Last updated: June 28, 2026
Oxytoshi collects the minimum information needed to provide the service:
Oxytoshi connects to your existing Lightning wallet via Nostr Wallet Connect (NWC), an open standard for Bitcoin wallet communication. All payments — tips, Superchats, and tip-wall unlocks — flow directly between wallets over the Lightning Network. Oxytoshi never holds, moves, or has access to your funds.
Location is only collected while the app is in the foreground and only after you manually toggle yourself as discoverable for the current session. Discoverability resets each time you launch the app — there is no option to enable automatic check-ins.
Your location is shared with other Oxytoshi users based on your visibility settings:
Opting into Creator mode makes your selected categories, bio, tip presets, tip goal, and Superchat settings visible to all authenticated Oxytoshi users so supporters can find and tip you. You can turn Creator mode off at any time from your Creator Profile — this immediately ends any live broadcast and hides your profile from the Creators tab while preserving your settings for re-activation.
Superchat messages are public during a creator's live session. Anonymous Superchats hide your display name but the underlying record of the transaction is still associated with your account so we can prevent abuse. Creators can hide individual messages, pin them, or block specific senders from their Superchat feed.
When you go live as a creator, push notifications are sent to your followers. Followers opt in by tapping “Follow” on your profile and can unfollow at any time.
Creators can post content (links or text codes) gated behind a Lightning tip. The actual payload is hidden from supporters until they pay the unlock price. Database-level access controls ensure only the creator and confirmed unlockers can read the payload.
Your Aura, Halo, and OXY scores are calculated from your tipping activity and visible to other users. The scoring algorithms are deterministic and cannot be manipulated through spending alone.
Creators with a public username have a web page at oxytoshi.com/c/[username]and a public real-time Superchat feed at oxytoshi.com/c/[username]/live. Anyone with the URL can view the creator’s name, bio, profile photo, and visible Superchat messages. Hidden Superchats are excluded. If a creator deactivates Creator mode, the public web pages no longer return their data.
We use industry-standard security measures to protect your data, including TLS-encrypted connections and Supabase row-level security policies that restrict who can read or write each row. Wallet credentials (NWC URI) are stored only on your device in secure iOS Keychain / Android Keystore — never on our servers.
You can delete your account and all associated data at any time from Settings → Account → Delete Account within the app. Account deletion is permanent and removes your profile, location data, payment history, scores, follows, Superchats you sent, tip-wall unlocks, and all other personal information. You can also block and report other users at any time.
You may request a copy of the personal data we hold about you by emailing privacy@oxytoshi.com.
Oxytoshi is not directed to children under 13 (or 16 in regions where that is the applicable minimum age). We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it.
We may update this policy as the app evolves. The “Last updated” date at the top of this page reflects when the policy last changed. Material changes will be announced in-app.
For privacy-related questions, contact us at privacy@oxytoshi.com.