Toretto · Legal

Privacy

Last updated 9 October 2026

The short version

Toretto is a private planner for a single family. We collect only what the app needs to work, we don't sell it, and there are no ads or third-party trackers.

What we collect

  • Your email address and display name, to create and sign in to your account.
  • The content you add: meal plans, wishlists, gift-card and charity preferences, discussion posts, and any photos you upload.
  • Your IP address, used only to rate-limit sign-in and invite emails and to stop abuse.
  • One essential session cookie, so you stay signed in. There are no advertising or analytics cookies.

How we use it

To run the app and to send you the links and notifications you ask for: sign-in links, invitations, and the notifications you enable. You can change notification settings on your profile.

Who processes it

We don't sell your information or share it for marketing. Two providers process it on our behalf: Cloudflare hosts the app and keeps the data (database and file storage), and Resend delivers email.

How long we keep it

Your account and content stay while your account exists. Invitations and rate-limit records are short-lived. To have your account and its data deleted, email us at privacy-toretto@j0.nz.

Your choices

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account, at any time, by emailing privacy-toretto@j0.nz. If you are in Canada, you also have rights under applicable privacy law, including access to your personal information and its correction or deletion.

Security

Data is encrypted in transit, and access is limited to the family and the providers named above.

Changes and contact

If we make a meaningful change, we'll note a new date at the top. Questions or requests: privacy-toretto@j0.nz.