Privacy policy
Who we are
Tortally is a mobile app for home bakers. The person responsible for your data is Igor Soldatov, an individual, who runs the app and its online service. In this policy, “we” and “us” mean him.
You can reach us at [email protected]. Questions about your data are answered there.
The short version
Your ingredients, recipes, prices and saved quotes are stored on your phone. If you publish a showcase, we receive the information you choose to publish, including cake prices. We also receive data for sign-in, purchases, customer requests, reports, support, optional analytics, and technical operation, as described below. Ads are shown only in the free version and only if you agree to them. We do not sell your personal information.
What stays on your phone
Ingredient names, package sizes and prices, recipes, labor and overhead settings, margins, saved quotes, photos you add, and your baker details are stored in the app on your phone. You can export them as files and restore them from a backup. We cannot recover them if you delete the app without a backup.
What we collect, and why
We collect and use data for the purposes described in this policy.
- Account. If you sign in to publish a showcase, we store a random account ID, your sign-in method (Apple, Google, or email code), the identifier your provider gives us, and your email address if the provider shares it. We use it to let you back in and to keep your showcase tied to you. If you use Sign in with Apple, we also keep an encrypted Apple token so we can revoke it when you delete your account.
- Your showcase. When you publish, we store the cake names, descriptions, prices and photos you choose to show, your public showcase name and web address, and a WhatsApp number if you add one. We remove location data from photos’ EXIF metadata before they go online. Your recipes, ingredient costs and margins are not part of a showcase and are not uploaded.
- Customer requests. When a customer sends a request, we store the customer’s name, one phone number or email address, the cakes they picked, and an optional comment. The baker who owns the showcase receives it. We use it only to deliver the request and let the customer or the baker delete it.
- Purchases. Apple or Google processes your payment. We receive proof of the purchase (such as a transaction ID or purchase token), information about the product you purchased, and your subscription status and dates. We use this information to manage your access to Pro. We never see your card details.
- Reports. If someone reports a showcase, we store the reason and text they write so we can review the report. We do not tell the baker who owns the showcase who submitted the report.
- Consent choices. We store which choices you made (ads, analytics) and when, so we can respect them.
- Technical records. Our application server keeps short-lived logs with request details and errors. To limit abuse, it stores a hashed version of the IP address, rather than the address itself, for at most one day. We do not write raw IP addresses to our application logs. Analytics server logs follow separate rules, described in the Analytics section.
- Support messages. If you write to us, we keep your message and your email address to answer you. Please do not send recipes or a private deletion code.
Ads
The free version can show non-personalized banner ads from our advertising partner, Google AdMob. Google UMP asks for your choice before we request ads. If you decline, we do not request ads, including limited ads. You can keep using the app’s main features.
When ads are allowed, Google may receive your IP address and infer your approximate location. Google may also receive device and app details and device identifiers. It may receive ad views and interactions, crash logs and performance data. We do not send recipes, photos, prices or customer contacts in ad requests.
We do not send the Android advertising ID (AAID). On iOS, the App Tracking Transparency (ATT) request follows UMP. If tracking is allowed in iOS settings, we keep ads off. This prevents use of the advertising ID (IDFA). Google may still receive app-scoped device identifiers. Publisher first-party ID and ad personalization are disabled.
You can change or withdraw your ad consent in Settings → Ad privacy. On iOS, you can also change ATT permission in the device’s tracking settings. ATT permission does not replace your UMP choice.
The one-time “Remove ads” purchase and active Pro turn ads off. This includes the Pro free trial. “Remove ads” keeps ads off after Pro ends. We do not request ads while your purchase status is unknown.
Only one banner can appear, in the saved-offers list in Orders. It can appear after your first save. There are no ads on purchase, restore or publishing screens. Forms, results, exports, previews, inboxes, request details and public showcases are also ad-free.
Google describes its data use in the Google Privacy Policy. Turning ads off stops further ad requests. Deleting local app data does not delete records Google already holds. Use AdChoices in an ad or report it to [email protected].
Analytics
Analytics is off until you turn it on. If you do, the app sends a random installation ID, the app version, the platform, and simple events such as “a screen was opened,” “a quote was saved,” or “a purchase was completed.” Analytics events never include recipes, ingredient names, prices, photos, names, contacts or the content of requests.
This runs on analytics software that we operate ourselves. Its server logs, which include IP addresses and device types, are kept for 90 days. If you turn analytics off, the app deletes events it has not sent yet. To delete events already sent, write to us with your installation ID.
Who else handles data
- Apple and Google run the app stores, handle payments and subscriptions, and provide sign-in if you choose it.
- Google AdMob shows ads in the free version, as described above.
- Our hosting. The online service runs on a server we rent from Netcup, in a data center in the United States. Traffic passes through Cloudflare, which delivers this website and showcase pages and may see technical connection data such as your IP address.
- Our email provider delivers sign-in codes and support messages.
- Authorities. We may share data if the law requires it or to protect people from harm.
Because our server is in the United States, the data we receive is processed there, even if you live elsewhere.
Showcases are public
Anything you put on a showcase can be seen by anyone who has the link. If you add a WhatsApp number, anyone can see it. Copies that others make outside Tortally, such as screenshots, cannot be taken back by us.
Customers who send a request see the baker’s name before they send. A customer’s contact details are shown only to that baker.
How long we keep data
- Account data and showcases: until you delete your account.
- Sign-in sessions: up to 30 days without use, and at most 90 days in total.
- Customer requests: up to 90 days, or until the customer or the baker deletes them sooner.
- Showcase after Pro ends: the page goes offline and stops accepting new requests. Received requests stay available to the baker for up to 90 days.
- Technical logs: 14 days. Records used to investigate abuse, without raw IP addresses: up to 30 days.
- Analytics server logs: 90 days.
- After you delete your account, we remove its data from active systems within 24 hours, from processing queues within 7 days, and from encrypted backups within 35 days.
- A minimal deletion record, containing no recipes, showcase content, or customer request content, is kept for 90 days after cleanup so that deleted data is not restored from an old backup.
- A published web address is kept as a hash (a one-way code) even after deletion, so nobody else can take over an old link. It does not contain your email or contact details.
Security
We use encrypted connections, encrypted disks and backups, and restrict who can reach the data. Data on our server is not end-to-end encrypted, so we can technically read it. No system is perfectly safe. If a breach affects you, we will tell you as the law requires.
Your choices and rights
You can use the main features of Tortally without an account. You can also:
- turn off ads or analytics in the app’s privacy settings;
- export or delete your data on your phone at any time;
- unpublish a showcase, or delete your online account in the app, as described on the Delete account page;
- delete a customer request using the private deletion code from its receipt;
- ask us for a copy of your data, a correction, or a deletion, by writing to [email protected].
Depending on where you live (for example California, other US states, the European Economic Area, the United Kingdom or Brazil), you may have further rights, including objecting to some processing and complaining to your data protection authority. We use your data because you asked for a feature (contract), because you agreed (consent for ads and analytics), and because we need to keep the service safe and working (legitimate interest). We do not use automated decisions that have legal effects on you.
We may ask you to confirm that the account is yours before we act on a request.
Children
Tortally is for adults who run a baking business. It is not meant for children under 18, and we do not knowingly collect data from them. If you think a child has given us data, write to us and we will delete it.
Changes
If we change this policy in a meaningful way, we will update the date above and, where the law requires, ask for your consent again.