What friends can see
This is the whole list. There's nothing else stored to leak.
They see
The card's name, the bank, and the perks we know about it from public info. That's it — exactly what's above.
One more, only if you say it: which network is on the card — Visa, Mastercard and so on. The groups you share it with see that beside the card.
Only people you've added — a group or a person — can see a card. Hide it from any of them, anytime.
They never see
- Card number
- Expiry and CVV
- Credit limit
- What you spend
- Statements
- Points balance
We never ask for these, so we can't store them — there's no field for them anywhere in the app.
Someone holding a group's invite link, before they join, sees its name, who started it, how many people and cards are in it and, once two people have added cards, which banks those cards are from. Never a card's name, and never whose it is.
A trip you plan or join is seen by everyone in that group: the country, the dates, who's going, and which of your shared cards are going.
Toli keeps your phone number to run your account. Friends never see it, and we only message you about Toli if you ticked the optional box at sign-up.
If you report someone, we keep who reported whom, in which group or share, which of five fixed reasons you picked and when. There is no message box, so nothing you type is kept. Only our grievance officer reads reports, the person is not told, and a report is deleted when either of you deletes your account.
We count a few actions with Google Analytics, on the web and in the Android app, such as a card being added or a group being joined, to see what gets used, and we note which link or campaign first brought you here. None of it includes your name, your phone number or anyone you share with.
In the Android app, notifications are yours to turn on. If you do, we keep a token from Google that reaches this phone and which kinds you want: a friend asking for your card, someone joining your group, sale reminders. A notification names a friend, a group or a card, never a phone number. Turn any of them off in Settings; signing out or deleting your account removes the token.
When someone asks for one of your cards, Toli keeps that ask in your Asks: who asked, for which card, in which group and when. It stays until you clear it, or until either of you leaves that group or share or deletes your account. The person who asked is never told whether you saw it.
If the Android app crashes, Google's Crashlytics sends us a report: the phone model, the Android version, the screen it happened on and a random id for the install. Never your name, your number or your cards.
Offers are public bank and merchant announcements, matched on your phone against cards friends have already shared; nothing you look at is sent to a bank or a merchant.
Delete your account and every card you added goes with it, immediately, along with your phone number. Delete my account
Questions or a complaint about your data? Write to our grievance officer at rajajain08@gmail.com.
Toli is not a bank and is not affiliated with, endorsed by or sponsored by any bank or card issuer. Card and bank names belong to their owners and are used only to identify cards.