How Tondo handles your information
隐私政策
How Tondo handles your information
我们处理的信息
Tondo 创建一个随机用户识别器和会话认证. 我们将设置、声誉、投票、保存或模拟的帖子、测量历史、帖子,回复、聊天和媒体链接到这个匿名识别者. 您不需要为标准体验提供真实姓名、电子邮件地址或电话号码。
Support and contact messages
When you use Contact Us, your support message is linked to your anonymous user ID and is visible to authorized Tondo admins for support and safety. The message may include any details you voluntarily enter. Do not include passwords, payment information or other sensitive data.
Device security and bans
To prevent repeat abuse, Tondo can associate a hashed app-installation identifier, verification keys, platform security results and moderation records with your anonymous accounts. Apple DeviceCheck and App Attest, or Google Play Integrity and device recall, may verify the app and remember an abuse flag across reinstalls or device resets. These security records are separate from usage analytics and may remain after account deletion while needed to enforce a ban. Provider tokens stored by Tondo are encrypted and expire. You can contact Tondo support to appeal a device ban, including if ownership of the phone has changed.
位置
With permission, Tondo processes precise coordinates when you browse nearby content or create a post or comment. Coordinates are stored with posts and comments, post accuracy may also be stored, viewer coordinates may be sent to our service at six-decimal precision to calculate distance, and Google Maps receives coordinates to determine a vicinity or region. Exact coordinates are not shown to other users.
公共内容和私人聊天
帖子、回复、社区媒体和共享预览可以公开。直接消息和附件仅限于参与者,但不被终端加密。
Media safety checks
Before a public photo or video is posted, Tondo’s self-hosted NSFWJS service may process the photo or sampled video frames to detect explicit sexual content. Cloudflare Stream temporarily processes public-post videos to prepare private frame samples. Rejected media is not placed in public storage.
离线聊天存储
Tondo 会在您的设备上存储近期已同步聊天消息和会话详情的加密副本，以便您在没有互联网连接时阅读。聊天附件也可能存储在应用受保护的本地存储空间中，上限为 100 MB。收到同步删除指令、您删除对话或删除个人资料时，本地副本将被移除。
直播
当您开始直播时，Tondo 会将您选择播出的视频和音频发送到 Cloudflare Stream。我们会将直播标题、状态、大致位置标签和技术传输信息与您的匿名标识符相关联。直播评论会连同直播及发布评论者的匿名标识符一起存储。观众可以看到直播视频；为运营服务、保障安全和审查滥用行为，直播视频可能会被录制并保留最长 30 天。
Live gifts and earnings payouts
Apple or Google processes Tondo Coin purchases. Tondo stores the product, platform, transaction identifier, verification status, coin-wallet ledger, gifts sent or received, live-gift earnings, referral rewards and payout status to prevent fraud and operate the consolidated earnings wallet. If you request an earnings payout, we also store the Mobile Money network, number and account name you provide. Authorized administrators can review these payout details to process the payment. Tondo does not receive your full payment-card details.
Referral rewards
When referral rewards are enabled, Tondo stores your personal invite code, referral-link visits, the destination platform and country, the anonymous accounts linked by a qualified referral, and a cash reward ledger. Android may provide the referral parameters through Google Play after installation; iPhone users enter the visible invite code. Tondo stores a one-way app-installation identifier to prevent repeat rewards after an account is reset. We do not use an advertising identifier or device fingerprint for referrals. Unclaimed referral-link records are deleted after 90 days.
Usage analytics and community reminders
Tondo automatically collects usage analytics. Google Analytics receives app and device information, a random app-instance identifier, country, language, screen visits, install campaigns, feature actions and store purchase metadata. We do not send post or chat text, search terms, precise coordinates, contact details or payment credentials to Analytics. Advertising identifiers and advertising personalization are disabled. Tondo also receives limited activity summaries linked to your anonymous account, app language and time-zone offset to measure usage and choose occasional community reminders after inactivity. Activity profiles and reminder records expire after 90 days; aggregate event counts are kept for up to 400 days. Community reminders can be turned off under Settings > Notifications. This does not turn off usage analytics.
通知和诊断
我们存储 Firebase Cloud 消息代币和偏好,以发送通知. Google 接收通知代币及付费。 Firebose Crashlytics 可能会收到您的匿名识别器、应用程序和设备信息、事故报告、诊断、拖车、构建模式和验证或暂停状态。
如何使用信息
我们使用信息提供附近的帖子,聊天,媒体,通知和帐户控制;排名趋势内容;计算声誉;调查报告;适度滥用;维护可靠性;防止欺诈;并履行法律义务。
服务提供商
We use Cloudflare for app delivery, databases, media storage and video processing; Google Firebase for push messaging, usage analytics and crash diagnostics; and Google Maps for vicinity lookup. These providers process information under their own terms and privacy commitments.
Privacy choices
Tondo does not display third-party ads. It does not sell personal data or collect phone numbers for the standard anonymous experience.
保留和删除
Open support or contact messages are kept while needed. Resolved or closed messages are deleted from active systems after 180 days. Delete your profile from Settings to remove its active account data, associated contact messages, posts, replies, chats and uploaded media. Media deletion may finish asynchronously, and cached public media or share previews may remain temporarily. Limited security, audit and provider records may remain as described in this policy, including in logs or backups or where needed for fraud prevention, legal compliance or backup integrity.
你的控制
您可以管理设备许可、通知类别、邮件请求和变形帖子;在提供的内容中删除内容;结束或删除聊天;报告内容;并删除您的个人资料。
安全与儿童
我们使用加密的网络连接和访问控制,但没有任何服务可以保证绝对安全。
联系人
Tondo 由 GoApps Ltd. 为隐私问题、安全报告或删除帮助,请发送电子邮件 info@goapps.com.gh。