Delete your account and data
You can do this yourself, at any time, without contacting anyone. This page is public and needs no login, because Google Play requires that and because it is the right way round.
Two ways to do it
In the app
Settings → Profile → Delete account. Confirm with your Tambo PIN or fingerprint. Deletion begins immediately.
From this page
Email us from the address on the account. We verify the request, then delete. Use this route if you no longer have the phone.
What is deleted
- Your account, name, email address and phone number
- Every device registered to you, including the IMEI and serial you entered
- Your entire location history and trail
- Every photograph Tambo has captured
- All security event records — failed attempts, SIM changes, reset attempts
- Your trusted contact and recipient list
- Your delivery records
Request deletion from here
Use this if you no longer have the phone. Send us an email from the address on the account and include:
- The email address on the account
- The phone number on the account
- Whether you want everything deleted, or only a specific device
We reply to the address on the account to confirm it is you before deleting anything. If you cannot access that address, write to privacy@tambo-app.com from any address and we will verify another way.
How long it takes
| Stage | When |
|---|---|
| Protection stops, reporting ends | Immediately |
| Account closed and hidden | Immediately |
| Live records erased | Within 30 days — the window is there so you can change your mind |
| Backups purged | Within a further 35 days, as the backup cycle turns |
| Confirmation email sent | When erasure completes |
What we must keep, and why
| What | How long | Why |
|---|---|---|
| Payment and invoice records | 7 years from the transaction | Required by Kenyan tax law. Contains the amount, date, reference and the M-PESA number used — not your location or photographs. |
| Anonymous event counts | Indefinitely | Aggregate numbers such as "reports delivered this month". You cannot be identified from these. |
| Records under legal hold | Until the matter ends | If data is subject to a live police request or court order we must preserve it. We will tell you if this applies to you. |
The web deletion route is currently handled by email, verified against the address on the account. A self-service endpoint — with email verification, rate limiting and an audit log — replaces it once there is a backend to run it. Deletion in the app is immediate and unaffected. Contact: privacy@tambo-app.com.