Overview
tokyyy (“the App”, “we”, “us”) is a staff-facing application used by organizations (“Operators”) to run cashless token and card systems at events and venues. This policy explains what information we process and how we use it. The App is intended for authorized staff of Operators, not for the general public.
Information we process
Account information: when an Operator creates a staff account, we process the staff member’s username and name, and an email and phone number if provided.
Authentication data: the credentials used to sign in.
Transaction data: records of card sales, top-ups and product purchases performed by staff, including the physical card’s identifier (an NFC or RFID chip ID) and balance changes. Card balances and transaction history are stored on our servers; the physical card itself holds only an identifier.
Technical data: basic device and log information needed to operate and secure the service.
How we use information
To provide and operate the service; to authenticate staff; to process and display token and card transactions; to provide support; and to maintain security and prevent misuse.
Data retention
We retain account and transaction data for as long as needed to provide the service to the Operator and to meet legal and accounting obligations.
Security
We protect data in transit using HTTPS and apply industry-standard measures to safeguard data at rest. Sensitive balance and transaction data is kept server-side.
Children
The App is a business tool and is not directed to children.
Your rights
Staff members may contact their Operator, or us at support@tokyyy.com, to access or correct their account information.
Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the latest revision.
Contact
Questions about this policy can be sent to support@tokyyy.com.