Effective October 5, 2026

Privacy policy

Tozka ("Tozka", "we", "us") is a service operated by Userade that helps a household collect what it paid and received during the year and prepare a workbook and tax forms for its accountant. This policy explains what information we collect, how we use it, who can see it, how long we keep it, and the choices you have. It applies to tozka.com and to any application that signs in to the same account.

1. Information we collect

Account information. Your email address, the first name you give us, the household you belong to, and the times you sign in. We do not use passwords; signing in sends a one-time code to your email address.

Household content. Everything you and the other members of your household send to Tozka: typed descriptions, photos, PDFs and other files, emails forwarded or sent to your household's Tozka address, and messages from a mailbox you choose to connect. From that content we derive entries (a payee, an amount, a date, a category, and the person or business it belongs to), recurring items, questions, the workbook, and the tax forms.

Settings you provide. The names of your businesses and rental properties, your accountant's name and email address if you enter them, and your notification and privacy choices.

Technical information. Standard server logs, and daily counts of visits and actions. To count visitors we store a salted, one-way hash of your network address and browser for the day; it cannot be turned back into either and is deleted after 90 days.

2. How we use information

We use your information to provide the service: to sign you in, to read and file what you send, to keep each household's records together, to produce the workbook and tax forms, and to send the emails the service needs, such as sign-in codes, invitations, and a notice when something you sent could not be filed.

We use technical information to keep the service running, to understand how much it is used, and to protect it from abuse.

We do not sell personal information, and we do not use your household content for advertising.

3. Automated reading

Tozka uses a large language model to read what you send and propose an entry. To do that, the text and files you submit are sent to a model provider: currently OpenAI for typed text and email, and Google (Gemini) for photos and documents, with OpenAI as the stand-in when Google is unavailable. Each is used under paid API terms that prohibit the provider from using your content to train its models and that limit its retention to what is needed to process the request and to check for abuse. Nothing is filed without a record of where it came from, and anything the model is unsure about is shown to your household as a question rather than filed.

When a member of your household corrects or confirms an entry, Tozka keeps the original reading next to the corrected one. We use these pairs to measure how accurately the model reads and to find mistakes to fix. The content of these pairs stays inside your household's own storage.

4. Who can see your information

Members of your household. Everyone in a household sees everything filed in it. There are no roles; every member can add, change, and remove entries, members, and settings. A member who leaves, or is removed, is given a household of their own and asked whether to take what they filed.

The operator. The person who runs Tozka can see account information and counts: which households exist, how many people, entries, and files each has, and when it was last used. The operator cannot see the content of a household's entries or files in the ordinary course of running the service, with two exceptions: when a member of the household turns on sharing under Settings › Privacy, so that corrections can be reviewed to improve the automated reading for everyone; and when access is necessary to investigate a security problem, respond to a lawful request, or protect the service, in which case access is limited to what that purpose needs.

Service providers. Tozka runs on Cloudflare, which stores your data and delivers email to your household address; sends email through Resend; and uses OpenAI and Google for automated reading, as described above. Each provider processes information only on our instructions and under its own security commitments.

Your accountant. Tozka sends nothing to anyone outside your household on its own. The workbook and tax forms are files you download and share as you choose.

Legal requirements. We may disclose information when required by law or to protect the rights, safety, or property of Tozka, its users, or others.

5. How long we keep it

Household content is kept for as long as the household exists, because a tax year's records are useful for years afterward. You can delete individual entries and files at any time. When you leave a household and choose not to take what you filed, those items stay with the household; when you choose to take them, they move with you. Sign-in codes expire after ten minutes. Visitor hashes are deleted after 90 days. Server logs are kept for a limited period for operations and security.

If you want a household deleted entirely, write to us at the address below and we will remove its content, including stored files, from active systems within 30 days.

6. Your choices

You can review and change any entry, remove any file, rename yourself, add or remove the email addresses that are yours, leave a household, and turn sharing with the operator on or off, all from within Tozka. You can download your household's workbook at any time. Email notices about filing can be turned off per member under Settings › Notifications; sign-in codes and invitations are necessary to the service and cannot be turned off.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can exercise most of these directly in Tozka; for anything else, contact us and we will respond within the time the applicable law allows.

7. Security

Information is encrypted in transit and at rest. Each household's records are stored separately from every other household's. Sign-in uses one-time codes sent to your email address, with no password to reuse or leak. Email sent to your household address is accepted only from addresses that belong to a member and that pass sender authentication checks; everything else is declined. Access to operator tools is limited to a named account. No service can promise perfect security, and we will tell you promptly if we learn of a breach affecting your information.

8. Children

Tozka is for adults managing a household's finances. We do not knowingly collect information from children under 16. Entries may describe expenses for a child, such as childcare or tuition; those are provided by the adult member and treated as household content.

9. Changes to this policy

We will update this policy as the service changes. The effective date at the top tells you when it last changed. For material changes, we will tell members by email or by a notice in Tozka before the change takes effect.

10. Contact

Questions, requests, and complaints about privacy: privacy@tozka.com. Tozka is operated by Userade.