Privacy Policy for Thandora

Last Updated: July 21, 2026

1. Introduction

Welcome to Thandora ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Account Information: Name, email address, phone number, and profile information
• Location Data: Your geographic location for finding nearby businesses and services
• Camera and Photos: Images captured or selected from your device for uploading business photos, product images, and profile pictures
• Messages: Chat messages and communications within the app
• Purchase Information: In-app purchases are processed by Google Play Billing. We do not collect or store your payment card details; Google Play handles the transaction and shares only the purchase status with us.

2.2 Technical Information

We automatically collect certain technical information:

• Device information (model, operating system, unique identifiers)
• App usage data and analytics
• IP address and connection information
• Push notification tokens
• Advertising ID, used by Google AdMob to serve and measure ads

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide and maintain our app functionality
• Communication: To enable messaging between users and businesses
• Location Services: To show nearby businesses and relevant local content
• Media Upload: To allow you to share business images, product photos, and profile pictures
• Authentication: To verify your identity and secure your account using OTP verification
• Payment Processing: To process in-app purchases securely through Google Play Billing
• Notifications: To send push notifications about messages, updates, and relevant information
• Analytics: To improve app performance and user experience
• Legal Compliance: To comply with legal obligations and enforce our terms

4. Permissions We Request

4.1 Camera Permission

We request camera access to allow you to:

• Take photos of your business or products
• Capture images for your profile picture
• Upload real-time images for listings

Note: You can deny camera access, but this will limit your ability to upload images directly from the camera. You can still select images from your gallery.

4.2 Location Permission

We request location access to provide location-based services and show nearby businesses.

4.3 Storage Permission

We request storage access to save and retrieve images from your device.

4.4 Notification Permission

We request notification permission to send you important updates and messages.

5. How We Store and Protect Your Information

We take data security seriously:

• Cloud Storage: Images and data are stored securely on AWS (Amazon Web Services)
• Encryption: Data is encrypted in transit using HTTPS/TLS protocols
• Authentication: We use AWS Cognito for secure user authentication
• Access Control: Only authorized personnel have access to user data
• Payment Security: In-app purchases are processed securely by Google Play Billing (we do not receive or store your credit/debit card details)

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Other Users: Your profile information, business listings, and messages are visible to other users as needed for app functionality
• Service Providers: AWS (hosting), Google Play Billing (in-app purchases), Firebase (notifications), Google Maps (location services), and Google AdMob (advertising)
• Advertising: We share your device's advertising ID with Google AdMob so it can serve and measure ads
• Legal Requirements: When required by law or to protect our rights and safety

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time.

8. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Opt-out: Disable push notifications in app settings
• Withdraw Consent: Revoke permissions at any time through device settings

9. Children's Privacy

Our app is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

10. Third-Party Services

Our app integrates with third-party services:

• AWS Amplify: Cloud infrastructure and authentication
• Google Maps: Location and mapping services
• Google Play Billing: In-app purchase processing
• Firebase: Push notifications and crash reporting
• Google AdMob: Advertising. AdMob may use your device's advertising ID to serve and measure ads. You can reset or delete this identifier at any time in your device settings under Settings → Privacy → Ads.

These services have their own privacy policies, and we encourage you to review them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

12. International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence. By using our app, you consent to such transfers.

© 2026 Thandora. All rights reserved.