Tovana

Privacy Policy

Last updated: October 27, 2026 · Terms of Use

Tovana ("the app") is a daily wisdom practice developed by Ezra Halevi ("we", "us"). This policy explains exactly what Tovana does and doesn't do with your information. It is written to be read, not to hide behind legalese.

The short version

What stays on your device

• Your written reflections and journal entries
• Your voice memories (recorded audio)
• Your favorites and reading history
• Your settings, including a child's name if you use Family Moment

All of it lives in an encrypted database on your phone. The encryption key is stored in your device's secure keystore (the Android Keystore, or the iPhone Keychain), and so is the app's copy of your trial and purchase state (the official purchase record is the store's, see Purchases). We cannot read any of it — it never reaches us, because there is no server to reach.

Feedback you choose to send

If you tap "Send feedback" and write us a message, that message is delivered to the developer over the internet, together with a few details that help us understand and fix what you report:

• your email address, only if you type it
• the app version
• your phone model and OS version (Android or iOS)
• your plan (trial or paid)
• the time you wrote the message

The message passes through a small relay we run on Cloudflare, which forwards it to a private Telegram channel that only the developer reads. The relay does not keep a copy. If you're offline when you press Send, the message waits on your phone in encrypted storage and goes out the next time you open the app; nothing else is ever sent this way. Feedback is the app's only user-content network action, and it never includes your journal, your recordings, your child's name, or any other data from the app.

Purchases

Tovana offers a free trial and paid plans. Payments are handled entirely by the store you bought from — Google Play on Android, the App Store (Apple) on iPhone — and we never see your payment details. To know whether your purchase is active, the app talks to RevenueCat, a standard subscription service (a US-based processor). RevenueCat receives an anonymous device identifier, your purchase/receipt state, and — as with any internet request — your IP address, from which it derives your country. It never receives your journal, your recordings, or anything you wrote. On Android, during the app's own free trial, the app doesn't even do that. On iPhone the free trial is the App Store's introductory offer, so the app checks with RevenueCat once onboarding is finished.

Your rights and how long we keep things

Because your content lives only on your device, you control it directly: edit or delete an entry in the app, or uninstall to remove everything (on iPhone a few small items stay behind, see Data retention and deletion). For the two things that do leave the device — a feedback message and your purchase state — you can ask us to access or delete them at ezra.h.halevi@gmail.com. Feedback messages are kept only as long as useful for support; purchase records are kept by the store (Google Play or Apple) and RevenueCat for as long as your subscription and their policies require.

Backups

If you create a backup, it is a single file encrypted with a password you choose, saved wherever you decide via your phone's share/save sheet. It never touches a server of ours — we don't have one. If you lose the password, we cannot recover the backup; nobody can.

What we do NOT do

• No analytics or crash reporting
• No advertising, no ad identifiers
• No selling or sharing of data — there is no data to sell
• No accounts, no passwords, no cloud profile

Permissions, briefly

• Microphone — only when you tap to record a voice memory. Audio is saved into the encrypted database on your device and nowhere else.
• Notifications — only to show the daily reminder you scheduled. Reminders are generated on your device.

Data retention and deletion

Your journal, recordings and settings are on your device, so deleting them is in your hands: delete an entry in Tovana, or uninstall the app to remove everything.

On iPhone, one thing works differently: iOS keeps an app's Keychain items after you uninstall it. Tovana's Keychain items hold no journal entries, recordings or settings — only the encryption key of the deleted database, your trial and purchase status, the review-request count, and any feedback message still waiting to be sent (it goes out if you reinstall and open the app). They never leave that iPhone (never iCloud Keychain, never a new phone). If you reinstall, your journal starts empty. To erase them too, use Settings → General → Transfer or Reset iPhone → Erase All Content and Settings.

To delete feedback you sent us (with any email and phone details that came with it), or anything else we hold about you:

1. Email ezra.h.halevi@gmail.com with the subject "Tovana data deletion".
2. Tell us roughly when you sent the feedback, or the email address you used, so we can find it.
3. We delete it within 30 days and reply to confirm.

You can also ask us, at the same address, to see what we hold about you — a feedback message and your purchase state are the only things that leave your device.

Feedback is otherwise kept only as long as it's useful for support. Purchase records are kept by the store (Google Play or Apple) and RevenueCat as their own policies require.

Children

Family Moment is designed for parents to use together with their children. The app is directed at adults; a child's name entered by a parent stays on the device like everything else.

Changes to this policy

If the app's behavior ever changes in a way that matters here, this policy will be updated and the "Last updated" date will change. The promise this policy is built on — your content stays on your device — is the product's foundation, not a temporary setting.

Contact

Questions about privacy: ezra.h.halevi@gmail.com, or the Send feedback button inside the app.