1. Data we collect
Account and verification data may include email, password hash, age or birth date, display name, university or locality, profile details, consent records, and identity or student verification images and review results.
Service data includes posts, comments, listings, applications, messages, reports, moderation records, device and app version, push token, security logs, and interactions with features.
During an active Run, we collect precise coordinates, timestamps, accuracy, altitude, speed, heading, session state, route-quality signals, and resulting territory or ranking data.
2. How we use data
We use data to create and secure accounts; verify eligibility; deliver community, marketplace, messaging, opportunity, notification, and Run features; prevent fraud and GPS manipulation; moderate abuse; respond to requests and appeals; maintain records required by law; and measure and improve reliability.
3. Location controls and retention
Background location is activated only for an active Run after permission is granted. It stops when you pause, finish, or discard. Pending fixes are stored on the device so a screen-off or offline period does not erase the route.
Normal raw Run points are scheduled for deletion after 24 hours. Data needed for an active integrity review or appeal may be kept for up to 30 days. Aggregated session results, territory ownership, and anti-abuse records may be kept longer without the raw route.
4. Sharing and processors
We do not sell personal data. We share only what is needed with infrastructure, email, security, map-content, Firebase/Google, Apple, and other vendors that help operate TATAK; with other members when you publish or transact; and with authorities or advisers when legally required or necessary to protect rights and safety.
5. International processing
TATAK serves users in the Philippines and is operated by a Korean company. Data may therefore be processed in Korea, the Philippines, or a service provider's region, subject to contractual and technical safeguards appropriate to the transfer.
6. Retention and security
We keep data only as long as needed for the purposes above, account operation, disputes, safety, or legal obligations. Identity images and private uploads receive restricted access. We use encryption in transit, access controls, hashed passwords, secure mobile token storage, logging, and backups, but no system can guarantee absolute security.
7. Your choices and rights
You can edit profile and notification preferences, deny device permissions, stop a Run, and delete your account. Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Withdrawal does not affect processing already lawfully completed.
See account deletion instructions or contact privacy@tatak.net. We may verify that the request belongs to you.
8. Age and policy changes
TATAK accounts are for people aged 18 or older. We will update this notice when practices materially change and request renewed consent where required.