have over it.
Last updated: August 24, 2026This policy applies to the Togya mobile apps, website, and related services.
We collect account identifiers and sign-in information supplied by email, Apple, or Google; profile details you choose to add; activities, follows, stage progress, questions, answers, reports, and photos you submit; and limited device, security, and reliability events needed to operate the service.
We do not ask for your password. One-time codes and authentication tokens must never be sent to Support.
We use information to authenticate you, provide and personalize activities, preserve progress, show content according to activity and stage permissions, prevent abuse, moderate reports, support users, diagnose failures, and comply with lawful obligations. Togya does not sell personal information or use it for cross-service behavioral advertising.
Public activities, creator profiles, display names, and public contributions may be visible to anyone using Togya. Private activities and stage-limited content are shown only to authorized people. A verified video creator does not gain access to private participant photos or private discussions merely by owning the source video.
When you sign in with Google, Togya receives your Google account identifier, email address, profile name, and profile image. If you separately connect YouTube, Togya stores revocable OAuth access and refresh tokens and, depending on the permission you grant, may receive your YouTube account or channel identifier and the source-video context needed to prepare or publish a comment that you explicitly review and approve.
We disclose Google user data only to: Google or YouTube through OAuth and API requests, to authenticate you, refresh permission, read connection status, and publish the exact comment you approved; contracted infrastructure, database, security, and monitoring processors that host, encrypt, transmit, or protect Togya; and email-delivery processors only when we send a security or service notice to your Google-provided address. These processors may use the data only on our instructions to provide their contracted service. We may also disclose data when legally required, or as part of a corporate transaction subject to this policy and appropriate notice.
We do not sell Google user data, use it for advertising, disclose OAuth tokens to other users or source-video creators, or send Google OAuth tokens or Google account data to AI model providers. AI-assisted comment drafting uses activity, stage, and source-video context; the draft is shown to you and no comment is sent until you expressly approve it.
You may disconnect YouTube in Togya’s Connected apps screen or revoke Togya in your Google Account permissions. Disconnecting or deleting your Togya account removes the stored provider tokens in accordance with our retention and security obligations. Togya’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
We also use infrastructure, email delivery, security, monitoring, and media-storage providers to run the rest of Togya. If you play or open a YouTube or Vimeo tutorial, that platform may receive information under its own privacy policy. Apple and Google process sign-in information when you choose their sign-in services.
We retain account and activity data while your account is active and as needed for security, dispute resolution, backups, and legal duties. Short-lived authentication and upload records expire automatically. We use access controls, encryption in transit, revocable sessions, bounded logs, and separated media storage, but no online service can promise absolute security.
You may edit profile information, change activity visibility, unfollow or block people, remove your own content, withdraw eligible reports, revoke linked sign-in methods when another method remains, or delete your account in the app. Deletion instructions are available at togya.com/account-deletion.
Togya is not directed to children under 13. People must also meet any higher minimum age required where they live. Do not post a child’s personal information or image without lawful authority. Use the in-app urgent report path for child-safety concerns.
The sign-in screen links this Privacy Policy, the Terms of Use, and the Community Guidelines before you continue. Questions or privacy requests can be sent to [email protected]. We may update this policy as the service changes. Material changes will be shown in the app, and a new acceptance may be required where appropriate.
