Your cards.
Your phone.
Tolar is an Android wallet for the loyalty cards that fill up a physical one, plus a shopping list you can share with the people you actually shop with. Scan a card once and it is there at the till, offline, in a second.
The server cannot read it
That is the unusual part, and it is meant literally. Everything lives on your phone. If you switch sync on, your cards and list are encrypted on the device before they leave it, and what reaches our server is a blob it has no key for. Not a promise about what we choose to look at — an arrangement in which there is nothing to look at.
What it does
Loyalty cards
Scan the barcode, name the card, done. It shows full-screen and full-bright at the register, and it works with no signal at all.
A shopping list
A to-do list that survives the shop. Tick things off as you go; checked items stay where they are instead of jumping around under your thumb.
Shared, with whom you choose
Send someone an invite link and you share a list, or a card, with them and nobody else. Each connection has a safety number both phones can compare.
No account
There is no sign-up, no email, no password. Sync identifies your device by a key it generates itself, backed by a twelve-word recovery phrase.
Two switches, both off
A fresh install makes no network contact of any kind. Two features can change that, and both are opt-in, separately, from Settings:
Sync & Sharing
Backs your cards and list up to our own server and shares them with people you pick. End-to-end encrypted, and never shared with a third party — the server stores ciphertext and a routing address, and that is all it can see.
Diagnostics
Sends crash reports, usage counts, screen views and sync timings to Google, along with the shop names on your cards, so the missing shop logos can be added. It is the one feature that shares anything with a third party, and the privacy policy says exactly what it sends.
No analytics on this page either — it is three pages and the type they are set in.
Where to get it
Not yet. Tolar is in closed testing and is not on Google Play for the public, so there is nothing to install from here today. This page exists first so that the privacy policy is readable before there is anything to install — which is the right order for it.
In the meantime: what it is and who makes it, and the privacy policy in full.