Privacy Policy for Toroid Studio

Effective date: October 3, 2026  ·  Developer: Ali Hosain  ·  App: Toroid Studio

1. Your code and files

The App never uploads, transmits, or stores the content of your files on any Toroid Studio server. All editing, running, and debugging happens locally on your device. Your files leave the device only when you explicitly use a feature that sends them somewhere you chose:

• AI features — relevant code is sent to your selected AI provider (see Section 3).
• Cloud Sync — files are uploaded to your own Google Drive (see Section 4).
• Git — when you clone, pull or push, the App exchanges repository data directly with the Git remote you configured (for example GitHub), using your own credentials.
• Deploy — when you deploy a project, its files are uploaded directly to your own Netlify or Vercel account (see Section 9).

Your AI Assistant chats and Agent run history are saved only on your device so you can search and continue them; they are never uploaded to any Toroid Studio server, and you can delete them in the app. Uninstalling the App removes them.

2. API key storage (bring your own key)

Toroid Studio's AI features (chat, inline completions, agentic edits, commit message generation, etc.) require you to provide your own API key for an AI provider of your choice: Anthropic (Claude) or, optionally, OpenRouter (selectable in Settings → AI). Each key is:

• Stored only on your device, encrypted using the Android Keystore (hardware-backed encryption where available).
• Never transmitted to, logged by, or stored on any Toroid Studio server.
• Sent only directly to the provider you selected (Anthropic's API, or OpenRouter's API at openrouter.ai) when you use an AI feature, exactly as any API client would — never through Toroid Studio servers.

The same on-device, encrypted storage approach is used for any GitHub personal access tokens, Netlify personal access tokens and Vercel access tokens you add for Git and deployment features. Each token is sent only to the service it belongs to (for example a GitHub token only to GitHub, a Vercel token only to Vercel's API).

3. AI features

When you use an AI feature, relevant context (such as the open file, a selection, or your prompt) is sent directly to your selected provider — Anthropic's API, or OpenRouter's API if you choose OpenRouter — using your own key to generate a response. We do not intercept, log, or retain this content. Review Anthropic's own privacy policy or OpenRouter's for how they handle API requests. OpenRouter is a routing service: it forwards your request to the model provider behind the model ID you choose (for example a free community-hosted model), and that provider's data handling and logging practices apply in addition to OpenRouter's, so check them before sending sensitive code.

By default, Agent mode never applies a file change or runs a command without your explicit on-screen approval. An optional setting, Settings → AI → "Agent: auto-approve file changes" (off by default), lets the Agent apply changes and run commands in your project without asking each time; every such action is still listed in the App so you can review it. Turning it on does not change what data is sent to your AI provider.

4. Cloud Sync (optional)

Cloud Sync is an opt-in feature, off by default, that must be enabled twice — first by signing in with your own Google account, then per-project. When enabled:

• Your project files are uploaded only to a folder (named "Toroid Projects") in your own Google Drive, using Google's restricted drive.file scope, which only grants access to files the App itself creates.
• Toroid Studio never has its own server-side copy of your files — Google Drive is the only remote storage involved.
• Disabling Cloud Sync stops all future uploads; previously synced files remain in your own Drive under your control.

5. Crash reports and analytics

The App includes optional crash reporting and anonymous usage analytics, controlled by two independent toggles in Settings → Privacy ("Send crash reports" and "Send anonymous usage analytics"), both enabled by default and changeable at any time. When enabled, coarse diagnostic data (such as a stack trace or an anonymous event name) may be collected to help us fix bugs and improve the App. This data never includes file contents, API keys, tokens, or other credentials. You can opt out at any time in Settings, and the App will honor that choice immediately.

This data is collected and processed by Google's Firebase services (Firebase Crashlytics for crash reports and Firebase Analytics for usage analytics) and is subject to Google's privacy terms for those services.

6. In-app feedback

If you use the "Send Feedback" feature, we collect:

• The category (Bug Report, Feature Request, or General Feedback) and description you write.
• Non-sensitive diagnostic metadata: app version, Android version, device model, which runtimes (Python/Node.js) are enabled, and your selected theme.
• An optional screenshot of the app screen you were viewing when you opened the feedback form. It is never attached by default and is sent only if you choose to attach it (you can remove it again before sending).
• A randomly generated, anonymous install identifier used only to group your own submissions — this is not an advertising ID, device ID, or account identifier, and no sign-in or account is required.

Feedback submissions never include file contents, API keys, or Git, Netlify or Vercel tokens. You can review exactly what will be sent before submitting.

Feedback submissions are stored in Google Firebase (Cloud Firestore), which is operated by Google.

7. Donations (optional)

Toroid Studio offers optional, one-time in-app donations ("Support Toroid Studio" in Settings). If you choose to donate:

• The purchase is processed entirely by Google Play. We never see, receive, or store your payment details (card number, billing address, or similar). Google's own privacy policy and terms govern that transaction.
• Donations are voluntary and do not affect the App's functionality or unlock any features. Every feature works the same whether or not you donate, and a donation is not a Pro subscription.
• The App does not collect your name or any account information in connection with a donation. Donation purchases are consumed on your device immediately so the same option can be chosen again; no donation history is kept by us.

8. Data we do not collect

Toroid Studio does not collect or require: your name, email address, phone number, precise location, contacts, photos (other than an explicitly attached feedback screenshot), or any advertising identifiers. The App displays no third-party advertising.

9. Data sharing

We do not sell your data. Data is shared only as described above, and only with the services you choose to use:

• Anthropic or OpenRouter — whichever you select for AI features, via your own key.
• Google Drive — only if you enable Cloud Sync, to your own Drive.
• Your Git remote (for example GitHub) — only when you clone, pull or push, via your own token.
• Netlify or Vercel — only when you use the Deploy feature, via your own token. A deployed site is public on the internet at the address shown in the App, so only deploy files you intend to publish. See Netlify's and Vercel's privacy policies.
• PyPI (the Python Package Index) — only when you search for or install Python packages, which sends the package names to pypi.org.
• Google Play — only if you make a donation, as described in Section 7.
• Google Firebase — crash reports and analytics unless you opt out, and feedback you choose to send, as described in Sections 5 and 6.

10. Children's privacy

Toroid Studio is not directed at children under 13, and we do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy as the App evolves. Material changes will be reflected in the "Effective date" above.

12. Data deletion requests

To request deletion of data associated with Toroid Studio, email hello@alihosain.com with the subject "Data deletion request" and, if you sent feedback, the anonymous install identifier shown in the feedback form's "what we'll send" list.

• What we can delete: feedback submissions (text and any attached screenshot) linked to your anonymous install identifier.
• What we cannot delete or identify: anonymous crash reports and usage analytics collected by Firebase are not linked to your identity. You can stop further collection at any time in Settings → Privacy.
• Code, API keys, tokens and chat history: these stay on your device (except when you choose to use an AI, Git, Cloud Sync or Deploy feature, which sends data to the service you chose rather than to us), so there is nothing for us to delete. Uninstalling the app removes them. To remove a deployed site or pushed code, delete it in your own Netlify, Vercel or GitHub account.
• Timeline: we aim to complete verified requests within 30 days.

13. Contact

Questions about this policy or your data can be sent to:
📧 hello@alihosain.com

© 2026 Ali Hosain · Toroid Studio
The current version of this policy is always available at ali-hosain.github.io/toroid-studio/privacy-policy.html