Data and permissions
This page exists so that nothing about Tambo's data handling is a surprise. It mirrors, in plain language, the Data safety declaration we file with Google Play and the disclosures in our privacy policy.
Permissions, one by one
Android will ask for each of these itself. Tambo explains why immediately before it does, and this table says what you lose if you decline.
| Permission | Why Tambo needs it | When it is used | If you decline |
|---|---|---|---|
| Location — all the time | So a stolen phone can report where it is when Tambo is closed and the screen is off. | From setup until you revoke it. Collected at your chosen interval; more often once a device is marked stolen. | Location reporting stops entirely. Tambo will say so on the home screen rather than implying you are protected. |
| Camera | To capture one still image after the number of failed unlock attempts you set. | Only in the moment a failed-attempt threshold is crossed. Never at any other time. | You still get location reports, but no photograph of who has the phone. |
| Notifications | To tell you on your other devices that an attempt happened. | When an alert is generated. | Reports still go to email and WhatsApp. You just will not get a push. |
| Device administrator | So Tambo cannot be uninstalled without your PIN, and so a reset attempt can trigger a final report. | Continuously, while enabled. | A thief can uninstall Tambo or factory reset the phone and the trail stops there. |
| Foreground service | So Android does not kill the reporting process in the background. | Continuously, while protection is on. | Reporting becomes unreliable — Android will stop the process to save power. |
The disclosure you see in the app
Google Play requires a prominent in-app disclosure before sensitive permissions are requested. This is the exact wording, shown on its own screen with Accept and Decline of equal weight.
Tambo collects this device’s location continuously, including when the app is closed and the screen is off, so that it can report where the device is if it is stolen.
Tambo takes one photograph with the front camera after 3 failed attempts to unlock this device. It takes no photograph at any other time.
Both are sent to the email address, WhatsApp number and trusted contact you choose. Tambo does not sell your data or use it for advertising.
You can turn either off at any time in Settings. Turning them off stops the corresponding protection working.
Data safety declaration
What we declare to Google Play, reproduced here so you can hold us to it. Every row is collected, none is sold.
| Category | Data type | Collected | Shared | Purpose | Optional |
|---|---|---|---|---|---|
| Location | Approximate and precise location | Yes | Yes — to the recipients you nominate | App functionality | No — required |
| Photos | Photos (front camera capture only) | Yes | Yes — to the recipients you nominate | App functionality | Yes — can be turned off |
| Personal info | Name, email address, phone number | Yes | Yes — to delivery providers | App functionality, account management | No — required |
| Personal info | Other info — trusted contact name and number | Yes | Yes — reports are sent to them | App functionality | Yes — optional |
| Device or other IDs | Device or other IDs — IMEI and serial entered by you, installation ID | Yes | No | App functionality, fraud prevention | No — required |
| App activity | Other actions — failed unlock counts, SIM changes, reset attempts | Yes | Yes — to the recipients you nominate | App functionality | No — required |
| App info and performance | Crash logs, diagnostics | Yes | No | Analytics, app functionality | Yes — can be turned off |
Encrypted in transit and at rest
TLS 1.2 or better on every connection. Photographs and locations encrypted in storage.
You can delete it yourself
Account and data deletion is available in the app and on this site, without contacting support. See the deletion page.
Retention: routine location check-ins 90 days; photographs and records attached to a theft event 12 months. Full detail in the privacy policy.