Toll privacy policy

Last updated: 30 September 2026

Toll is made by Not My First Codeo Ltd, a company registered in England and Wales (company number 14592589, registered office 167-169 Great Portland Street, 5th Floor, London, W1W 5PF). We’re the data controller for the information described here. Questions or requests: hello@tollhq.app.

The short version

• Your decks, answers and settings, and the apps you choose to put a toll on, stay on your iPhone.
• We never see which apps you use or how you use them. Apple’s Screen Time gives Toll anonymous tokens rather than app names, and that data never leaves your device.
• If you’re on the beta, we collect anonymous usage events to see whether Toll works. We never collect the content of your cards or which apps you’ve tolled.
• Our website counts visits without cookies and without storing anything on your device, and you can turn that off.
• No ads, no tracking across other apps or websites, and we never sell your data.

What stays on your iPhone

• Your decks, cards and review history
• Your toll history, stats and settings
• The apps you’ve chosen to toll, stored as Apple’s Screen Time tokens

This data isn’t sent to us. Deleting Toll deletes it.

What we collect

If you join the waitlist (on our website) Your email address, your answers to the sign-up questions (what you’re learning, which app takes your time, your iPhone and iOS version) and which link brought you to us. We use this to invite you to the beta and to decide what to build first, and we send you one email to confirm you’ve joined. Our lawful basis is your consent. We keep it until the beta ends or you ask us to remove you, whichever comes first.

If you visit our website We count page views and a few actions, such as pressing the sign-up button, to see which parts of the site work. We use PostHog in cookieless mode: nothing is stored on your device, and your IP address is used only to tell one visit from another and is then discarded, never stored. We don’t identify you or follow you to other websites. Our lawful basis is our legitimate interest in understanding how our website is used. We keep this data for 12 months. You can turn it off for your browser with the button at the end of this page.

Cloudflare, which hosts the website, processes your IP address to deliver the pages and to limit repeated sign-ups from one connection. We don’t store it.

If you use the beta app Anonymous usage events, for example: a setup step completed, a toll started or passed, whether an answer was right, and how long it took. They’re linked to a random install ID, not to your name or email. We use them to find out whether Toll works and to fix what doesn’t. Our lawful basis is our legitimate interest in running and improving a test version of the app. We keep them for up to 12 months.

If you send feedback Anything you choose to send us through TestFlight or by email, such as comments, screenshots and crash reports. Apple shares TestFlight feedback with us along with basic device details, and your email address if you choose to include it.

Who we share it with

Only the service providers that help us run Toll, under contract and only for these purposes:

• Cloudflare, which hosts our website and stores the waitlist in the EU
• PostHog, for analytics, on its EU cloud
• Resend, which sends the email confirming you’ve joined the waitlist
• Apple, through TestFlight

Some providers may process data outside the UK. When they do, we rely on appropriate safeguards such as the UK’s International Data Transfer Addendum or an adequacy decision.

Your rights

You can ask us to access, correct or delete your data, to stop using it, or to withdraw your consent. Email hello@tollhq.app and we’ll reply within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

Toll is for adults. We don’t knowingly collect data from anyone under 18.

Changes

If we add features that use data differently (for example, AI card generation), we’ll update this page and the date at the top before they go live.