Privacy Policy

1. Who we are

Tacktus (the iPhone and Android apps, the web app at app.tacktus.com and the website tacktus.com) is published by Elhadji Ibrahima Ndiaye, an individual based in Dakar, Senegal (“we”). The publisher is the data controller for the personal data described in this policy.

For any question about your data, write to contact@tacktus.com.

2. What Tacktus does, and does not do

Tacktus records debts between two people: who lent what to whom, the repayments made and the balance left. It does not hold, receive or transfer money. Money moves between you, outside the app; Tacktus only keeps the record once both of you confirm it.

3. The data we collect

Your account: your email address and name. If you sign in with Apple or Google, the identifier and email address that service shares with us. If you add a phone number, we verify it with a code and use it only to connect you to debts addressed to that number.

What you record: for each person you record a debt with, a name and one email address or phone number (when you pick someone from your phone's contacts, your address book is read on your device and only that name and that address or number reach us); your debts and repayments (amount, what for, currency, due date, who recorded and confirmed them, and the events on each debt); your preferences (language, display currency, notifications); and one push notification token per device.

Technical and website data: crash reports (device model, app version, error details, never amounts); visit statistics for tacktus.com, collected without cookies and without storing your IP address; and our host's short-lived request logs (IP address, browser).

4. Why we use it

To run Tacktus: create your account, show each debt to the two people on it, compute balances, and notify you when something needs your confirmation.

To keep the service reliable and safe: verify phone numbers, fix crashes and prevent abuse. We do not use your data for advertising and do not build profiles.

To answer your requests and meet our legal obligations.

5. People you record debts with

Each debt comes with an invitation link. While the debt is pending, anyone holding that link can see its details, including your name and the amount. Tacktus never sends the link: you share it yourself, so share it only with the person concerned.

The name and the email address or phone number you enter for someone are stored so the debt can reach them. Anyone you record a debt with can ask us to erase their data by writing to contact@tacktus.com.

6. Who we share it with

The other person on a debt sees your name and the debts and repayments you have with them. Nobody else does.

Our service providers, who process data on our behalf only to run Tacktus: Clerk (sign-in), Convex (database and server functions), Apple and Google (sign-in with their account if you use it, and push notifications, sent through Expo), Sentry (crash reports) and Vercel (hosting of the websites, anonymous statistics for tacktus.com). The exchange rate service we use receives no personal data.

We never sell your data. We disclose it only when the law requires it.

7. Where it is hosted

Our providers store and process data mainly in the United States. We choose providers who commit to protecting it to recognised standards.

8. How long we keep it

As long as your account exists. When you delete your account from the app, your profile (name, email address, phone number, photo), preferences and Tacktus contacts are removed right away, and your sign-in account is deleted. Pending invitations you sent are withdrawn; those addressed to your account are declined.

Debts and repayments that were already settled stay in the other participant's history, where you appear as “Deleted User”; invitations withdrawn or declined by the deletion stay there too. Your email address and phone number are removed from the contacts linked to your account; the nickname they chose and the descriptions and notes written on shared debts and repayments remain. We also keep technical deletion records, verified phone numbers with their verification date, and past notifications and older debt activity that may carry your former name.

If you can no longer sign in, ask us by email instead (see our support page).

Website statistics are anonymous from the start.

9. Your rights

You can ask to access, correct or erase your data, or to receive a copy of it. Write to contact@tacktus.com. We confirm the request with you, from inside the app or by writing to your account's address, and we answer within 30 days.

You can also contact the data protection authority of your country (in Senegal, the Commission de Protection des Données Personnelles).

10. Security

Data travels encrypted (TLS) between the app, the websites and our providers. Access to our systems is limited to what running Tacktus requires.

No system is infallible. If you think someone has accessed your account, write to us right away.

11. Minimum age

Tacktus is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you think we have, write to us and we will delete it.

12. Changes

We may update this policy. The date at the top shows the current version. If a change is significant, we will tell you in the app before it applies.