Privacy Policy

Information ToyBro handles

Account information

ToyBro uses Google Sign-In. We receive a Google account identifier, verified email address, and, where supplied by Google, a display name. We use this information to authenticate you, maintain your account and role, protect service usage, associate your private collection and activity with you, and provide moderator tools when authorized. We do not receive your Google password.

Photos and image-derived clues

When you choose to identify, catalog, or batch-upload a toy, ToyBro receives the photos you select or capture. The app may analyze a resized copy on your device for text markings and visual color clues. Selected images and those clues may then be transmitted to ToyBro's servers and identification service providers to return candidates, compare catalog references, detect text or web matches, and improve the reliability of the service.

Ordinary identification photos are placed in temporary review storage and scheduled for deletion after approximately six hours unless you have enabled catalog contribution and later submit or approve the image through the applicable review flow. Cleanup processing and protected backups may cause deletion to finish later. Contribution is off by default for normal searches.

Catalog, collection, and feedback information

We store information you intentionally provide, such as private collection records, accessory checklist selections, catalog and batch submissions, toy names and placement, contributor attribution preferences, confirmation or denial of search results, corrections, tester notes, and deletion or rights requests. Public catalog contributions may include your chosen public contributor name; otherwise attribution may be anonymous.

Profiles, social connections, and messages

ToyBro stores profile details you choose to provide, including a display name, public handle, biography, favorite toy lines, earned badges, collection showcase photos, and optional vendor, marketplace, and inventory links. Profiles are private unless you turn on public visibility. A public profile may be found by other signed-in users; you separately control whether it accepts friend requests and messages.

Friend requests, message threads, message content, delivery and read status, and in-app announcement receipts are retained to provide the communication features and investigate abuse. Private messages are visible to their participants and may be accessed by authorized personnel when reasonably necessary for safety, support, legal compliance, or abuse investigation. Do not send sensitive personal information.

Usage and technical information

We record limited operational information needed to run and secure ToyBro, including session tokens in hashed form on the server, request counts, search mode, candidate results, processing times, error and diagnostic details, and the relationship between a confirmed result and retrieval candidates. We do not use advertising IDs and ToyBro does not currently contain advertising or third-party behavioral analytics.

Android releases may use Google Play Integrity in observation mode to help detect altered app packages, uncertified devices, and automated abuse. Google processes limited app, account-license, and device-integrity signals for this check. ToyBro stores the resulting verdict categories and validation status for security monitoring, not the integrity token or a device advertising identifier. During beta observation, a failed or unavailable verdict does not automatically block your account or a toy search.

Device permissions

• Camera: used only when you choose to photograph a toy.
• Photos/files picker: used only for files you select; ToyBro does not request broad storage access.
• Notifications: used for requested processing, announcements, account communication, and message alerts.
• Internet: required for sign-in, identification, catalog, research, and synchronization.

ToyBro does not request precise or background location permission. Location text entered for a show or store listing is information you choose to submit.

How we use information

• Authenticate users and maintain account, moderator, and administrator permissions.
• Identify toys and accessories and present possible matches and supporting evidence.
• Maintain private collections, public catalog records, batch workflows, and contributor attribution.
• Provide optional public profiles, collection showcases, vendor links, friend connections, announcements, and private messaging.
• Process user confirmations, corrections, denials, notes, and moderation decisions.
• Measure accuracy, diagnose failures, prevent abuse, enforce usage limits, and improve retrieval.
• Research catalog facts, accessories, and valuations when a user or moderator requests those features.
• Comply with law, enforce rights, and respond to privacy, correction, and deletion requests.

Service providers and disclosures

ToyBro uses vendors that process information on our behalf to provide hosting, authentication, image analysis, search, and AI-assisted research. Depending on the feature and search tier you choose, this may include OpenAI Sites and its hosting infrastructure, Cloudflare storage and databases, Google Sign-In, Google Cloud Vision, Google Play Integrity, Google Gemini and Google Search grounding, SerpApi visual search, and ToyBro-operated SigLIP or related visual-comparison services. These providers receive only the data needed for the requested operation and handle it under their own applicable terms and privacy commitments.

Search results may link to third-party websites. ToyBro does not control those sites or their privacy practices. We may disclose information when required by law, to protect users or the service, or as part of a business transfer with appropriate safeguards. We do not sell personal information and do not share it for cross-context behavioral advertising.

ToyBro may use a private ntfy topic to deliver operational alerts to the owner. Tester-note alerts contain the note submitted by the tester, associated diagnostic context, and a secure review link. Private user-to-user message bodies are not routed through ntfy; D1 remains the message system of record.

Contributed and public content

If you expressly enable contribution and submit images or catalog material, the app displays the rights terms before submission. Approved contributions may be retained as catalog reference material, displayed publicly, converted into visual comparison data, and used to develop or evaluate ToyBro's identification systems as permitted by the contribution terms. You retain ownership and grant ToyBro a worldwide, perpetual, royalty-free, nonexclusive, sublicensable license for accepted submissions. Turning contribution off stops future submissions. You may request removal, attribution changes, or review of a contributed asset; completed distributions, de-identified model data, protected backups, and legally required records may not be fully retractable.

Retention, security, and deletion

We retain account and service records while your account is active and as reasonably needed to provide ToyBro, maintain catalog integrity, resolve disputes, prevent fraud, and meet legal obligations. Search history, feedback, diagnostic records, private collection information, and accepted contributions may have different retention periods because they serve different functions. We use encrypted network connections, restricted access controls, hashed server session tokens, and private storage controls. No system can guarantee absolute security.

Children

ToyBro is intended for adult collectors and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information so we can investigate and remove it.

Your choices

You may deny camera or notification permission, use the Android file picker instead of the camera, keep normal-search contribution disabled, choose anonymous public attribution, correct identification results, and request access, correction, or deletion. Some features cannot work without the information they need; for example, identification requires a selected image and an authenticated account during beta.

Changes and contact

We may update this policy as ToyBro changes. The current version and effective date will remain posted at this URL. Material changes will be communicated through the app or website when appropriate.

Privacy questions and requests: snailspacestudios@gmail.com
Developer: Snailspace Studios
App: ToyBro