This policy explains what data Tova通话 collects, why, and how you can
control it. Tova通话 is published by the developer operating under the
contact email listed below; "we", "us", and "our" refer to that same
entity.
1. Data we collect
Text you ask us to translate, plus the source and
target language codes. This is sent over TLS to our backend, which
forwards it to the translation engine you have selected (Google
Translate by default, optionally DeepL, OpenAI, or Baidu on Pro).
Translation text is not persisted on our servers beyond the request
lifetime, and is not used to train models.
OCR results. Images captured by the camera are
processed on-device using Apple VisionKit and Google ML Kit. Only
the recognised text string is transmitted to the backend; the image
itself never leaves your device.
Voice input. When you use the Speak tab,
transcription happens entirely on-device via Apple Speech (manual
mode), Android SpeechRecognizer (manual mode on Android), or
OpenAI Whisper running locally on your device (auto-detect mode,
both platforms). Audio is never transmitted to our servers, to
OpenAI, or to any third party — only the recognised text string
is sent to the translation backend, the same way typed text is.
The Whisper model file (~75 MB) is downloaded once on first
use of auto-detect mode from the public Hugging Face mirror;
Hugging Face sees your IP address and the public model identifier
but no Tova-specific account or device identifier.
App settings, favourites, glossary, and history.
Stored locally on your device via SharedPreferences and SQLite.
Never transmitted, except that glossary entries can be synced
between your own iCloud-linked devices via Apple's
NSUbiquitousKeyValueStore (iCloud Key-Value Store).
Apple In-App Purchase receipts. Receipts are sent
to our backend only for server-side verification, per Apple
guidelines. No card data is ever seen by us.
Crash reports. If the app crashes, a signature
(error message + top 8 stack frames) and light environment data
(OS version, UI language, active service, Pro status, last screen)
are sent to our backend for diagnostics. No personal identifiers
and no message content.
Feedback you submit in-app. The message body, the
email address you provide, and light environment data (OS, active
language, Pro status). Used to reply to you and triage issues.
Advertising identifiers (free tier only). If you
grant App Tracking Transparency permission, the iOS advertising
identifier (IDFA) is shared with Google AdMob to deliver
personalised ads. If you deny permission, only non-personalised
ads are served.
EU / UK / Switzerland advertising consent (free tier
only). Before any ad SDK initialises, users in the EEA,
UK, and Switzerland are presented with a consent form via
Google's User Messaging Platform (UMP). Your selection is
stored on-device by the SDK and determines whether AdMob is
permitted to load. If you decline or no consent is given, no
ads are shown.
2. Data we do NOT collect
Your name or contact details, unless you voluntarily submit them
via in-app feedback or email us directly.
Precise location. We do not request location permission.
Camera roll contents beyond the specific image you choose to
translate.
Health, financial, or biometric data.
3. Third parties
Translation engines. Text you translate is routed
through the engine you select: Google Translate, DeepL, OpenAI, or
Baidu. Their respective privacy policies apply to text routed
through them.
Apple. For In-App Purchase, Text-to-Speech,
Speech-to-Text, VisionKit, the Translation framework, iCloud
Key-Value Store, and the App Store.
OpenAI Whisper (open-source model). When you
enable the auto-detect language toggle on the Speak tab, Tova
uses an on-device Whisper model to transcribe your voice. Audio
is processed entirely on your device; no voice data is sent to
OpenAI, Hugging Face, Tova, or any other server.
Hugging Face. Hosts the public Whisper model
file that Tova downloads once on first use of auto-detect mode.
Hugging Face sees your IP address and the public model
identifier; no Tova-specific account or identifier is shared.
Google AdMob (free tier only). For serving
advertising. AdMob may collect the data described in Apple's ATT
prompt if you grant permission.
Google User Messaging Platform (UMP). Used to
obtain GDPR / e-Privacy consent for advertising in the EEA, UK,
and Switzerland before any ad SDK initialises. Your consent
selection is stored on-device.
Gmail SMTP for transactional email (your feedback
receipts and internal support notifications).
We do not share data with data brokers.
4. Retention
Translation requests are not retained on our servers. Feedback entries
you submit and crash reports are retained for up to 24 months for
triage and product-quality purposes, then deleted. Favourites, glossary
terms, and scan history live exclusively on your device; uninstalling
the app removes them.
5. Children
Tova通话 is not directed at children under 13 and does not knowingly
collect data from them.
6. Your rights & privacy choices
You can exercise these privacy choices at any time:
Opt out of advertising tracking. Tova requests
App Tracking Transparency permission for the iOS advertising
identifier (IDFA) on the free tier. Decline the prompt at first
launch, or revoke at any time via iOS Settings →
Privacy & Security → Tracking → toggle
Tova通话 off. With tracking denied, no IDFA is shared with
Google AdMob; only non-personalised ads are served.
Reset your advertising identifier.iOS Settings → Privacy & Security → Apple
Advertising → Reset Advertising Identifier generates a
new IDFA, severing prior ad-attribution links.
Remove ads entirely. Pro, Pro Plus, and Team
subscriptions disable Google AdMob; no IDFA is collected or
shared on those tiers.
Delete or access your server-side data. Email
support@tovatranslate.app
with subject "Delete my data" or "Data access
request" and we will respond within 30 days. Include the
email address you used to submit feedback so we can locate
your records.
Delete all local data. Uninstalling the app
removes favourites, glossary, scan history, and cached offline
phrase packs. iCloud-synced glossary entries clear when you
uninstall on every linked device or disable iCloud Key-Value
Storage for Tova.
California residents (CCPA / CPRA). You have the
right to know what personal information we collect, the right to
delete it, the right to correct inaccuracies, and the right to
opt out of the "sale" or "sharing" of
personal information. Tova does not sell personal information for
monetary consideration. Sharing the iOS IDFA with Google AdMob to
serve personalised ads may be classified as "sharing"
under CPRA — you can opt out by declining the App Tracking
Transparency prompt, revoking tracking in iOS Settings, or
upgrading to a paid tier (which disables AdMob entirely). We do
not discriminate against users who exercise these rights.
EEA, UK, and Switzerland (GDPR / UK-GDPR). In
addition to the rights above, you have the right to data
portability, the right to object to processing based on
legitimate interest, and the right to lodge a complaint with your
local supervisory authority. Our lawful bases for processing are:
contract performance (translation requests, IAP receipts),
legitimate interest (crash diagnostics, feedback triage,
security), and consent (advertising tracking, managed via
Google's User Messaging Platform).
7. International transfers
Our backend and its third-party services operate in the United
States and the European Union. By using Tova通话 you consent to the
transfer of the limited data described above to those jurisdictions.
8. Changes to this policy
Material changes will be surfaced in-app on the next launch after the
update. The effective date at the top tracks revisions.