Privacy

This policy explains what information is collected when you use tossitonline.com or any mobile app published by Toss it Online, operated by Elard Tissot van Patot, based in Bussum, the Netherlands (KvK 63129124).

Plain version: the website doesn't track you, and the apps are built to keep what they need on your device. The detail below is for people who want to verify that, plus the rights you have under European and Californian law.

The website

tossitonline.com does not use third-party analytics, advertising trackers, or cookies that store personal data. No account is required to browse it.

When you submit the contact form, the information you provide (name, email, message) is sent to Toss it Online at info@tossitonline.com. It is used only to reply to you, isn't shared with anyone, and isn't added to a mailing list.

The site is hosted by TransIP (Netherlands). Like any web host, their servers automatically log requests (IP address, timestamp, requested URL) for normal operational and security reasons. Toss it Online does not analyse or export these logs.

The apps

Toss it Online publishes several iOS apps, and what each one collects varies. The most authoritative per-app picture is the App Privacy panel Apple shows on every app's App Store listing. Below is the portfolio-wide summary.

Privacy-minimum apps — Tock and BurnWise

Two apps in the portfolio are deliberately built with no data-handling beyond your own device:

  • No accounts. There's nothing to sign in to.
  • No third-party analytics SDKs in the app binary.
  • No advertising SDKs in the app binary.
  • No tracking across other apps or websites.
  • Your preferences and settings are stored on your device using Apple's local storage (UserDefaults) and never leave your device.
  • The apps function fully offline.

Other apps — analytics, crash reporting, ads

The other apps in the portfolio (e.g. Air Quality, Find My Phone, Package Tracker, Breathing Exercise, Amsterdam Audio Stories, Measure, and any future releases) include the following third-party services for legitimate operational reasons:

  • Google Firebase Analytics — usage statistics (which features get used, app opens, screen views). Sends anonymous device identifiers and event data to Google. Firebase privacy.
  • Google Firebase Crashlytics — crash and error reporting so Toss it Online can fix bugs. Sends crash logs, stack traces, and basic device info to Google. No personal content is included in crash reports.
  • Google AdMob — in-app advertising in ad-supported (free) apps. Sends an advertising identifier and ad-impression data to Google. If you decline App Tracking Transparency, AdMob serves non-personalised ads only. AdMob privacy.

These services receive anonymous device identifiers and the data necessary for their function. They do not receive your name, email address, or contact details from Toss it Online. Each operates under its own privacy policy linked above.

When an app first launches, iOS shows the App Tracking Transparency prompt where you can allow or decline tracking via the advertising identifier (IDFA). Your choice is honoured throughout — you can change it any time in Settings → Privacy & Security → Tracking.

Permissions all apps may request

Where any individual app needs to do more than its baseline — for example, scheduling a local notification, playing audio, or accessing the microphone — it asks iOS for permission first, and you can revoke that permission at any time in Settings → Privacy & Security.

Measure — Pupillary Distance & TrueDepth camera

The Measure app (App Store ID 1586541589) includes an optional Pupillary Distance feature that uses your iPhone's TrueDepth front camera through Apple's ARKit framework to calculate the distance between the centres of your pupils. The measurement is useful when ordering prescription eyewear online.

What is read

Only two 3D eye-position transforms from the ARKit face anchor (one for the left eye, one for the right). These are the minimum inputs needed to compute the distance between two points in space.

What is not read

  • The camera image or video
  • Depth maps
  • Facial geometry meshes
  • Facial expressions or blend-shape data
  • Any biometric or facial-recognition data

How the data is handled

  • Processed entirely on your device, in memory only
  • Never recorded, written to disk, or persisted across app launches
  • Never transmitted to any server
  • Never shared with any third party (no analytics or advertising SDKs receive this data)
  • Discarded immediately when you close the Pupillary Distance screen

Only the final numeric measurement (e.g. "62 mm") is shown to you on screen. That measurement is held only in memory while the screen is open and disappears when you exit the feature.

The app does not use any facial recognition, identity verification, or biometric authentication built on top of the TrueDepth camera. The camera is used solely to measure the distance between two points in 3D space.

NoTick — tick photos, location & health data

NoTick (Tick Checker) helps you check skin, fur, clothing and gear for possible ticks. It is built to keep your information on your device, and it contains no third-party analytics or advertising SDKs and does not use the advertising identifier (IDFA) — so there is no App Tracking Transparency prompt.

Camera, photos and your bite log

The camera and your photo library are used only when you choose to scan an area or attach a photo. Photos you capture or select, together with any bite-log entries you save (date, body location, notes, and before/after photos), are stored only on your device using Apple's local storage and SwiftData. They are not uploaded, and no account is required. You can remove everything at any time with Settings → Delete all local data.

On-device analysis (optional cloud)

Scans are analysed on your device by default — photos do not leave your phone. NoTick offers an optional Use cloud analysis setting (off by default) that, only if you turn it on, sends a single photo to an analysis service for a second opinion. A separate Help improve detection setting (also off by default) lets you share anonymised tick photos to improve detection. Neither happens unless you explicitly enable it.

Location and the Tick Radar

The optional Tick Radar shows a coarse, weather-based estimate of seasonal tick activity. If you tap Use my location, your approximate coordinates are used in that moment to fetch a local weather forecast from Open-Meteo; no personal data is sent and your location is not stored. You can also simply pick a region instead.

Not a diagnosis

Tick findings are health-related information and stay on your device. NoTick is a tick-check helper, not a medical or veterinary diagnosis tool, and cannot guarantee an area is tick-free — always do a full manual check and contact a doctor or vet if you are worried.

Paid apps and subscriptions

Some apps offer in-app purchases or subscriptions. Those purchases are made through Apple's App Store — I never see your credit-card details, bank details, or full name. Apple handles payment under its own privacy policy.

To manage subscription state across devices (e.g. so a renewal unlocks features on every device you sign into the App Store from), those apps use RevenueCat, a subscription-management service. RevenueCat receives an anonymous installation identifier and your subscription status from Apple. It doesn't receive your name, email, contact details, or any other personal information from Toss it Online. See RevenueCat's privacy policy for details on their handling.

Each of the third parties named on this page — Apple, RevenueCat, Google (Firebase Analytics, Firebase Crashlytics, AdMob), and TransIP — has its own published privacy policy and is committed to providing the same or equivalent protection of user data as stated here, as required by Apple's App Store Review Guidelines.

What's deliberately not collected

Across every app and the website, none of the following ever happens:

  • Selling or renting your data to anyone
  • Sharing your name, email or contact details with advertisers or analytics providers
  • Accessing your contacts, calendar or photos unless you explicitly choose to share
  • Recording audio, video or screen content without your active consent and on-screen indication
  • Targeting children under 13 (see below)
  • Cross-app tracking via IDFA if you decline the App Tracking Transparency prompt

Your rights (GDPR)

If you live in the European Economic Area, Switzerland or the United Kingdom, you have the right under the GDPR to:

  • Ask what information Toss it Online holds about you
  • Request a correction
  • Request deletion
  • Request a portable copy
  • Object to processing, or ask for it to be restricted
  • Withdraw any consent you previously gave
  • File a complaint with your supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens)

Email info@tossitonline.com and Toss it Online will handle the request within 30 days. In practice, there's usually very little to delete because so little is stored.

California rights (CCPA)

California residents have similar rights under the CCPA: to know what personal information is collected, to request deletion, to opt out of any "sale" of personal information, and to not be discriminated against for exercising those rights. Toss it Online does not sell personal information, and never has. The same email above works for any CCPA request.

Children's privacy

Toss it Online apps and this website are not directed at children under 13, and Toss it Online does not knowingly collect personal information from children under 13. If you believe a child has provided information, contact Toss it Online and it will be deleted.

Data retention

Contact-form messages are kept in the Toss it Online inbox as long as needed to reply, then archived or deleted within a reasonable period. Anonymised subscription state held by Apple and RevenueCat, and analytics/crash data held by Google, is retained per their own policies. Server logs at the web host are rotated according to their schedule.

Where data is processed

Toss it Online is based in the Netherlands and operates under Dutch and EU law. The web host (TransIP) is in the Netherlands. Apple, Google and RevenueCat are based in the United States but operate under Standard Contractual Clauses approved by the European Commission for international transfers.

Changes to this policy

If this policy changes, the "Last updated" date below changes too. Material changes will be flagged on the app's update notes or on this page itself.

Contact

Any question, request, or complaint about privacy: info@tossitonline.com. Every message is read personally.

Last updated: 2026-06-22.