Language:বাংলা

The light over Dhaka

The page follows the sun over Dhaka: first light, day, golden hour and night. It never asks where you are.

Preview the page at another hour in Dhaka.

Motion
Sound
Off until you switch it on. Only an extra: everything you can hear, you can also see. The clink is made in your browser; nothing is downloaded.

Remembered in this browser only.

Policies

Privacy notice

Last updated 40 min read19 sections

In force from the day Tong launches publicly · Applies to Tong on iPhone, Android and the web (app.tong.party)

In short

This notice explains what Tong collects about you, why, who processes it and where, how long we keep it, and how you can see, change or delete it.

বাংলায় পড়ুন

1. Who we are, and which laws apply

Tong (টং) is a friendship app for adults with a Bangladeshi mobile number. Tong is published by Wevention Pty Ltd, a company registered in Australia (ABN 87 645 587 631, ACN 645 587 631), whose registered office is at Level 2, 11–17 York Street, Sydney NSW 2000, Australia.

Wevention Pty Ltd decides how your data is used and is responsible for it. Bangladesh's Personal Data Protection Act 2026 calls this the "data fiduciary" (উপাত্ত-জিম্মাদার); other laws call it the "controller". The companies that process data for us (section 8) act on our instructions, and we are responsible for what they do with your data. Our privacy team is the contact point for you and for any regulator, in Bangladesh or elsewhere.

Contact. Questions about your data, privacy requests and complaints: the Tong privacy team, privacy@tong.party. Anything else: contact@tong.party. By post: Wevention Pty Ltd, Level 2, 11–17 York Street, Sydney NSW 2000, Australia.

Bangladesh first. Tong is made for people in Bangladesh, so Bangladesh's Personal Data Protection Act 2026 (Act No. 63 of 2026) comes first. It replaced the Personal Data Protection Ordinance 2025, and it applies to Tong even though we process your data outside Bangladesh (section 1(2) of the Act). Under it, your face data and your location are sensitive data, so we ask for your specific consent before we use them. Some parts of the Act, such as its own complaint and fine sections, start later; you can already complain to the Authority (section 12).

Everywhere else. You can use Tong from any country. You get the same protections and the same 18+ rule wherever you are. Because Wevention is an Australian company, we follow the Australian Privacy Principles for everyone. The law where you live may give you extra rights, for example the GDPR in the European Union or the UK GDPR. See section 16.

2. Who Tong is for

  • Tong is only for people aged 18 or over, in every country.
  • To join, you need a Bangladeshi mobile number (+880) that can receive an SMS. You can use Tong from anywhere.
  • If we learn that someone is under 18, we delete their account and data at once, keeping only the few records section 13 lists.
  • You can't use Tong anonymously or under a made-up identity, because every member is verified. Other members see only your profile, never your full name or number (section 4).

3. What we collect and why

WhatWhy we use itLegal basis
Your mobile number (+880), checked with a code we send by SMSTo sign you in, to keep each person to one account, and to keep banned people outOur agreement with you (the Terms)
Your email address, and your Apple or Google account ID, if you sign in with them or link themTo sign you inOur agreement with you
Full nameSeen only by you and Tong's safety team. Never shown to other peopleOur agreement with you
Profile name, age, tagline, bio, your answers to profile questions and the other profile fields you fill inYour profile, which other people seeOur agreement with you
Date of birthTo check you are 18 or over, and to show your ageOur agreement with you
GenderNot shown on your profile. It decides whose Discover filters you appear in, and it is used in our gender checks (section 5)Our agreement with you
Profile photosYour profile, after they pass our checksOur agreement with you, and your consent to face checks for the checks themselves
Approximate location and the name of your areaTo show you people nearby, to show others how far away you are, and to show your profile to people elsewhere in Bangladesh and in other countries who choose to see people there (section 7)Your location consent
Face data: the live camera check, your face reference image, check results, and an estimated age range and genderTo check that you are a real person and that your photos are of you (section 5)Your specific consent to face checks. Verification is also part of our agreement with you
Friend requests, friends and blocks, and why a request was sent (for one of the other person's answers or photos, or through a friend who shared their profile)To run friend requests and chat, and to keep blocked people apartOur agreement with you
Messages and chat media (photos, voice messages, videos, GIFs, stickers, shared profiles, reactions and plans to meet for tea: a day, a time and a kind of place, never an address)To deliver your chats. A Tong reviewer sees a message only if someone reports it (section 6)Our agreement with you
GIF and sticker searchesTo find GIFs and stickers for you (section 8)Our agreement with you
Reports you make, reports about you, and our safety decisionsTo keep Tong safe and to act on reportsKeeping Tong safe, which is part of our agreement with you. Some records are also kept because the law requires it (section 9)
Your consent records (what you agreed to, which version, in which language, and when)To prove your consentThe law: we must be able to prove your consent
Device details: an ID for this install, platform, operating system, device model, app version, notification token, when the device was last usedTo send notifications, to sign you out, and for supportOur agreement with you
Your device's IP address, which our servers see with every request, and a scrambled form of itTo deliver the service, to stop sign-in abuse and to keep Tong secureOur agreement with you
Your settings: language, filters, who can find you, a break from Discover and the status your friends see, notification and chat choicesTo run the app the way you choseOur agreement with you
Crash and error reports from the app and our serversTo find and fix crashes and errors (section 8)Our agreement with you: keeping the app working
Emails you send to support or to the privacy team, and notes our staff write about your accountTo answer you and to handle your account. Staff notes are included in your data downloadOur agreement with you; for privacy requests, the law

We never store your exact location. We never receive the video from the live camera check.

If you choose to write sensitive things about yourself on your profile, such as your religion or health, other members see them. Share only what you are comfortable sharing.

Where it comes from. Most of it comes from you. Some comes from your phone or browser (device details, your IP address, and your location if you allow it), from our own checks (scores and estimates), from other members (friend requests, and reports about you), and from Apple or Google if you sign in with them (an account ID and an email address).

Reports and health. A report can accuse someone of wrongdoing, and Bangladesh's law treats data about alleged offences as sensitive. If you report that a friend might harm themselves, the report may say something about their health. Only trained Tong reviewers see reports, and only to decide them, to offer support and to keep Tong safe.

App usage statistics. We don't collect app usage statistics (such as Google Analytics). If we ever switch them on, we will update this notice first and ask for your consent where the law requires it.

4. What other people see

Other people see: your profile name, your age, your area, a rounded distance (or, for people far away, your country instead), your approved photos, and what you write on your profile.

Other people never see: your full name, mobile number, email, date of birth, gender or exact location.

Who can find you. In Settings → Privacy → Who can find you, you can limit who is shown your profile in Discover, by gender, age and distance. These limits can only narrow the filters you use to see other people. They are stored with your settings and applied on Tong's servers: people outside them don't see your profile in Discover and can't send you a friend request. Your friends and your chats are not affected.

Your friends also see your messages to them. If you both turn it on, they see a dot when you are online. There is no "last seen". Read receipts ("Seen") work only if you both turn them on. Both switches are in Settings → Privacy.

If you take a break from Discover and choose a status (such as "Exams"), your friends see it until the break ends. When you send someone a friend request for one of their answers or photos, they see which one; if a friend of you both shared their profile with you, they see which friend.

Approved photos are loaded by the app from a web address. After you remove a photo, or block someone, the old address stops working within about an hour.

Risks to keep in mind. Your profile is seen by verified adults you don't know yet. Anything you send can be saved or forwarded by the person you send it to. Chat is not end-to-end encrypted (section 6). Your face data and your location are sensitive, which is why we protect them most (sections 5, 7 and 14).

5. Face checks (selfie) and automated decisions

To keep Tong real and safe, we check that you are a real person and that every photo on your profile is of you. Face data is biometric data. Bangladesh's law treats it as sensitive data, and the GDPR as special-category data, so we use it only with your specific, explicit consent, and only for these checks. Bangladesh's law also counts photos of a face as biometric data: your profile photos are shown to others under our agreement with you, and checked only with your consent.

  • Live camera check. A short video selfie shows you are really there. Tong never receives or stores the video. We keep one still image from it, your face reference, to compare with each photo you add. Other images from the check are deleted within 7 days.
  • Photo checks. Each photo is checked automatically for nudity, violence and hateful content, for one clear face, and against your face reference. Every photo, on a profile or in chat, is also compared with lists of known child sexual abuse material, under our agreement with you and the law (section 6).
  • Who does the checks. Amazon Web Services (Rekognition), in Mumbai, India, does the checks for us. AWS keeps no images or face data after a check; our own AWS account keeps a technical record of each check, with a check ID and no images, for up to 1 year (section 9). A setting on our AWS accounts stops AWS from using your images to improve its services.

How the automated decisions work. Tong uses automated checks from Amazon Web Services to decide whether a photo or live camera check can be approved. The checks produce scores: how likely a photo shows nudity or violence, how many faces it contains and how clear they are, how similar a face is to your face reference, and how confident the live camera check is that a real person was present. Fixed rules turn these scores into one of three outcomes: approved, sent to a trained reviewer, or not approved. Only clear-cut results are decided automatically. A photo that clearly passes every check is approved. A photo is not approved, and you can replace it, if it has no face, more than one person or a face too unclear to check; if the checks find, with high confidence, nudity or sexual content (including kissing), violence, gore, other disturbing images or a hate symbol; if it is identical to a photo a reviewer turned down in the last 30 days (it is turned down again for the same reason); or if the file can't be read. A live camera check that fails can be retried. Anything unclear, and every case where a photo may not be you, is decided by a person. We also estimate an age range and a gender from your selfie; these only decide whether a reviewer takes a look, and never approve or reject anything by themselves.

We do not publish the exact scores the rules use. We never show your estimated age or gender to anyone else, and the app doesn't show it to you; it is in your data download (section 12). If the estimated gender may differ from the one you gave us, a reviewer may ask you to confirm it. Reviewers never change your gender. Your data download shows every check, its scores and what they mean (section 12).

Other automatic rules. These rules also run without a person, and none of them suspends or bans anyone: only a person does that. While your profile is hidden by one of them, your chats are paused: you and your friends can read them but can't send new messages.

  • If the age we estimate from your selfie is clearly under 18, your profile stays hidden until a Tong reviewer checks it.
  • If the date of birth you enter shows you are under 18, sign-up stops and everything you entered is deleted at once.
  • Profile text with phone numbers, links, website names, email addresses or @handles isn't saved; you can change it and try again. If you think something was blocked by mistake, write to contact@tong.party.
  • If three different members, each verified for at least a day and not hidden themselves, report you within 24 hours, your profile is hidden until a Tong reviewer looks. One report alone never hides anyone, with one exception: a "They seem under 18" report about someone our checks had already flagged as possibly under 18 hides their profile until a reviewer looks.
  • If many of your recent reports were found to be unfounded, your new reports are reviewed after more urgent ones.
  • Limits on how many requests, messages and media anyone can send stop spam and abuse. When you reach one, the app tells you, and it resets by itself.
  • Discover shows people who fit both your filters and theirs, closest and most recently active first. Nobody is ranked on looks. Today nobody can pay to be shown first; if we ever add a paid feature that changes the order, we will say so here and in the app before it starts.

A person can always look. If you miss the live camera check twice within 30 days, you can ask a person to look at it instead of trying again. If you think any decision is wrong, write to privacy@tong.party: a person who did not make the decision will look at it again and reply. You can also withdraw your consent to automated decisions alone, without withdrawing your consent to face checks: write to privacy@tong.party, and from then on a Tong reviewer makes every decision on your photos and live camera checks (Bangladesh's Act, section 13(1)).

Face data is used only to verify you. It is never used for advertising or marketing.

If you don't agree to face checks, or you withdraw your consent, Tong can't show your profile, because Tong only shows verified profiles. That's why we ask for your specific consent and also rely on our agreement with you (Bangladesh's Act, section 7). If you say no or withdraw, your face data is deleted and your profile is hidden. Your friends and chats are kept, but until you verify again your chats are paused for both of you: you can read them, but neither of you can send new messages. You can still sign in, download your data, report, block or delete your account; nobody new can find you in Discover, and you can't see others there. You can agree again at any time and do a new live camera check.

Covered faces. A face covered by a niqab, a mask or sunglasses that hide the eyes cannot be verified, because it can't be compared with your photos. Hijab, caps and ordinary glasses are fine. If this rule changes, we will update this notice and our Help page.

6. Chat

  • Chat text, voice messages and the content of chat photos and videos are never read or analysed by Tong or any other company. The only automatic check is that each chat photo and video is compared with lists of known child sexual abuse material (a digital fingerprint match that can't read or describe anything else). No chat content is sent to AWS.
  • A Tong reviewer sees a message and its media only if one of the two people reports it. A report copies the reported message, up to 19 messages around it (media around it as labels only) and the reported photo, voice message or video. That copy is kept with the report.
  • A report about a person made from the chat, from Blocked people or from Report someone from a past chat also copies your last 20 messages with them (text, and media as labels only). The report form tells you this before you send it.
  • A message you delete for everyone, and the earlier text of a message you edit, are kept hidden for 7 days so they can still be reported. Only a Tong reviewer can see them, and only if one of you reports it. Because of how deletion runs, this can take up to 8 days.
  • Voice messages and videos are deleted from Tong 90 days after they are sent. A reported one is kept until its review is closed.
  • Anything you send can be saved or forwarded by the friend you send it to. Copies someone saved on their phone stay theirs. Deleting a message does not delete copies your friend already forwarded to other chats.
  • We remove GPS and other hidden details (metadata) from every chat photo and video before anyone sees it.
  • A plan to meet for tea holds only a day, a time and a kind of place, never a map pin or an address. If you share a plan with someone you trust, your phone shares it; Tong stores nothing about that.
  • GIFs and stickers come from KLIPY (section 8).
  • The online dot shows only to friends, and only while you both have it on. There is no "last seen".
  • Chat is not end-to-end encrypted, because reports need evidence. It is encrypted in transit and when stored.
  • Notifications about messages are explained in section 8.

7. Location and distance

This section is the full version of the location notice you see in the app before your phone asks for location.

Why. Tong uses your phone's location to show you people nearby and to show others how far away you are. People who choose to see all of Bangladesh, or people anywhere, can also see your profile from farther away, including from other countries.

What we ask for. We ask only while you are using Tong, never in the background. "Approximate" location is enough; you don't have to allow "precise". On the web, your browser asks.

What we keep.

  • Your phone sends its position to our server. The server turns it into an approximate position (a small area of roughly 1 km by ½ km) and the name of your area, then throws the exact position away at once. It is never saved, not even in our logs.
  • The area is your thana or upazila in Bangladesh, and your neighbourhood and city elsewhere. Outside Bangladesh, the name is looked up inside Tong's own servers from a copy of the GeoNames list. No map company receives your location.
  • We update it when you open Tong, at most every 30 minutes, and only if you have already allowed location on your phone.

What other people see.

  • People within 100 km see your area and a rounded distance.
  • People farther away see your area and your country, and no distance.
  • Nobody sees your exact location. Crash reports and our service logs never contain your location.

Where and how long. Your approximate location is stored in Mumbai, India, with the rest of your account. We keep it until you update it, withdraw your consent or delete your account.

Your choice. Location is sensitive data under Bangladesh's law, so we use it only with your consent. You can withdraw it at any time in Settings → Privacy → Permissions and consents. Your location is then deleted and your profile is hidden until you share it again. While it is hidden, your chats are paused: you and your friends can read them but can't send new messages. You can also turn off location for Tong in your phone's or browser's settings; we then can't update your area.

8. Who processes your data, and where

Tong stores and processes your data outside Bangladesh, in Mumbai, India, on Google Cloud (Firebase) and Amazon Web Services. Some services run in other countries, as the table shows. You agree to this when you join, and it is also needed to provide the service you asked for (Bangladesh's Act, section 29(3)). You can withdraw that consent only by deleting your account, because Tong can't run without these services. Your data is stored in Mumbai wherever you use Tong from; authorised staff may see it from other countries.

CompanyWhat it does for TongWhereWhat data
Google (Firebase and Google Cloud)Database, file storage, server functions and the web appMumbai, India. Approved profile photos may be cached in Google's network worldwide for up to an hourAll app data
GoogleSign-in (including the email with your sign-in link), notifications, app settings and app integrity checksWorldwide, which may include the United StatesEmail, sign-in and device IDs, notification tokens and notification text. Not your mobile number
Amazon Web Services (Rekognition and Face Liveness)Photo checks and the live camera checkMumbai, IndiaYour photos, the live camera check's video stream and still images. No images or face data are kept at AWS
BulkSMSBDSends your sign-in code by SMSA Bangladeshi company, whose sending server appears to be in Singapore (see below). If you are abroad, the SMS also passes through your roaming partner's networkYour mobile number and the text with the code. Nothing else about you
SentryCrash and error reportsUnited StatesYour Tong user ID, device and app details, the error, and for some sessions performance measurements. No names, numbers, email, messages, photos, location or screenshots
KLIPYGIFs and stickersUnited States and AsiaWhen you open the GIF or sticker picker, your language and a scrambled ID (never your Tong user ID); when you search, your search words. GIFs and stickers, including ones friends send you, load from KLIPY, which sees your device's IP address and can work out your approximate location from it
AppleDelivers notifications to iPhones, and checks that the iPhone app is genuineWorldwide, which may include the United StatesNotification token and notification text; a device check
Your browser's push service (for example Google, Apple or Mozilla)Delivers notifications on the webWorldwideNotification token and notification text
ExpoDelivers app updatesUnited States, through a worldwide networkYour device's IP address, the app version and a random ID for this install. No account data
Apple (iCloud Mail)Hosts our email addresses, contact@tong.party and privacy@tong.partyWorldwide, which may include the United StatesWhatever you write to us by email
AnthropicClaude, an AI system that helps us build and run Tong, can read our service logs and error reports to fix problems, and in an incident, with the founder's time-limited approval, the records the investigation needsUnited StatesTong user IDs, technical details and error reports; no message text, phone numbers or location (in an incident, only what the investigation needs)

Sign-in codes by SMS. When you sign in with your number, we send a text message with a code through BulkSMSBD, a Bangladeshi SMS company, and your mobile operator. The text says only that it is your Tong code. BulkSMSBD gets your number and that text, nothing else. BulkSMSBD is run by Fahim IT in Dhaka, which the BTRC (Bangladesh's telecom regulator) lists as an approved bulk-SMS provider. It checks the texts it sends for misuse, and says it doesn't keep them for long, without giving a period. The server we send texts to appears to be in Singapore, so your number and code may pass through Singapore before they reach your operator in Bangladesh. We treat this as a transfer abroad.

Notifications. If you allow notifications, Google's Firebase Cloud Messaging delivers them; on iPhone they also pass through Apple, and on the web through your browser's push service. A new-message notification shows the sender's profile name and the start of the message (up to 100 characters), so these services carry that text; Tong doesn't store it. You can choose which notifications you get in Settings → Notifications, or turn them off in your phone's settings.

Crash reports. When the app or our servers hit an error, a report goes to Sentry (Functional Software, Inc.) in the United States. It holds your Tong user ID, your device and app version, and what went wrong. For a small share of sessions, it also gets performance measurements (how long screens and requests take). Before it leaves, we remove phone numbers, email addresses, names, message text and location. We never send screenshots or screen recordings, and Sentry is set not to store your IP address. Sentry deletes the reports after 90 days at most.

GIFs and stickers. GIFs and stickers come from KLIPY, run by Kikliko, Inc. in the United States, which hosts its service on Google Cloud in the United States and Asia. Requests to KLIPY go through Tong's server, so KLIPY never gets your Tong user ID, name or number. Using the GIF and sticker picker is optional. KLIPY gets your scrambled ID and language only when you open the picker, and your search words only when you search. But every GIF and sticker shown in Tong, including one a friend sends you, loads from KLIPY's servers, which see your device's IP address and can work out your approximate location from it. It is not only working for us: under its own privacy policy, it also uses this data for its own purposes, such as improving its search, statistics and, its policy says, advertising measurement and targeting. Tong shows no ads in the GIF picker and sends KLIPY no age, gender or advertising ID.

App updates. When the app checks for an update, the update service run by Expo (650 Industries, Inc.) sees your device's IP address, the app version and a random ID for this install. It receives no account data.

On the web. The web app keeps your sign-in and your settings in your browser's storage, and a copy of recently loaded data so that it opens quickly. If you untick "Keep me logged in on this computer" when you log in, your sign-in lasts only while the tab is open, and no copy of your data is kept. Google's reCAPTCHA Enterprise checks that requests come from the real Tong web app; it may set a cookie, and it sees your browser details and IP address. We use no advertising or analytics cookies.

How we protect transfers.

  • Google, AWS, Sentry and Anthropic process your data only on our instructions, under their data-processing terms: the Google Cloud Data Processing Addendum, the Firebase Data Processing and Security Terms, the AWS Data Processing Addendum, Sentry's Data Processing Addendum and Anthropic's Data Processing Addendum. For data from the EU and the UK, these terms include the European Commission's standard contractual clauses and their UK equivalent. Expo and Apple's iCloud Mail work under their own service terms.
  • Your data is encrypted in transit and when stored.
  • Apart from the companies in the table above, only Tong's systems and authorised staff can access your data, each only what their job needs. Face data can be read only by Tong's verification service.
  • AWS's setting that stops it keeping or using Rekognition content is switched on.
  • We send each company only what it needs: apart from Google Cloud, which stores your account in Mumbai, only BulkSMSBD and your mobile operator get your mobile number in the normal course, and no company keeps your exact location.

Others who may receive data.

  • Your friends see what you share with them.
  • People who work for Tong, as staff or contractors, see only what their task needs, under written confidentiality terms.
  • We may give data to the police, a court or another authority when the law requires it, or when someone's life or safety is in danger, for example in a child-safety case, which we also report to the US National Center for Missing & Exploited Children as our child safety standards describe. We give only what the request needs.
  • Our professional advisers (such as lawyers and accountants) may see data when they advise us, under a duty of confidentiality.
  • If Wevention ever sells or transfers Tong, your data would go to the new owner only under this notice. We would tell you first, and you could delete your account before it moves.
  • Apple and Google run their own sign-in services, under their own privacy policies, if you use them to sign in.

9. How long we keep your data

DataHow long
Account, profile, photos and friendshipsUntil you delete your account. Deletion is completed within 30 days
Live camera check videoNever received or stored by Tong
Live camera check images, other than your face reference7 days
Your face reference, check results, and your age and gender estimatesUntil you delete your account or withdraw consent to face checks
Photos that were not approved30 days, so the decision can be looked at again if you ask, then deleted
Messages, chat photos, GIFs, stickers, shared profiles and plansWhile the chat is open. When a chat ends (unfriend or block), 30 more days, then deleted. When you delete your account, see section 10
Voice messages and videos in chat90 days after they are sent, then deleted from Tong for both people. A reported one stays until its review is closed
A message you delete for everyone, and the earlier text of a message you editKept hidden for 7 days (up to 8 in practice), seen only by a Tong reviewer and only if one of you reports it
Approximate locationUntil you update it, withdraw consent or delete your account
Sign-in code records (your number, the code and your IP address in scrambled form, attempts and sends)24 hours, then deleted (usually within a further day)
Your friend-request history (used for request limits)90 days
Automatic check scores for a photo file, stored by a fingerprint of the file (no name, no image)90 days
Device recordsUntil you sign out on that device, or 180 days after it was last used
Reports and review records1 year after they are resolved, without your name if you delete your account
Records of moderation actions and staff actions5 years, without your name if you delete your account
Proof that an account was deleted, and which consent notice versions it had agreed to5 years, without your name
Data under a legal hold or a preservation order (for example in a child-safety case)Until the police, the court or the authority no longer needs it, then deleted
A banned account's mobile number, in scrambled form2 years
If you use Tong in Australia: the mobile number you joined with, in scrambled form, after your account is deleted2 years, as Australia's online safety rules require; used only to keep banned people out and to answer the police
Service logs (IDs, codes, counts and IP addresses; never message text, your number or your location)30 days, including after you delete your account
Technical records of each check in our AWS account (a check ID, no images)1 year
Crash and error reports at SentryUp to 90 days, then deleted by Sentry
Emails to support and to the privacy team2 years after the conversation ends. A short record that we answered a privacy request is kept for 5 years
BackupsDeleted data can remain in backups for up to 14 days
Your data downloads7 days

Some companies also keep records of their own, for the times in their own terms: BulkSMSBD keeps a record of the texts it sent (it doesn't say for how long), and KLIPY keeps its search logs for its own purposes (section 8).

10. When you delete your account

  • You can delete your account in the app (Settings → Delete account) or on the web (how).
  • Sign-in stops and every session ends at once. Your profile disappears for everyone at once.
  • Everything else is deleted within 30 days: your profile, photos, face data, location, friends, requests, blocks, settings, device records, consent records and data downloads.
  • Your chats are deleted for both people at once, with all their messages and media, unless a court, the police or another authority has lawfully told us to preserve them; then they are kept, hidden, only until that order ends.
  • If you signed in with Apple, we also ask Apple to end Tong's access to your Apple ID where Apple lets us; you can always do it yourself in your Apple ID settings (Sign in with Apple).
  • Kept without your name: reports and review records (1 year after they are resolved), records of moderation and staff actions (5 years), and the proof of deletion with the consent notice versions you had agreed to (5 years). If a report about you is still open, our team may look at it for up to 72 hours before your name is removed.
  • Two exceptions: if a report about you led to a ban, the evidence copied into it (for example your messages or photos) is kept with it for 1 year after it is resolved; and anything under a legal hold or a preservation order is kept, still linked to your account, until the police, the court or the authority no longer needs it, then deleted.
  • Copies of your messages that your friends saved on their phones, or forwarded to other chats, are not deleted.
  • Deleted data can stay in our backups for up to 14 days, and crash reports at Sentry until they expire (section 9).
  • See also the page Delete your Tong account.

11. Your consents

You give four separate consents, each with its own tick or button, and nothing is ticked for you. The first two have their own tick boxes on one screen before you start; location and face checks each come on their own screen, with their own button.

ConsentWhen we askHow to withdrawWhat happens
Terms (and confirming you read this notice)Before you startOnly by deleting your account—
Data kept outside BangladeshBefore you startOnly by deleting your account—
LocationBefore your phone asks for locationSettings → Privacy → Permissions and consentsYour location is deleted, and until you share it again your profile is hidden and your chats are paused (you and your friends can read them, but not send new messages)
Face checksBefore your first photoSettings → Privacy → Permissions and consentsYour face reference, check images and estimates are deleted, and your profile is hidden; until you verify again, your chats are paused in the same way. To come back, you agree again and do a new live camera check. Approved photos stay on your account, hidden, until you remove them

Withdrawing a consent doesn't make what we did before it unlawful. If we change a consent notice (for example a new purpose, a new company, a new country or a new retention period), the app shows you the new version, and the processing it covers doesn't happen for you until you agree.

12. Your rights

You have these rights wherever you live. Most of them work straight from the app. They cost nothing, and no contract or notice can take them away.

RightHowHow long it takes
See your data, and get a copy you can take elsewhereSettings → Privacy → Download my data. One request a day. The copy is a zip file of readable data files and your mediaUsually within 24 hours. The download link is ready for 7 days
Correct your dataEdit profile. For your date of birth, or anything you can't edit, contact supportWithin 30 days of your request
Delete your dataSettings → Delete account, or on the web (how)Completed within 30 days
Withdraw consentSettings → Privacy → Permissions and consents (section 11)At once
Object, or ask us to stop using some of your dataWrite to privacy@tong.party and tell us what worries youIf you tell us the use may harm you, we stop it while we look at it, unless the law requires us to continue; we tell you what we decided and answer within 30 days (Bangladesh's Act, section 13(5))
Be told before automated decisions, and ask a person to lookThe face-check notice, before your first photo (section 5); write to privacy@tong.partyBefore your first photo; we answer within 30 days
Withdraw consent to automated decisionsWrite to privacy@tong.party (section 5)We confirm within 7 days; from then on a person decides
ComplainWrite to privacy@tong.party first. You can also complain to a regulator (below)We confirm we have your complaint within 7 days and answer within 30 days

Requests by email. Write to privacy@tong.party, in Bangla or English. We confirm that we have your request within 7 days and answer within 30 days. To protect your account, we may ask you to show that the account is yours, for example by writing from the email linked to it, or by telling us details only the account owner would know. We never ask for your sign-in code.

If we can't do what you ask. If we refuse a correction or another request, we tell you why in writing. You can ask us to mark the data as disputed and to tell the Authority.

Complaining to a regulator. In Bangladesh, you can complain to the National Data Management Authority, which oversees data protection (National Data Management Act 2026, section 42). The Personal Data Protection Act 2026's own complaint sections start later, on a date the government will announce. In Australia, you can complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au) if you are not happy with our answer after 30 days. If you live in the EU or the UK, you can complain to your local data protection authority (in the UK, the Information Commissioner's Office).

What your data download contains: your account and profile, your photos, your friends, your own messages, your consent records, every photo check (decision, reason, scores and what they mean, the rules version), every live camera check (date, decision, confidence), your face reference image, your age and gender estimates, moderation actions on your account with their reasons, staff notes about your account, the reports you made, the voice messages, videos and photos you sent that have not expired (as files; what you received, as a list only), this retention table, the list of companies above, and the automated-decision statement in section 5. It never includes who reported you or other people's evidence, because that would harm their rights; where the law requires it, we tell the Authority that we left this out and follow its decision.

13. Children

Tong is for adults only, aged 18 or over, in every country. We don't collect a parent's consent, so we don't keep a child's account: we delete it as soon as we know. We keep only the mobile number of an under-18 account we banned, in scrambled form for 2 years, so it can't be used to join again; records of reports about them, of our safety decisions and of the deletion, for the times in section 9; and evidence we must keep for the police in a child-safety case.

  • If you enter a date of birth under 18, we stop and delete everything collected so far.
  • If our checks or a report suggest someone may be under 18, their profile can be hidden while a reviewer looks. If they are under 18, the account is banned and deleted at once, and the mobile number is kept in scrambled form for 2 years.
  • If you think a child is using Tong, report their profile in the app, or write to privacy@tong.party.
  • Read our child safety standards.

14. Security and breaches

  • Your data is encrypted in transit and when stored.
  • Sign-in codes are never stored in readable form. A code works for 10 minutes and locks after 5 wrong tries.
  • Tong staff sign in with a second factor. They see only what a task needs, images come one at a time, and every look at your data or images is logged.
  • Face data can be read only by Tong's verification service.
  • We test our protections regularly and keep backups so we can restore the service after an incident.

If a breach of personal data happens, we assess it within 24 hours of finding it. If it is likely to cause significant harm, we tell Bangladesh's Authority in the form and time its rules set, and the people affected without undue delay: directly where we can (by email if we have your address, or in the app) and with a notice on tong.party. We treat any exposure of face data or location as serious. We also follow the breach rules of Australia and of the country where you live where they apply, for example by telling the OAIC or your data protection authority.

15. Advertising, tracking and selling

Tong shows no ads. We don't use an advertising ID, and we don't track you across other apps or websites.

We don't sell your personal data. No one pays us for it, and we don't give it to data brokers. Apart from what we must give the police or other authorities (section 8), the only company that uses your data for its own purposes is KLIPY, and only in connection with GIFs and stickers: when you open the picker it gets your language and a scrambled ID (never your name, number or Tong user ID), when you search it gets your search words, and it sees your IP address whenever a GIF or sticker loads on your device, including one a friend sent you. KLIPY may use these under its own privacy policy, for example to improve its search and, its policy says, for advertising measurement and targeting (section 8). Tong gets no money from KLIPY.

We don't send marketing emails, texts or notifications. If we ever do, we will ask you first, say who it is from (Wevention Pty Ltd), and every message will let you unsubscribe.

16. If you live outside Bangladesh

You get the same protections, texts and 18+ rule wherever you live. Your data is stored in Mumbai, India. The law of the country where you live may also apply and give you extra rights. In short:

  • Australia (Privacy Act 1988). Wevention Pty Ltd is an Australian company and handles your data in line with the Australian Privacy Principles, wherever you live. This notice is our privacy policy under them. Your data is stored in India, and some of it goes to the United States, Singapore, Bangladesh and other countries in Asia (section 8); Tong's staff and contractors may see it from Australia, Bangladesh or wherever they work. Where a company abroad receives your data from us, we remain responsible under Australian law for how it handles it. You can ask to see and correct your data (section 12). If you are not happy with how we handle a complaint, you can complain to the OAIC.
  • European Union and United Kingdom (GDPR and UK GDPR). We use your data because of our agreement with you (the Terms); for face checks, because of your explicit consent; for location, because of your consent; for safety records and crash reports, because of our legitimate interest in keeping Tong safe and working; and for consent records, because the law requires it. You have the rights in section 12, and also the right to get your data in a portable form (the data download), to ask us to limit how we use it, and to object to uses based on our legitimate interests: write to privacy@tong.party. You can always ask a person to look at an automated decision (section 5). Your data goes to India, and some of it to the United States, Singapore and Bangladesh; our staff may see it from Australia. Where the EU or UK doesn't recognise a country as protecting data to its standard, the standard contractual clauses in Google's, AWS's, Sentry's and Anthropic's terms (section 8) cover the transfer. The other companies in section 8 (BulkSMSBD, KLIPY, Expo and Apple's iCloud Mail) have no such clauses with us: data goes to them only because the service you asked for needs it (your sign-in code, GIFs and stickers you use or view, app updates, emails you send us), and data goes to KLIPY in the United States only when you use or view GIFs and stickers (section 8). You can ask us for a copy of these safeguards. Tong isn't offered in app stores in the European Union, the European Economic Area or the United Kingdom, and we haven't appointed a representative there. If you use Tong from there anyway, for example on the web, you still have every right in this section. You can complain to your local data protection authority.
  • Other countries. If your country's law gives you a right that isn't listed here, write to privacy@tong.party and we will help.

17. Changes to this notice

We post every new version on this page with its date, and we keep every earlier version: write to us for a copy. If a change matters to you (for example a new purpose, a new company, a new country or a longer retention period), we tell you in the app at least 30 days before it applies. If a change needs your consent again, the app asks you, and the new processing doesn't start for you until you agree.

18. Language

This notice is published in English and Bangla. Both versions are equally valid. If they ever seem to say different things, the meaning that is more favourable to you applies.

19. Contact

Questions about your data, privacy requests and complaints: the Tong privacy team, privacy@tong.party. Anything else: contact@tong.party. By post: Wevention Pty Ltd, Level 2, 11–17 York Street, Sydney NSW 2000, Australia. You can also read our Terms, Community guidelines and Help.

Back to topবাংলায় পড়ুন