Privacy at Tondo

Privacy Policy

GoApps Ltd provides Tondo. This policy explains what information we process, why we use it, when it may be shared, and the controls available to you.

1. Information we process

• Anonymous account data. Tondo creates a random user identifier and session credential. The standard experience does not require a real name, email address, or phone number. We also store settings, reputation, votes, saved or muted posts, and moderation history associated with that identifier.
• Content and communications. We process posts, replies, hashtags, channel selections, reports, direct-message requests, accepted chats, and the photos, videos, or voice notes you choose to share.
• Location data. With your permission, Tondo processes precise location when you browse nearby content or create a post. Precise coordinates and accuracy are stored with posts, and viewer coordinates may be sent to our service at six-decimal precision to calculate distance. Coordinates are also sent to Google Maps services to determine a vicinity or region. Exact coordinates are not displayed to other users, although a distance, vicinity, or region may be shown.
• Notifications and technical data. We store Firebase Cloud Messaging tokens and notification preferences with the anonymous identifier. Google receives notification tokens and notification payloads to deliver alerts. Firebase Crashlytics may receive the anonymous identifier, device and app information, build mode, crash reports, diagnostics, stack traces, and authentication or suspension status. Cloudflare may process IP address, request metadata, and technical data needed to deliver and secure Tondo.

2. Device permissions

Location, camera, microphone, photo-library, and notification access are requested only when relevant to a feature. You can deny or later change these permissions in your device settings. Some posting, media, nearby-content, or notification features will not work without the related permission.

3. How we use information

• provide nearby posts, conversations, media, notifications, channels, and account controls;
• calculate proximity and translate coordinates into useful vicinity or regional labels;
• rank trending content, calculate reputation, and personalize in-app ordering and settings;
• detect abuse, investigate reports, moderate content, suspend accounts, and protect users;
• diagnose crashes, maintain reliability, prevent fraud or misuse, and comply with legal obligations.

4. What other users can see

Posts and replies are designed for community visibility and may show their text or media, time, distance, vicinity, region, and a numbered anonymous participant label. Public post media and share previews may be accessible through public URLs. Direct messages and their attachments are restricted to chat participants, but they are not end-to-end encrypted; the first request message is visible to the recipient before acceptance. Tondo does not display your exact coordinates, but content, surroundings, voice, or location labels may still reveal information about you. Share carefully.

5. Service providers and disclosures

We use service providers to operate Tondo, including Cloudflare for application delivery, databases, and media storage; Google Firebase for push messaging and crash diagnostics; and Google Maps services for server-side vicinity lookup. These providers process information under their own terms and privacy commitments. We may also disclose information when required by law or when reasonably necessary to investigate abuse, protect safety, or defend legal rights.

6. No sale of personal data or targeted ads

Tondo does not sell personal data and does not use the Android Advertising ID or serve targeted advertising in the app.

7. Retention and deletion

We keep information only as long as needed to provide Tondo, maintain security, resolve disputes, and meet legal obligations. You can delete your profile from the app’s Settings screen. Profile deletion removes the anonymous account and its associated posts, replies, chats, and uploaded media from active systems; media deletion may complete asynchronously. Public media and share previews can remain temporarily in browser, network, or provider caches after deletion. Limited records may also remain in provider logs or backups, or where required for security, fraud prevention, legal compliance, or backup integrity.

8. Security

We use technical and organizational safeguards intended to protect information, including encrypted network connections and access controls. No service can guarantee absolute security. Keep your device and anonymous session credentials secure.

9. Your choices

You can manage notification categories, direct-message availability, muted posts, and device permissions. You may also delete individual content where the app provides that control, end or delete chats, report content, and delete your profile.

10. Children

Tondo is not directed to children under 13. If you believe a child has provided information through Tondo, contact us so we can investigate and take appropriate action.

11. International processing

Our service providers may process information in Ghana and other countries. Where information is transferred, we rely on the protections offered by applicable law and our service providers.

12. Changes to this policy

We may update this policy as Tondo changes. The current version will remain available at this URL with its effective date.

13. Contact

Tondo is provided by GoApps Ltd. For privacy questions, safety reports, or deletion assistance, email info@goapps.com.gh.