MyTor

🔒 Privacy Policy

Last updated: November 12, 2025

1. Introduction

Welcome to MyTor ("we", "our", "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our app. By using MyTor, you agree to this policy.

2. Information We Collect

We only collect the minimum information needed to provide our services.

For regular users:

• Phone number (for login and OTP verification)
• Name
• Booked appointments (date and time)
• Waiting list preferences (business, date, service, optional worker) when you join a waitlist
• Favorites you save inside the app
• Authentication tokens (JWT and refresh tokens) used to keep your account logged in securely
• Push notification identifiers (FCM tokens, device type, language preferences) so we can deliver reminders and updates

For business owners:

• Business name and details (open/close hours, services, prices)
• Business contact number and location
• Logo, profile photo, slider and promotional images you upload (optional)
• Appointments booked by users

We do not collect payment details, emails, or unnecessary personal data.

3. How We Use the Information

We use your information only to:

• Manage appointments and waiting lists between users and businesses
• Display business details, availability, and promotional media you upload
• Send appointment reminders, waiting list alerts, and (for customers of a business) occasional announcements via push notifications
• Improve and secure our app experience
• Perform OTP verification for login and authentication

We do not share, sell, or rent any user data to third parties.

4. Data Storage and Security

Your information is securely stored in databases that we host on DigitalOcean infrastructure. DigitalOcean acts only as our cloud hosting provider—we do not give them direct access to phone numbers or other user information beyond what is required to run the service.

Authentication tokens (JWT and refresh tokens) are securely stored on your device using encrypted storage mechanisms. They are used to maintain your session without exposing your personal data.

Push notifications are delivered through Firebase Cloud Messaging (Google). We store the minimum token information needed to send those notifications, and the message content is limited to service updates related to your use of MyTor.

5. Account Deletion and Logout

You can delete your account and all related data at any time in two ways:

• Through the "Delete Account" button in the app's settings
• By contacting us at MyTor00@hotmail.com

Once deleted, all your data (appointments, personal info, business info) will be permanently removed.

Logging out of the app will:

• Delete all local authentication tokens (JWT and refresh tokens)
• Invalidate any server-side refresh tokens

This ensures your session is completely terminated.

6. Children's Privacy

MyTor is not intended for children under 14. We do not knowingly collect information from minors.

7. Third-Party Services and Data Sharing

We rely on a small set of trusted providers to run MyTor:

• DigitalOcean hosts our backend servers and databases. They do not receive phone numbers or other personal data in a readable form beyond what is stored inside our controlled environment.
• Twilio delivers OTP verification codes to your phone number.
• Firebase (Google) powers push notifications so we can send reminders, waiting list alerts, and business announcements.

We do not sell or rent any personal information. We only disclose data when legally required or to enforce our terms.

8. Your Rights

You can request:

• To view or correct your data
• To delete your account and data permanently
• To stop receiving notifications (via device settings)

9. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be published in the app, and continued use means you accept the updated terms.