Delete your account and data
You can do this yourself, at any time, without contacting anyone. The page is public and needs no login. Google Play requires that, and it is the right way round anyway.
Two ways to do it
In the app
Settings → Profile → Delete account. Confirm with your Tambo PIN or fingerprint. Deletion begins immediately.
From this page
Email us from the address on the account. We check that the request is really from you, then delete. Use this route if you no longer have the phone.
What is deleted
- Your account, name, email address and phone number
- Every device registered to you, including the IMEI and serial you entered
- Your entire location history and trail
- Every photograph Tambo has captured
- Every security event record: failed attempts, SIM changes and reset attempts
- Your trusted contact and recipient list
- Your delivery records
Request deletion from here
Use this if you no longer have the phone. Email us from the address on the account and include:
- The email address on the account
- The phone number on the account
- Whether you want everything deleted, or only a specific device
Before anything is deleted we reply to the address on the account to confirm the request is yours. If you cannot get into that address, write to privacy@tambo-app.com from any address and we will confirm it another way.
How long it takes
| Stage | When |
|---|---|
| Protection stops, reporting ends | Immediately |
| Account closed and hidden | Immediately |
| Live records erased | Within 30 days. The window is there in case you change your mind. |
| Backups purged | Within a further 35 days, as the backup cycle turns |
| Confirmation email sent | When erasure completes |
What we must keep, and why
| What | How long | Why |
|---|---|---|
| Payment and invoice records | 7 years from the transaction | Kenyan tax law requires it. The record holds the amount, the date, the reference and the M-PESA number used. It holds no locations and no photographs. |
| Anonymous event counts | Indefinitely | Totals such as "reports delivered this month". You cannot be identified from them. |
| Records under legal hold | Until the matter ends | If data is covered by a live police request or a court order, we have to preserve it. We will tell you if that applies to you. |
The web deletion route is handled by email for now, checked against the address on the account. A self-service endpoint, with email verification, rate limiting and an audit log, replaces it once there is a backend to run it. Deletion inside the app is immediate and is unaffected. Contact: privacy@tambo-app.com.