Then it might not needed and ToC or Policy as in most cases it will not going to take serious user data that user are primarily concern with. But, If you are storing data from users, then I must say you need to give an idea about how you will going to use those data.
