Tonzo has no account, no server of its own and no advertising. Your matches, your players and their scores stay on your device.
None of this is sent to us or to anyone else. Deleting the app deletes it. There is no cloud copy to restore. An export you make with Pro goes only where you send it.
To learn which parts of the app get used and whether matches get finished, Tonzo sends a small amount of anonymous usage data to Mixpanel, a product analytics service, on servers in the European Union. It is:
No name, no email, no location and no advertising identifier. Location is not derived from your network address. You can switch this off at any time in Settings under "Share anonymous usage", and nothing else changes.
The caller speaks with the text-to-speech voices built into iOS, on the device. Tonzo does not use the microphone.
Tonzo Pro is a one-time purchase handled by Apple. We never see your payment details. Apple's handling of purchases is covered by Apple's privacy policy.
If what the app collects ever changes, this page changes first, and the date at the top moves.