Toury Privacy Policy
Effective date: July 20, 2026
This Privacy Policy describes how ResearchBase (“we,” “us,” “our”), the operator of the Toury service (“Toury” or the “Service”), collects, uses, and protects information when you use the Toury mobile application (the “App”) and interact with the Service by phone call or SMS text message.
By pairing your phone number with the Service, installing the App, or communicating with the Toury phone number, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.
1Information We Collect
We collect only what is needed to operate the Service:
a. Phone number. Provided by you when you pair your number in the App, and verified by a one-time passcode to confirm you own it. We also receive your number via standard caller ID when you call or text the Service.
b. Device identifier. A random identifier generated by the App on installation. It is not your advertising ID, IMEI, or any identifier usable to track you across other apps or services.
c. Location data. With your explicit permission and only while you have turned the location beacon on, the App collects your device’s precise GPS position, speed, and compass heading. Location collection stops when you turn the beacon off, and you may revoke the App’s location permission at any time in your device settings. Location data is automatically deleted on a rolling 24-hour basis.
d. Conversation content. The contents of SMS messages you exchange with the Service and transcripts of your voice conversations with the Service. These are retained to provide continuity between your conversations (so the assistant remembers context).
e. Technical and usage data. Call and message metadata (timestamps, delivery status), and server logs used for security, debugging, and abuse prevention.
We do not collect: your name, email, contacts, photos, browsing history, advertising identifiers, or payment information. The Service does not use cookies, advertising SDKs, or analytics trackers.
2How We Use Information
We use the information above solely to: (a) verify your pairing and route your calls/texts to your data and no one else’s; (b) generate responses to questions you ask, including location-aware responses while your beacon is on; (c) maintain conversational continuity; (d) protect the Service against fraud, abuse, and unauthorized access; (e) diagnose and fix technical problems; and (f) comply with legal obligations.
We do not use your information for advertising, profiling for marketing purposes, or any purpose unrelated to operating the Service.
3SMS / Text Messaging Disclosures
Mobile phone numbers and SMS opt-in consent are never shared with, sold to, rented to, or transferred to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party, except with service providers acting on our behalf solely to deliver the messages themselves.
The Service sends only: (i) a one-time verification passcode during pairing, and (ii) conversational replies to messages or calls you initiate. No marketing, promotional, or unsolicited messages are sent.
- Message frequency varies and depends entirely on your usage.
- Message, data, and call rates may apply per your carrier’s plan.
- Reply STOP at any time to stop receiving messages. Reply HELP for assistance. You may also unpair your number in the App.
- Consent to receive messages is not a condition of purchasing anything.
4How Information Is Shared
We share information only in these limited circumstances:
a. Service providers (subprocessors). We use third-party infrastructure to operate the Service: telephony carriage (call/SMS delivery), cloud hosting, database hosting, and artificial-intelligence model providers that process your messages and call audio to generate the assistant’s responses. These providers process data only on our behalf and instructions, solely to deliver Service functionality, and are not permitted to use your data for their own marketing.
b. Legal requirements. We may disclose information if required by law, subpoena, or court order, or where reasonably necessary to protect the rights, safety, or property of users, the public, or the Service.
c. Business transfer. If the Service is acquired or merged, information may transfer to the successor, which will remain bound by this policy or one materially as protective.
We never sell personal information. We have not sold personal information and have no plans to do so.
5AI Processing Disclosure
Toury’s responses are generated by third-party artificial-intelligence models. Your messages, call audio, and (while the beacon is on) location context are transmitted to those providers to generate responses. Per those providers’ API terms, this data is not used to train their models. Do not share sensitive personal information (health, financial account numbers, government identifiers, etc.) in conversations with the Service.
6Data Retention
| Data | Retained |
|---|---|
| Location fixes | Rolling 24 hours, then deleted automatically |
| Pairing record (number ↔ device) | Until you unpair or request deletion |
| Conversation history | While your number remains paired, or until you request deletion |
| Verification codes | 10 minutes |
| Server logs | Up to 30 days |
7Data Security
We protect your information with, among other measures: encryption in transit (TLS) for all connections; per-device database access controls enforced at the database layer (row-level security); cryptographic verification of telephony webhooks; and server-side-only storage of all credentials. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8Your Rights and Choices
You may at any time: stop all SMS by replying STOP; disable location collection by turning off the beacon or revoking the App’s location permission; unpair your number in the App; and request access to or complete deletion of all data associated with your number by contacting us at the address below. We will honor verified deletion requests within 30 days.
Depending on where you live (for example, California or the European Economic Area), you may have additional statutory rights, including the right to know what personal information we hold, the right to deletion, the right to correct, and the right to non-discrimination for exercising these rights. We honor such requests regardless of jurisdiction. We do not “sell” or “share” personal information as those terms are defined in the California Consumer Privacy Act.
9Children’s Privacy
The Service is intended for licensed drivers and is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
10Do Not Track
The Service does not track users across third-party websites or services and therefore does not respond to “Do Not Track” signals.
11Changes to This Policy
We may update this policy from time to time. Material changes will be posted at this URL with an updated effective date. Continued use of the Service after changes take effect constitutes acceptance.
12Contact
ResearchBase — privacy requests, deletion requests, questions:
Email: rushil@researchbase.ai