Privacy Policy

Last updated: June 2026

Hey Toolie ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights over it.

By using Hey Toolie you agree to this policy. If you do not agree, please stop using the service.

Important: When you ask Toolie to build or improve something, the text you type is sent to Google's Gemini AI to generate your result. Do not enter sensitive personal information, passwords, financial details, or confidential business data into the AI input.

1. Who we are

Hey Toolie is an AI-powered tool builder accessible at heytoolie.com. For questions about this policy, contact us at heytoolie@gmail.com.

2. What data we collect

If you use Hey Toolie without an account (anonymous):

The tools you create are stored only in your browser's local storage — they stay on your device and are not sent to our servers.
We collect anonymous usage data via PostHog analytics (page views, feature interactions) to understand how the app is used. This does not identify you personally.
Your IP address is used temporarily for rate limiting (preventing abuse) but is not stored.

If you create a free account:

Email address — collected when you sign in via Google or email link, used solely to identify your account.
Your tools and creations — when you share a tool or save it to your account, the content is stored on our servers so you can access it across devices.
Your Toolie Profile — if you choose to fill in "Your Toolie Profile" (name, location, goals, etc.), this is stored against your account and used to personalise the AI's responses to you. This is optional and you can delete it at any time.

AI interactions:

When you ask Toolie to build, improve, or edit something, the text you enter is sent to Google's Gemini AI (operated by Google LLC). Google processes this data under their own terms and privacy policy. We do not store the raw prompts on our servers beyond what is needed to generate your result.

3. How we use your data

To provide and improve the Hey Toolie service
To personalise AI outputs when you have a Toolie Profile set up
To understand how people use the app (anonymous analytics only)
To prevent abuse and enforce rate limits
We do not sell your data to third parties. We do not use your data for advertising.

4. Third-party services we use

Supabase (West EU — Ireland) — our database and authentication provider. Stores account data and shared tools. Supabase Privacy Policy
Google Gemini (Google LLC, USA) — AI model that powers tool generation. Your prompts are processed by Google. Google Privacy Policy
Google OAuth — used for sign-in with Google. Google Privacy Policy
PostHog (US Cloud) — anonymous usage analytics. PostHog Privacy Policy
Vercel — our hosting provider. Vercel Privacy Policy

5. Data storage and security

Account data and shared tools are stored in the EU (Ireland) via Supabase. We use industry-standard security practices including encrypted connections (HTTPS) and row-level security so users can only access their own data.

Anonymous (non-account) tool data is stored only in your browser and never leaves your device.

6. Your rights

You have the right to:

Access the personal data we hold about you
Delete your account and all associated data at any time — use the delete option in your Toolie Profile or email us
Correct inaccurate data — edit your profile at any time
Export your data — contact us and we will provide a copy
Withdraw consent — you can stop using the service and request deletion at any time

If you are in the EU, you also have rights under GDPR including the right to lodge a complaint with a supervisory authority. If you are in South Africa, you have rights under POPIA.

7. Cookies and local storage

We use browser local storage (not cookies) to save your tools on your device when you're not signed in. We do not use advertising cookies. PostHog may set a cookie for analytics purposes; you can block this in your browser settings.

8. Children

Hey Toolie is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. We will notify signed-in users of material changes by email. The "Last updated" date at the top will always reflect the current version.

10. Contact

For any privacy questions or to exercise your rights: heytoolie@gmail.com