Toydrobe | The world's first wardrobe-style app for toys

How we use your data

Last updated: March 2026

This privacy policy explains how Toydrobe collects, uses, and looks after your personal information.

Toydrobe is a toy management app for parents and carers. Toydrobe helps families organise, rotate and declutter toys, and reduce over-consumption by playing with their existing toys rather than buying more. Children do not create accounts and are not the users of the service.

Who we are

Toydrobe is the trading name of Pomelo Labs Ltd (registered address: 7 Parker Cl, St Neots, UK, PE19 2HH). Pomelo Labs Ltd ("We") are the “data controller” for the personal information described in this policy. If you have questions or want to request access to or deletion of your data, please contact our Data Protection Officer at dpo@toydrobe.com.

What this policy covers

This privacy policy applies when you:

• Visit app.toydrobe.com

• Use the Toydrobe mobile app

• Sign up to our waitlist or marketing emails

• Contact us for support or feedback

• Interact with us in marketing or product research

If you don’t agree to the way we use your data as outlined in this policy, please don’t use Toydrobe.

The short version

We collect only the information we need to run Toydrobe;

We don’t sell personal data;

In-app payments are handled by Apple or Google, not us;

Parents control all information relating to children;

You can access or delete your data at any time;

When you delete your account, we remove your data within 3 months use Toydrobe.

Information we collect

Information you give us

When you create an account or contact us, we collect:

• Your name (if you choose to provide it)

• Your email address (either when you create an account with Toydrobe or sign up to our waitlist or marketing emails)

• Your account password (stored securely and never in plain text)

• Your country (if you answer our onboarding questions in the app)

We collect this data to allow you to login to the app, receive updates and marketing emails from us and to understand who is using our app.

Toy and household information

Toydrobe works by letting you build a digital toy library. This may include:

• The answers to our onboarding questions (including number of children in household)

• Toy names, categories, notes and photos you add

• Which toys are checked out and when

• General household-level usage patterns

We collect this data so the app can show toy availability, rotation history and decluttering insights.

Marketing preferences

If you sign up to our waitlist or marketing emails, you agree to let us contact you with updates about Toydrobe or marketing communications we think will be of interest to you. This involves sharing your email address and we'll give you the option to update your marketing pregerences. You can unsubscribe at any time.

We collect this data in order to contact you about new features, updates, news, offers or downtime to Toydrobe.

Information about children

Toydrobe is designed for parents and carers. Children do not create accounts or use the app independently, and we collect the least information possible about the children in your household while still creating a good user experience in the app. A parent may choose to add limited information about a child, such as:

• A first name or nickname (never full name)

• Country your family lives in (as entered by the parent)

• Play data, such as which toys were used and when

This information:

• Is provided and controlled only by the parent or carer

• Doesn't include personal data such as a child's surname, date of birth, address or school

• Is used only to organise toys and support app features

• Is never used to contact children

• Is never used to advertise to children

• Is never used for behavioural profiling or marketing

We collect this data so that you can use the full features of the app, such as allocating tokens and checking out toys depending on which child is playing.

Payments

If you buy a subscription to Toydrobe Premium (either monthly, annual or lifetime) we will store your user status in order to deliver premium-only features in the app.

All payments are processed by Apple App Store or Google Play Store - Toydrobe never sees or stores your full payment details. For more information, please see the section Who we share your data with below.

Device and usage information

When you use Toydrobe, we automatically collect some technical information, including:

• Device type, model and operating system

• App version

• IP address and approximate location

• Pages or screens viewed or actions taken

• Error and performance data

• This helps us keep the app secure, fix bugs and improve features.

We collect this data so we can understand how the app performs, understand user demographics and behaviour, identify and fix bugs and design new features for Toydrobe.

Permissions

Toydrobe allows you to upload images of the toys you own so you can easily browse them. You can change perissions at any time in your device settings.

If you choose to grant access, Toydrobe may use:

• Camera or photo library

• Device storage

We collect this data so we can deliver app features that allow you to visually browse your toy library.

How we use your data

We'll only process or use your data when we have a valid reason for doing so - for example to create and manage your Toydrobe account, understand how people are using the app, to contact or mailing list about exciting new features or to meet our legal responsibilities. By downloading Toydrobe or interacting with our services, we may use your information to:

• Create and manage your account

• Provide Toydrobe’s features

• Respond to support requests

• Send service-related messages (such as updates or policy changes)

• Notify you of updates or new features (if you have signed up to marketing emails from us)

• Monitor performance and fix issues

• Improve the app and user experience

• Keep Toydrobe safe and secure

• Comply with legal and tax obligations

We don’t use your data for advertising, and we don’t sell personal information.

Legal bases for processing (UK & EU)

If you are in the UK or EU, we process your data because:

• You agree to our terms of service and privacy policy when signing up to the app or using our services (consent)

• It’s needed to provide Toydrobe (contract)

• It helps us improve and secure the service (legitimate interests)

• We’re required to by law

You can withdraw consent at any time where consent is the legal basis. To wothdraw your consent, please email dpo@toydrobe.com..

Who we share your data with

Toydrobe is the controller of your data, but in order to provide access to the app it's necessary to share some of your information with trusted data processors. We share personal data only when necessary, including with:

• Hosting, analytics and infrastructure providers

• App store platforms (Apple and Google)

• Third party payment processors

• Legal or regulatory authorities if required by law

Anything - our platform provider

Toydrobe uses Anything (Create Inc Ltd) as our application hosting and development platform. Anything acts as a data processor on our behalf, providing the infrastructure to store and process your personal information securely.

You can review Anything's Privacy Policy here: https://www.anything.com/privacy

Through the Anything platform, we collect and store the following types of data:

Account Information

• Email address

• Name

• Password (encrypted)

• Profile information

• Language preferences

Family and usage data

• Children's names and token allowances

• Toy library information (toy names, categories, images, costs, locations)

• Toy checkout history and play tracking data

• User preferences (viewing mode, currency, premium status)

• Device information for notifications (device ID, platform, push tokens)

System data

• Authentication sessions and tokens

• Password reset tokens

• Audit logs of account activity

• Onboarding survey responses

Subprocessors

To provide our services, Anything relies on trusted third-party subprocessors:

Neon - database provider

Purpose: Database hosting and data storage

Data processed: All user data listed above

Location: United States

Website: neon.tech

Uploadcare - image storage provider

Purpose: Image storage and delivery

Data processed: Toy images uploaded by users

Location: United States

Website: uploadcare.com

Resend - email provider

Purpose: Transactional email delivery (e.g. password reset emails)

Data processed: Email addresses, password reset requests

Location: United States

Website: resend.com

Data security

All data in Anything and its subprocessors is:

• Encrypted in transit using industry-standard TLS/SSL protocols

• Stored securely on infrastructure maintained by Anything and its subprocessors

• Protected by authentication and access controls

• Backed up regularly to prevent data loss

Posthog - our analytics provider

We use PostHog to understand how Toydrobe is used. PostHog acts as a data processor and collects information such as device, IP address, and application usage data.

This data is used to improve our services and is handled according to PostHog's privacy policies and applicable regulations (GDPR/CCPA). PostHog helps us see things like:

• How the app performs

• How users behave in the app

• How many users we have

• Where errors or bugs occur

This data may include device and technical information such as IP address, device type and app version. We don’t use PostHog to collect sensitive personal data.

You can read PostHog’s privacy policy at: https://www.posthog.com/privacy

Apple App Store - our platform host

If you download Toydrobe to an Apple device and purchase a Premium subscription, your payment data will be processed by the Apple App Store. Toydrobe does not have access to nor stores your payment details (e.g. credit/debit card information).

You can review Apple's privacy policy here: https://www.apple.com/uk/legal/privacy/data/en/app-store/

Google Play Store - our platform host

If you download Toydrobe to an Android device and purchase a Premium subscription, your payment data will be processed by the Google Play Store. Toydrobe does not have access to nor stores your payment details (e.g. credit/debit card information).

You can review Google's privacy policy (which includes Google Play Store) here: https://policies.google.com/privacy

RevenueCat - our payment processor

We use RevenueCat as our third party payment processor.

If you purchase Toydrobe Premium (on either an Apple or Android device) then RevenueCat will collect some data about you and your purchase as the data processor. RevenueCat collects:

• A customer's purchase history - to correctly allow access to Premium features

• App analytics data - to understand how users use app features and evaluate other user behaviour

• App functionality data - to authenticate the user, enable features and prevent fraud

RevenueCat does not collect a user's contact information, financial data (such as payment details), location, sensitive information, contacts or browsing history.

You can review RevenueCat's privacy policy here: https://www.revenuecat.com/privacy/

How long we store your data

We keep personal information only as long as needed or required by law, and always in compliance with the data minimisation principle.

We will store your data for as long as you have an account with Toydrobe in order to be able deliver our services to you.

When you delete your Toydrobe account, your data will be deleted within 3 months. Thisis to enable us to restore access to the app in case you change your mind or deleted your account in error. If you wish to delete your data immediately, please contact us on dpo@toydrobe.com. Backup data is stored securely and removed on a rolling basis.

How we keep your data safe

The safety and security of your data is important to us, and both Toydrobe and the data processors we rely on to deliver our services therefore have appropriate technical and security measures in place to protect your information. These include:

• We store your personal data on secure servers.

• We use HTTPS and other technical safeguards to keep your information safe when it moves between your device and our systems.

• Your account is protected by a password which must meet our minimum standards. You’re responsible for keeping your password securely.

• We maintain strong physical, electronic and procedural safeguards to prevent unauthorised access.

• We regularly train our staff on data protection and confidentiality so they understand their responsibilities.

• We review and update our security measures and privacy practices on an ongoing basis to keep them effective.

• We work to reduce risks and respond quickly if issues arise.

Although we do everything possible to protect your personal data, we can't guarantee its security when you transmit your data over the internet, you share your personal data at your own risk.

Children and minors

Toydrobe is for parents and carers. We do not knowingly collect personal data directly from children and children do not create accounts.. All child-related information is entered and controlled by a parent or carer. If you believe a child’s data has been provided incorrectly, contact dpo@toydrobe.com and we will delete it immediately.

Your privacy rights

Under UK GDPR, you have the following rights when it comes to control over your personal data:

• You can withdraw your consent at any time if we rely on consent to process your data.

• You can object to how we process your data in certain situations.

• You can ask us to confirm whether we hold or use your personal data.

• You can request that we delete your personal data, where there is a valid legal basis to do so.

• You can ask us to restrict how we use your data in certain circumstances.

• You can request a copy of your personal data in a structured, commonly used and machine-readable format.

• You can ask us to correct any information that is inaccurate or incomplete.

• You have the right to complain to the Information Commissioner’s Office (ICO) or another relevant supervisory authority.

To exercise any of these rights, email us at dpo@toydrobe.com.

To protect your privacy, we may need to verify your identity before we act on your request. For example, we may ask you to contact us from the email address linked to your Toydrobe account.

We will respond without unnecessary delay and always within one month.

International users

If you’re in the US, Canada, Australia, New Zealand, South Africa or other regions, additional rights may apply under local law. We honour those rights where required.

Depending on where you live, you may have the right to:

• Access your data

• Correct inaccurate data

• Delete your data

• Object to or restrict processing

• Request data portability

• Withdraw consent

You can manage your account in the app or contact us at dpo@toydrobe.com.

Changes to this policy

We may update this policy from time to time. If changes are significant, we’ll let you know in the app or by email.

If you have questions or want to exercise your rights, contact Toydrobe's Data Protection Officer on dpo@toydrobe.com.