Privacy, data & your account
What leaves your machine, what the portal collects, and how to get it removed.
- Does TOVIO phone home?No background reporting to the project — and exactly what does leave your machine, when, and what it carries.
- What the feedback portal collectsThe four values a link may carry, what the portal itself holds, and the AI processing that is switched on.
- Cookies on TOVIO sitesWhich analytics run, which regime applies to you, and the one cookie that records your choice.
- Who processes data on our behalfThe supplier register, why it is a candidate list, and what it does not commit to.
- Request your data, or its deletionWhere to write, what actually exists to delete, and what the address does not yet cover.
- Change your email or notification settingsWhere the settings live, what notifies you, and what deliberately does not.
- Unsubscribe from product updatesOpt-in by default, how to leave, and where to read updates without email.
- What a remote sees when you syncThe confidentiality boundary, stated with its limits: what a server can read, what it cannot, and what it can infer.
- Does TOVIO connect to a remote on its own?Automatic sync is on by default once a remote exists. What it does, what it will never do without you, and how to switch it off.
- What a Forge you run yourself holdsYour own server, your own data — what it stores, what it cannot read, and which policies do not apply to it.
- Working offline, and what runs with no networkThe core is offline-first by design: what works with the network unplugged, and what genuinely needs it.
- When TOVIO deliberately sends file contents to a modelThe one seam where protected plaintext leaves the machine on purpose — and every gate it has to pass first.
- Signing in to the feedback portalThe available methods, why sign-in is required, and what a portal account is not.