Privacy Policy

Casa Tookan by EverdreamSoft. Version of October 28, 2026.

Controller

EverdreamSoft SA, Rue de l’Arquebuse 13, 1204 Geneva, Switzerland (info@everdreamsoft.com), is the controller of your data in Casa Tookan.

What we collect

Your recovery phrase and private keys never leave your device. Our server (ctserver.everdreamsoft.com) receives only signatures and public addresses.

Usage statistics (on by default): what you do in the app (screens, sites opened by domain only, connections, signatures, transactions, casas added), with a random install ID, platform, app version and language. They are anonymous unless your active casa is linked to your CEID: then your casa’s Bitcoin address and your CEID number are added. Turn them off in Settings › Privacy.
Account activity: when an action on our server succeeds (adding a casa, signing in with your CEID, buying or spending Tookans, registering a device), we record it with your casa’s Bitcoin address or your CEID number. This is part of running the service, so the Usage statistics switch does not turn it off.
CEID (Casa Estates ID, your player account): public key, number, username, profile picture, devices, linked casas and their addresses (the Bitcoin and EVM addresses of a casa are paired when you link it), the addresses you share with each app, sign-ins, Tookan balance and history, and a purchase ID.
Tookans: purchase receipts from Apple or Google, and your mini-app purchases (seller, item, price, date).
Push notifications (if you turn them on): device token, platform, app version, language and your active casa’s address. Deleted when you turn them off.
Device attestation: proof from Apple or Google that you use the official app.
Server logs: each request to our server, with your IP address, user agent and, when relevant, your casa address and CEID number.

Why we use it

Purpose	Legal basis
Provide the wallet, CEID, Tookans and the features you ask for	Contract
Push notifications	Consent (turn them off anytime)
Usage statistics to improve Casa Tookan	Legitimate interest (turn them off anytime in Settings)
Account activity, analytics, server logs, verifying genuine app builds, preventing abuse and fraud	Legitimate interest
Meeting legal requirements	Legal obligation

Transfers abroad

Our servers are hosted in France. Cloudflare and Mixpanel process data in the US. Where needed, we rely on standard contractual clauses recognised by the Swiss FDPIC and the European Commission, or on the Swiss-U.S. and EU-U.S. Data Privacy Framework.

How long we keep it

CEID data: until you delete your CEID in the app. We then keep only its number, dates, the deleting key and the purchase ID (for refunds). Your username stays reserved for 30 days and your addresses for 90 days.
Usage statistics: 25 months on our server, then only as anonymous, aggregated figures that identify no one.
Account activity: 25 months, then only as anonymous, aggregated figures that identify no one.
Server logs: up to 1 year, server errors included.
Mixpanel: as set in the data retention of our Mixpanel project.

Your rights

You can access, correct, delete, restrict or export your data, and object to its processing, especially when it is based on legitimate interest. Where we rely on your consent, you can withdraw it at any time, without affecting what was done before. Write to info@everdreamsoft.com.