What Toli collects, and why
Plain language. Last updated 18 Oct 2026.
Always (needed to run the service)
- Mobile number: your login. We send OTPs to it. Organizers see it only after they confirm you for a shift.
- Profile: name, username, college, skills, languages, bio. Public on your profile page, except T-shirt size and emergency contact, which only confirmed organizers see.
- Applications, attendance, hours, certificates, ratings: the record of your volunteering. Certificates are verifiable by anyone who has the certificate code.
- Location, once per check-in: when you scan an organizer's QR at an event with a venue pin, your phone sends one position so we can confirm you're at the venue. We store that point and the distance to the venue for that check-in. We never track you in the background.
- Login cookie: keeps you signed in. Essential, no consent needed.
Only if you allow analytics
- PostHog: which screens you open and which buttons you tap, tied to a random user id, never your phone number. Helps us see where people get stuck.
- Sentry session replay: when the app crashes, a masked recording of the screen (all text hidden) to help us fix it. Crash reports without replay are always on and contain no personal data.
- Change your choice any time: analytics isn't configured on this deployment.
What we don't do
- No ads, no selling or sharing data with advertisers.
- No background location, no contacts, no photos.
- We don't handle payments. Any stipend is between you and the organizer.
Your rights
- Edit your profile any time from Profile. Withdraw applications from your dashboard.
- To delete your account and data, email privacy@toli.in from a message that includes your number. We delete within 7 days; certificates already issued keep the verify record (code, role, hours, dates) without your name.
- Reports you file are shown to admins without your identity being shown to the organizer.