Privacy Policy

Last updated: September 6, 2026. This Privacy Policy explains how Tandaly LLC ("Tanda", "we", "us", or "our") collects, uses, protects, and shares information when you use Tanda at mytanda.app, the Tanda web app, or related services.

1. What Tanda is

Tanda helps people coordinate circles, rosters, rounds, receiving instructions, confirmations, reminders, support requests, and records. Tanda is non-custody: we do not collect, hold, move, process, release, or guarantee money. The pot stays with the people and groups using Tanda.

2. Data we collect

We collect the information needed to run your account and your group records:

• Account information: name, email address, phone number, password hash, Google sign-in identifier if you choose Google, session records, and recovery activity.
• Circle and group information: circle names, roster membership, roles, order, market, currency, rhythm, privacy settings, invite links, round state, and history.
• Receiving details: instructions a receiver or organizer adds so members know where to send. Sensitive details are protected and scoped to the people who need them.
• Confirmations and proof: marked-sent timestamps, confirmed-receipt timestamps, notes, optional screenshots or files, dispute notes, and related audit records.
• Support and communication data: support tickets, notification logs, message templates, delivery status, and basic metadata about reminders or links.
• Technical data: IP-derived security metadata, coarse country or region for install reliability and first-party product analytics, device/session metadata, logs, diagnostics, rate-limit events, browser family, and similar operational data.

3. Information we do not collect for custody

Tanda does not collect card numbers, wallet balances, bank balances, payment credentials, or funds. If your group uses M-Pesa, bank transfer, cash, mobile money, or another method, that method is between the people in the group and the provider they choose.

4. How we use information

We use information to provide and secure Tanda, including to authenticate users, open the right circle or invite, maintain rosters and rounds, record confirmations, show pulse and history, send transactional messages, provide support, prevent abuse, debug the service, comply with law, and improve reliability.

5. Google Sign-In

If you use Google to sign in, Google provides us with basic profile information: your Google account identifier, email address, email verification status, name, and profile photo if available. We use this only to create or open your Tanda account. Tanda does not request or access Gmail, Google Drive, Google Contacts, or Google Calendar. We do not use Google sign-in data for advertising. You can disconnect Tanda from your Google account in your Google account security settings.

6. How we use data

We use data to keep the list, route invites, send reminders, secure sessions, provide support, prevent abuse, and maintain the official record.

We also use first-party, anonymous or pseudonymous product analytics to understand public visits, sign-in and registration health, circle setup, invite joining, round activity, Early Bird, trial, paid conversion, and PWA usage. This may include account market, server-derived observed country or region, optional city when a hosting provider supplies it, timezone, broad device class, browser family, entry point, app version, service-worker version, event name, and timestamp. We do not retain the raw IP address for PWA analytics or product analytics, do not request precise browser geolocation, and do not include private circle/member information, names, emails, phones, circle names, receiving instructions, contribution notes, OAuth tokens, payment credentials, or raw IP addresses. In short, we do not retain the raw IP address for PWA or product analytics.

7. We do not sell personal data

We do not sell personal information.

8. Who sees roster and receiving details

We share information only as needed to operate Tanda:

• with members of your circle or group according to the role and privacy settings for that record;
• with service providers that host, store, secure, or deliver the service for us;
• with support and platform operators who need access to resolve safety, security, billing, compliance, or reliability issues;
• when required by law, legal process, or to protect rights, safety, and security.

9. Processors

Tanda uses service providers for hosting, storage, email, seat payments, error reporting, and security operations.

10. Retention

We keep account, circle, confirmation, support, audit, and billing records for as long as needed to provide the service, preserve the integrity of group history, resolve disputes, meet legal obligations, and protect the service. Where deletion is appropriate, we delete or de-identify information.

Anonymous PWA install telemetry and first-party product analytics are kept only in capped, short-lived operational stores and summarized with minimum cohort suppression in the staff console.

11. Your rights and delete account

You may request access, correction, export, or deletion of personal information, subject to legal requirements and the need to preserve shared group records. Email privacy@mytanda.app or use in-app Account controls where available.

12. Children

Tanda is not intended for children under 16, or under 13 where that lower age is permitted by local law. We do not knowingly collect account information from children. If you believe a child has provided account information to Tanda, contact us.

13. Security

We use safeguards such as TLS in transit, hashed session tokens, password hashing, tenant-aware access controls, least-privilege console access, audit logs, and encryption for sensitive details where appropriate. No online service is perfectly secure, but Tanda is designed around minimal access and a clear separation between records and real-world money movement.

14. International transfers

Tanda serves groups across markets and diaspora communities. Your information may be processed in countries other than where you live. We use reputable providers and reasonable safeguards for such processing.

15. Cookies and sessions

Tanda uses strictly necessary cookies and similar storage to keep you signed in, protect sessions, remember safe navigation state, and secure the product. We do not use advertising cookies.

16. Changes

We may update this Privacy Policy as the product and law change. If changes are material, we will provide reasonable notice through the service or by another appropriate method.

17. Contact

Privacy questions or requests: privacy@mytanda.app.