Privacy Policy
Version 2026-09-09 · Published 9 September 2026
Who to contact
Tumivi is an independently operated service based in Japan. Contact support@tumivi.uk for privacy questions, access, correction or deletion requests. We may verify account ownership before handling a request.
Account and device information
We collect your name, email, country and optional phone number, authentication and account records, and information you send to support. We process IP addresses, user-agent information and a browser fingerprint derived from browser and screen characteristics, language and time zone to help prevent repeated trial abuse and secure the service. Device records can include device identifiers and key hashes, hostname, operating system, network addresses, client versions, registration state and connection status.
Payments and usage
We keep payment amounts, currency, status, customer and subscription references, invoices, refunds, UPI transaction references and policy acceptance versions and timestamps. Stripe collects card and billing information, including billing address, in its payment interface; Tumivi does not store full card numbers or security codes. We also process connection health, bandwidth counters, traffic volumes, operational logs and performance measurements. This information is personal data where it relates to an identifiable person.
How we use information
We use information to create and secure accounts, enforce trials and plan limits, connect devices, operate and troubleshoot the service, process payments, send essential emails, prevent abuse, handle support and meet legal obligations. We do not sell personal information or use it for unrelated advertising. Where applicable, our grounds for processing include performing the service agreement, legitimate security and operational interests, legal obligations, and consent where required. Acknowledging this notice is not marketing consent.
Network access
Using an exit node routes selected internet traffic through the service. The service is not a remote-desktop tool and does not grant us general access to your files, camera, microphone or personal apps. Network configuration and device connection metadata are needed to operate it. We do not use bandwidth telemetry to build browsing histories; this is not a promise of anonymity or zero operational logging. Third-party sites and network providers process data under their own policies.
Providers, cookies and transfers
We use providers including Supabase for account and database services, Stripe for card payments, Resend for transactional email, and hosting and network infrastructure providers. Vercel performance tooling helps measure site performance. Essential cookies maintain authentication and security. Providers process information needed for their roles, potentially outside your country, including Japan and other infrastructure locations. We may disclose information when legally required or reasonably necessary to protect users and service security. Appropriate safeguards are used where legally required for international transfers.
Retention and your choices
We retain data only as needed for service operation, security, accounting, dispute handling and legal requirements. Operational telemetry has a scheduled retention process; billing and acceptance records may need longer retention. Backups and legal holds can delay deletion. Contact us to request access, correction, deletion or, where applicable, portability, restriction or objection. You may complain to your local privacy regulator. Deleting data needed to provide the service may require closing the account.
Security and updates
We use access controls and other reasonable safeguards, but cannot promise absolute security. The service is not intended for children under 18. We will publish updated versions and notify users of material changes where required. We will not silently treat a privacy notice update as consent to unrelated uses.