How Tondo handles your information
Privacy policy
How Tondo handles your information
Information we process
Tondo creates a random user identifier and session credential. We link settings, reputation, votes, saved or muted posts, moderation history, posts, replies, chats and media to that anonymous identifier. You do not need to provide a real name, email address or phone number for the standard experience.
Location
With permission, Tondo processes precise coordinates when you browse nearby content or create a post or comment. Coordinates are stored with posts and comments, post accuracy may also be stored, viewer coordinates may be sent to our service at six-decimal precision to calculate distance, and Google Maps receives coordinates to determine a vicinity or region. Exact coordinates are not shown to other users.
Public content and private chats
Posts, replies, community media and share previews can be public. Direct messages and attachments are restricted to participants but are not end-to-end encrypted. A recipient can see the first request message before accepting the chat.
Offline chat storage
Tondo stores an encrypted copy of recently synchronized chat messages and thread details on your device so you can read them without internet access. Chat attachments may also be stored in the app’s protected local storage, limited to 100 MB. Local copies are removed when a synchronized deletion is received, when you delete the conversation, or when you delete your profile.
Live streams
When you go live, Tondo sends the video and audio you choose to broadcast to Cloudflare Stream. We associate the stream title, status, approximate location label and technical delivery information with your anonymous identifier. Live comments are stored with the stream and the anonymous identifier that posted them. Live video is visible to viewers and may be recorded for service operation, safety and abuse review for up to 30 days.
Premium purchases
Apple or Google processes your payment and store account information. Tondo receives and stores the product, platform, transaction identifier, verification status and subscription expiry needed to provide Premium. Tondo does not receive your full payment-card details.
Notifications and diagnostics
We store Firebase Cloud Messaging tokens and preferences to send notifications. Google receives notification tokens and payloads. Firebase Crashlytics may receive your anonymous identifier, app and device information, crash reports, diagnostics, stack traces, build mode and authentication or suspension status. Cloudflare may process IP addresses and request metadata to deliver and secure the service.
How information is used
We use information to provide nearby posts, chats, media, notifications and account controls; rank trending content; calculate reputation; investigate reports; moderate abuse; maintain reliability; prevent fraud; and meet legal obligations.
Service providers
We use Cloudflare for app delivery, databases and media storage; Google Firebase for push messaging and crash diagnostics; and Google Maps for vicinity lookup. These providers process information under their own terms and privacy commitments.
Advertising
Tondo does not sell personal data, use the Android Advertising ID, serve targeted advertising or track your activity across other companies’ apps and websites. Tondo does not collect a phone number for the standard anonymous experience.
Retention and deletion
Delete your profile from Settings to remove its active account data, posts, replies, chats and uploaded media. Media deletion may finish asynchronously, and cached public media or share previews may remain temporarily. Limited provider logs, backups or records needed for security, fraud prevention or law may remain for longer.
Your controls
You can manage device permissions, notification categories, message requests and muted posts; delete content where offered; end or delete chats; report content; and delete your profile.
Security and children
We use encrypted network connections and access controls, but no service can guarantee absolute security. Tondo is an 18+ community and is not available to children.
Contact
Tondo is provided by GoApps Ltd. For privacy questions, safety reports or deletion assistance, email info@goapps.com.gh.