Privacy Policy

How Tobi handles your information, who we share it with, and the choices you have.

Effective August 27, 2026

Who we are

Tobi (“the app,” “we,” “us,” or “our”) is a shared household maintenance app operated by CCT Plus LLC. This Privacy Policy explains what information we collect when you use Tobi, how we use it, and the rights you have over it.

If you have any questions, contact us at [email protected].

Information we collect

Information you provide

• Account information. When you create an account we use Google Firebase Authentication. Depending on how you sign in, this may include your email address, your name, and a unique account identifier. We support Sign in with Apple, Google sign-in, email and password, and anonymous or phone-based sign-in. If you use Sign in with Apple with the “Hide My Email” option, we only receive Apple’s private relay address.
• Household and maintenance data. The content you add to Tobi — households, members you invite, maintenance items, completion history, notes, contractors, and the electrical panel schedule. This data is shared with the other members of any household you belong to.
• Communications. If you email us, we keep your message and contact details to respond and for support records.
• Waitlist sign-ups. If you join our waitlist on the Tobi website, we collect the email address you submit so we can notify you when the app launches. The address is stored with Resend, which delivers the emails we send you.

Information collected automatically

• Usage and product analytics. We use PostHog to understand how the app is used. This includes events such as screens viewed and features used (autocapture), along with device and app metadata like device type, operating system version, app version, general region, and a pseudonymous device or user identifier. We do not use PostHog session replay (screen recording).
• Purchase and subscription data. If you buy a subscription or other in-app purchase, we use RevenueCat to manage it. RevenueCat processes a pseudonymous app user identifier and subscription status. Your actual payment — card or billing details — is handled by Apple (the App Store) or Google, not by us; we never see your full payment information.

How we use your information

• To provide, operate, and maintain Tobi and its household sharing.
• To authenticate you and keep your account secure.
• To send service and maintenance reminders and related notifications.
• To process and manage subscriptions and purchases.
• To understand usage, fix bugs, and improve features and performance.
• To respond to your support requests and communicate with you.
• To ask about your experience if you stop using Tobi, such as when you turn off your subscription’s renewal. You can reply or ignore it; either way it does not affect your account.
• To comply with legal obligations and enforce our terms and protect against fraud or abuse.

How your information is shared

We do not sell your personal information. We share it only as follows:

• Other household members. Maintenance data you add is visible to the members of the households you belong to.
• Service providers. We rely on the following processors to run Tobi:
  • Google Firebase — authentication, database (Firestore), cloud functions, and hosting.
  • PostHog — product analytics.
  • RevenueCat — subscription management.
  • Resend — sending transactional and notification emails, and storing waitlist sign-ups (it processes your email address and the contents of those messages).
  • Apple and Google — app distribution, sign-in, payments, and push notifications.
• Legal and safety. When required by law, regulation, or valid legal process, or to protect the rights, property, or safety of our users or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your information is handled.

Data retention

We keep your information for as long as your account is active or as needed to provide Tobi. When you delete your account or a household, we delete or de-identify the associated data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Analytics data may be retained in aggregated or pseudonymized form.

International data transfers

We operate in the United States, and our service providers may process and store your information in the United States and other countries. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses.

Security

We use industry-standard safeguards — including encryption in transit, access controls, and per-household authorization rules — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have some or all of the rights below. To exercise any of them, email [email protected]. We will not discriminate against you for exercising your rights, and we will verify your request before acting on it.

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information (you can also delete your account in the app).
• Port a copy of your information in a portable format.
• Opt out of analytics where applicable.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete and correct it, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law, and we do not knowingly process the sensitive personal information of minors for such purposes. You may exercise these rights, or designate an authorized agent to do so, by contacting us.

Europe and the United Kingdom (GDPR)

If you are in the EEA or UK, our legal bases for processing your personal data are: performance of a contract (to provide the app and your account), legitimate interests (to secure, maintain, and improve the app), consent (for certain analytics, where required, which you may withdraw at any time), and legal obligation. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority. CCT Plus LLC is the data controller for this processing.

Canada (PIPEDA)

If you are in Canada, we collect, use, and disclose your personal information with your knowledge and consent, except where otherwise permitted or required by law. You have the right to access your personal information and to challenge its accuracy. You may also direct a complaint to the Office of the Privacy Commissioner of Canada.

Children’s privacy

Tobi is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK). If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date above and, for material changes, provide additional notice within the app or by email. Your continued use of Tobi after an update means you accept the revised policy.

Governing law

This Privacy Policy is governed by the laws of the State of Texas, United States, without regard to its conflict-of-laws principles.

Contact us

CCT Plus LLC
[email protected]