TukTuk Privacy Policy

1. What we collect

• Account: your name (and optional versions of it per language), your username and a hash of your password if you sign in with a password; if you use Google Sign-In, your Google account ID, email address, name and profile picture. The profile photo you choose.
• What you share: messages, photos, videos, GIFs you pick, reactions, posts and comments in circles, group names and icons, your contacts, and the private names you give people.
• Calls: who called whom, when, for how long, and how the call ended. Calls are never recorded. To fix bad calls, the app records technical connection quality during a call (bitrate, packet loss, reconnects, network type) — not what is said or shown.
• Devices: your signed-in devices (browser or app type, app version, last active time), the IP address each one last used, and an approximate location (city, country) worked out from that IP with a database on our own server. Push-notification tokens for your devices. Your app language.
• Diagnostics: error reports and app-launch problem reports from your device, sent only to our own server.

TukTuk does not read your phone's contacts, does not use GPS location, and collects nothing for advertising.

2. How we use it

Only to run TukTuk: to sign you in, deliver messages and calls, show your contacts whether you are online, send you notifications, keep the service secure, and fix problems. We do not advertise, build profiles, or sell or rent anyone's data.

3. Who can see what

• Messages, photos and videos: the people in that chat, group or circle.
• Your name, photo and online status: your contacts and the people you share a circle or group with.
• The administrator (Igor) sees the list of accounts with their last activity, app versions and devices, and call-quality reports, to help when something breaks. Messages and media are stored on our server and are not end-to-end encrypted; the administrator has technical access to the server and looks at stored data only to keep the service running or when you ask for help.

4. Where it is stored

On our own server and storage at Microsoft Azure in Germany (Frankfurt area). Everything travels encrypted (HTTPS/TLS). Video and voice calls are encrypted in transit and run through our own call servers, not a third-party calling service.

5. Services that receive some data

• Microsoft Azure hosts the server, database and media.
• Apple (Apple Push Notification service), Google (Firebase Cloud Messaging) and your browser's push service deliver notifications. A notification carries the sender's name and a short preview of the message.
• Google, if you choose to sign in with Google.
• KLIPY, only when you open the GIF picker: your device then contacts KLIPY directly to search and show GIFs, so KLIPY receives your search words, your IP address and basic device information, under KLIPY's own privacy policy.
• Webhooks: if someone in a chat creates a webhook, the app or service they give its link to can post messages into that chat.
• Apple (TestFlight / App Store) delivers the iPhone app; the Android app is downloaded from our own site.

There are no analytics, tracking or advertising tools in TukTuk.

6. Cookies and storage on your device

TukTuk uses one cookie to keep you signed in and one to remember your language. The app keeps copies of your recent chats and lists on your device so it opens quickly, even offline. There are no tracking or advertising cookies.

7. How long we keep it

• Account information: as long as your account exists.
• Messages, photos and videos: until the sender deletes them, or until the chat is deleted (a group is deleted when its last member leaves).
• A sign-in on a device ends after 90 days without use.
• Call-quality reports: deleted after 90 days.
• Server logs, which include IP addresses: kept for a limited time for security and troubleshooting.
• Photos and videos that were uploaded but never sent: removed within a day.

8. Your choices and rights

In the app you can change your name and photo (My profile), see your signed-in devices and sign them out, delete your own messages, leave groups, and turn notifications off in your device settings.

To get a copy of your data, or to have your account and the messages and media you sent deleted, write to pulsenewsmedia2024@gmail.com. We will do it within 30 days.

9. Google user data

If you sign in with Google, TukTuk receives only your Google account ID, email address, name and profile picture. They are used only to sign you in and to show your name and picture to people you know in TukTuk. They are never sold, shared with anyone else, or used for advertising.

TukTuk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Children

TukTuk is a private service for one family and its friends. Children use it only when a parent or guardian invites them and looks after their use. We do not knowingly collect data from children outside that.

11. Changes

If this policy changes, we will update this page and the date at the top, and announce important changes in the app.

12. Contact

Questions about privacy or your data: pulsenewsmedia2024@gmail.com.