Last Updated: November 24, 2025

At Danoke, your privacy matters to us. This Privacy Policy explains how Tomo (“we”, “our”, “the App”) collects, uses, stores, and protects your personal information. 

Tomo is committed to transparency and to helping Canadians plan their retirement with peace of mind.

By using Tomo, you agree to the practices described in this Privacy Policy.

This includes information you manually enter into the App, such as:

• Age, retirement age, and personal profile details
• Investment account balances (RRSP, TFSA, Margin, etc.)
• Contribution amounts and transaction history (if entered manually)
• Expenses, categories, budgets, and goals
• Home and property information
• Retirement assumptions (inflation, returns)

All such information is stored locally on your device unless you export or back it up.

If you choose to connect your Questrade account, we retrieve the following read-only data:

• Account names and types
• Current balances
• Holdings and positions

We do not receive or store your Questrade login credentials.
Authentication is handled through secure OAuth tokens provided by Questrade.

To improve app stability and performance, Tomo may collect anonymized diagnostic data such as:

• App usage patterns
• Device type (e.g., iPhone model, OS version)
• Crash logs (via Apple’s diagnostics, only with your consent)

This information cannot identify you personally.

We use your information to:

• Display personalized retirement calculations
• Update dashboards, charts, and projections
• Refresh connected investment account data
• Track your savings progress
• Improve app performance and user experience

We do not use your information for advertising, profiling, or sale to third parties.

All personal and financial data you enter or import is stored locally on your device using secure Apple storage technologies.

Tomo does not operate a cloud database.
We do not store your personal information on our servers.

OAuth tokens are securely stored on your device and used only to refresh your account data.
We do not have access to these tokens outside your device.

Tomo integrates with select third-party financial institutions—currently Questrade—to provide optional automated account updates.

This integration is:

• User-initiated
• Read-only
• Securely authenticated via OAuth
• Limited to balances, positions, and holdings

We do not store credentials and do not share retrieved financial information with other third parties.

Any future integrations will be added to this Policy.

We do not:

• Sell your personal information
• Rent or trade your information
• Share your information with advertisers
• Provide your information to unrelated third parties

Information may be disclosed only if required by law (e.g., legal request, court order).

You can:

• View or edit information stored in the App
• Disconnect your Questrade account at any time
• Delete specific entries (investments, expenses, etc.)
• Delete the App from your device to remove all locally stored data

If you revoke Questrade access, Tomo immediately loses authorization to access your account.

We use multiple protections to safeguard your information:

• Encrypted storage on your device
• No passwords or credentials stored
• Read-only third-party integration
• Secure OAuth authentication
• No external database storage

While no system is perfectly secure, we follow industry best practices to keep your data safe.

Tomo is not intended for children under 13, and we do not knowingly collect personal information from anyone under this age.
If we learn that information has been provided by a user under 13, we will delete it promptly.

We may update this Policy periodically.
If significant changes are made, we will:

• Update the “Last updated” date
• Provide notice within the App where appropriate

Your continued use of Tomo means you accept the updated Policy.