Data and permissions
Nothing about the way Tambo handles your data should come as a surprise, which is what this page is for. It sets out, in plain language, the Data safety declaration we file with Google Play and the disclosures in our privacy policy.
Permissions, one by one
Android asks for each of these itself. Tambo explains why just before it does, and the table below says what you lose by declining.
| Permission | Why Tambo needs it | When it is used | If you decline |
|---|---|---|---|
| Location, all the time | So a stolen phone can report where it is when Tambo is closed and the screen is off. | From setup until you revoke it. Readings are taken at the interval you choose, and more often once a device is marked stolen. | Location reporting stops altogether. Tambo says so on the home screen rather than leaving you to assume you are protected. |
| Camera | To take one still image once the number of failed unlock attempts you set has been reached. | Only at the moment that threshold is crossed. Never at any other time. | Location reports still arrive, but without a photograph of whoever has the phone. |
| Notifications | To tell you on your other devices that an attempt happened. | Whenever an alert is raised. | Reports still go to your email and WhatsApp. You simply will not get a push on your other devices. |
| Device administrator | So Tambo cannot be uninstalled without your PIN, and so a reset attempt can trigger a final report. | Continuously, while enabled. | A thief can uninstall Tambo or factory reset the phone, and the trail stops there. |
| Foreground service | So Android does not kill the reporting process in the background. | Continuously, while protection is on. | Reporting becomes unreliable, because Android stops the process to save power. |
The disclosure you see in the app
Google Play requires a prominent in-app disclosure before sensitive permissions are requested. This is the exact wording, shown on its own screen with Accept and Decline given equal weight.
Tambo collects this device’s location continuously, including when the app is closed and the screen is off, so that it can report where the device is if it is stolen.
Tambo takes one photograph with the front camera after 3 failed attempts to unlock this device. It takes no photograph at any other time.
Both are sent to the email address, WhatsApp number and trusted contact you choose. Tambo does not sell your data or use it for advertising.
You can turn either off at any time in Settings. Turning them off stops the corresponding protection working.
Data safety declaration
This is what we declare to Google Play, reproduced here so you can hold us to it. Every row listed is collected. None of it is sold.
| Category | Data type | Collected | Shared | Purpose | Optional |
|---|---|---|---|---|---|
| Location | Approximate and precise location | Yes | Yes, to the recipients you nominate | App functionality | No, required |
| Photos | Photos (front-camera capture only) | Yes | Yes, to the recipients you nominate | App functionality | Yes, can be turned off |
| Personal info | Name, email address, phone number | Yes | Yes, to delivery providers | App functionality, account management | No, required |
| Personal info | Other info: trusted contact name and number | Yes | Yes, reports are sent to them | App functionality | Yes, optional |
| Device or other IDs | Device or other IDs: IMEI and serial entered by you, installation ID | Yes | No | App functionality, fraud prevention | No, required |
| App activity | Other actions: failed unlock counts, SIM changes, reset attempts | Yes | Yes, to the recipients you nominate | App functionality | No, required |
| App info and performance | Crash logs, diagnostics | Yes | No | Analytics, app functionality | Yes, can be turned off |
Encrypted in transit and at rest
TLS 1.2 or better on every connection. Photographs and locations encrypted in storage.
You can delete it yourself
You can delete your account and your data from inside the app or from this site, without contacting support. See the deletion page.
Retention: routine location check-ins 90 days; photographs and records attached to a theft event 12 months. Full detail in the privacy policy.