Everything you enter — trip names, expenses, amounts, members, notes, and settlements — is stored locally on your device. This data is never sent to us. We have no server that receives it, and no way to see it.
Sign in with Google to back up your trips to your own Google Drive. Signing in requests three things from your Google account:
You can disconnect your Google account at any time from Togé's Settings. Disconnecting stops future backups; it does not delete a backup already saved to your Drive. You can remove that backup yourself through your Google Account's connected-apps settings, or contact us and we'll walk you through it.
Once you're signed in, Togé can save a copy of your trips to that private Drive folder — either when you tap "Back up now," or automatically in the background so you always have a recent copy. If you ever set up Togé on a new phone and sign in with the same Google account, Togé will offer to restore that backup. We never restore over a phone that already has trip data on it without asking first.
Togé lets a group stay in sync on a shared trip two ways: scanning a QR code in person, or turning on Live Sync to keep everyone updated automatically over the internet. When Live Sync is on, your trip's expense data is encrypted on your device, then sent to a small number of public relay servers so other members of your trip can receive it. Those servers only ever see encrypted, unreadable data — never your actual trip details. Live Sync is entirely your choice, trip by trip.
To show converted amounts across currencies, Togé occasionally checks a public exchange-rate service over the internet. This only ever sends a request for current rates — never any of your personal or trip information.
Togé can generate a shareable image or PDF summarizing a trip's expenses and settlement. This is created entirely on your device. If you choose to share it — by message, email, or any other method — that action is yours, through your phone's own share function. We have no visibility into who you send it to.
Togé does not knowingly collect information from children under the age of 13, or the relevant minimum age in your region. The app itself collects nothing beyond what's described above, and Google Sign-In is subject to Google's own account age requirements.
Data on your device is only as secure as your device itself — we recommend using your phone's passcode, biometric lock, or encryption. Data you choose to back up is protected by Google's own account security once it reaches your Drive.
Togé does not use advertising networks, analytics platforms, or tracking SDKs of any kind.
You are always in control of your data. You can clear or delete any trip directly in the app, disconnect your Google account at any time, and turn Live Sync on or off per trip. Because we hold no data on our own servers, there is nothing for us to access, export, or delete on your behalf beyond what's already described above.
If this policy changes, we'll update the date at the top of this page. We'll always aim to describe exactly what the app does at the time you're reading this — not a generic template.
Questions about this policy or how your data is handled: rashidbahattabmp@gmail.com