Privacy policy

About Toromet

Toromet is a student community for discovering campus clubs and events, meeting people, and talking with them. This policy covers toromet.com and the Toromet iOS app, which loads the website and provides native device features such as notifications. Toromet is an independent service, not an official service of Toronto Metropolitan University or the University of Toronto.

For privacy questions or requests, contact alexfomchenko07@gmail.com.

Information we collect

• Account information: your email address, account identifier, sign-in verification information, and invitation or verification status.
• Your profile: your display name, photos, school, campus, faculty, program, year, interests, and any bio, Instagram handle, or activity status you add.
• Community activity: messages, voice messages, uploaded media, reactions, friendships, room memberships, blocks, reports, and feedback. We also store activity information used for online status, typing indicators, unread messages, and call participation.
• Matching preferences: whether you enable matches, the type of connection you want, your description of what you are looking for, and your adult confirmation if you choose dating.
• Device and service information: notification tokens or browser push subscriptions when enabled, session cookies, notification preferences, and technical information needed to deliver requests and troubleshoot errors. Our hosting and infrastructure providers receive network information such as your IP address when you connect.

We do not request your device address book or GPS location. Your chosen school and campus are profile information, not live location tracking. Please avoid putting sensitive personal information in your profile or messages.

How we use information

We use information to sign you in, build your profile and community rooms, deliver conversations and notifications, suggest opted-in matches, handle reports and support requests, prevent abuse, and operate and troubleshoot Toromet. Matching uses information such as your selected intent, school, campus, program, and shared interests.

Toromet does not sell your personal information or use it for cross-app advertising tracking. The app does not include advertising or advertising identifiers.

What other people can see

Your profile information is visible to other members through Toromet’s community and discovery features. Messages are available to members of the conversation or room where you post them. Your email address is used for your account and is not displayed on member profiles.

Uploaded profile photos and chat media use accessible media links. Someone who has a link may be able to open or share the file outside Toromet. Other members may also copy or save content you share. Direct messages are stored by Toromet to provide the conversation; they are not end-to-end encrypted.

Service providers and AI

Toromet uses Vercel for website hosting, Supabase for database and media storage, Resend to send sign-in emails, and Apple or your browser’s push service to deliver notifications. Notifications may contain a sender name and message preview. These providers process the information needed to provide their services.

When Shika, the clearly labeled AI host, is enabled, recent text from the All/general community room may be sent through Navy’s AI API to generate a reply or conversation opener. This can include room messages that do not mention Shika. We send message text and message identifiers with generic speaker labels, rather than member names or account identifiers. We do not include private messages, other rooms, profile records, or account email fields in that AI context. Information you type into a room message is still part of its text. Use a private conversation or another room if you do not want your messages included in Shika’s context.

Calls use WebRTC. Connection services, including Google’s STUN servers and a relay when configured, help participants connect and receive network information needed for that connection. Live call audio and video are transmitted to participants; Toromet does not record live calls. A voice message you choose to record and send is stored as chat media.

Providers may process information outside your province or country. External event, club, and social links have their own privacy practices.

Your controls

You can edit your profile, remove profile photos, turn off matching, block members, and submit reports. Notifications are optional. On iPhone, use iOS notification settings to disable them or control message previews. Camera and microphone access are requested when you use features that need them and can be changed in device settings.

We use cookies and device storage to maintain your sign-in session and remember preferences. Clearing them or signing out may require you to verify your email again.

Retention and account deletion

We retain account information and content to operate your account and the community features you use. Verification codes expire, and temporary call and activity records are managed as part of operating those features. We do not promise a single retention period for every kind of data.

You can request deletion in Toromet by opening your profile and choosing Delete account. You can also email alexfomchenko07@gmail.com for help deleting your account, accessing your information, or correcting it. We may need to verify that a request comes from the account owner.

Deleting an account cannot remove copies other people have independently saved. Provider backups and technical records may persist under the providers’ retention practices. If information must be kept to address a legal obligation or an unresolved safety issue, we retain only what is needed for that purpose.

Changes to this policy

We will update this page when Toromet’s privacy practices change. The date above identifies the latest version. Contact us if you have questions about a change or how your information is handled.