Privacy Policy

Tadda turns scattered family messages into one shared video gift. To do that well, we handle some personal data, and we treat it with the same care we would want for our own families.

Three promises shape everything that follows:

• Private by default, your gift stays with the people you invite.
• Permissions for the media, contacts or notifications you choose to use, alongside the measurement practices described below.
• Deletable any time, you can ask us to erase your data whenever you wish.

We never sell your personal data, and we never use your content to train AI.

Futurion (Futurion Technologies) operates Tadda and is responsible for the personal-data processing described in this policy.

Contact and mailing address: Futurion Technologies, 1200 Bay St, Toronto - M5H2R1, Canada. Website: futurion.tech.

For any privacy question, or to exercise your rights, you can email our privacy team at hello@tadda.app.

We keep collection to what a gift actually needs. Depending on how you use Tadda, that can include:

• Account and contact details, including the name, email address or phone number, country and preferences you provide to create and use an organizer account.
• Content you choose to submit, such as video, photos, audio, messages and Card attachments, together with contribution and permission records.
• Moment, Card, recipient and important-date information you enter, such as names, occasions, dates and contact destinations. A contact selected with a device picker is distinct from uploading your whole address book.
• Technical data, including IP address, device and operating-system information, app version, app-install and device identifiers, push-notification tokens, error reports and crash diagnostics. Advertising identifiers may be available on Android depending on the device and its settings; our iOS AppsFlyer integration disables IDFA collection.
• Usage and acquisition data, including selected page and app interactions, completed product actions, campaign and referral parameters, install/session activity, and identifiers linking these events to an app installation or organizer. Pseudonymous identifiers can still be personal data.

Contributors and recipients stay zero-install: adding a message or watching a gift never requires an account, a login, or an app.

We use your data to run Tadda, and nothing more surprising than that:

• Deliver the gift, assemble your media into the finished video and share it with the people you choose.
• Measure product use and marketing effectiveness, including which campaigns bring app installations and completed actions, and diagnose app failures.
• Keep everyone safe, prevent abuse, fraud, and content that breaks our rules.
• Support and communicate, answer your questions and send essential service messages.

Under the GDPR, we rely on a clear legal basis for each use:

• Performance of a contract, to provide the gift you asked for.
• Consent, where required for optional measurement or other optional processing, and for uses that specifically request your permission. You can withdraw consent without affecting processing that took place before withdrawal.
• Legitimate interests, where legally permitted, for security, reliability and service improvement, subject to balancing against your rights. This does not replace consent where it is required.
• Legal obligation, when the law requires us to keep or share certain records.

Consent comes first. When you add a clip that features other people, please make sure they are happy to be recorded and to appear in the gift.

If an optional AI-assisted feature is offered, its purpose, the information it uses and any available permission choices are explained in that feature. Mentioning possible enhancements in this policy does not mean they are all currently available.

Where an AI-assisted enhancement is available, it is identified as such. The content you provide is not used by Tadda to train AI models.

We do not sell personal data. We share it only with the providers that help us run Tadda, and only so they can do their job for us:

• Hosting and content delivery, to store and stream your media securely.
• Product analytics and app attribution. Amplitude receives selected, sanitized events and pseudonymous browser identifiers or hashed backend user/entity identifiers. AppsFlyer receives app-install/session and campaign data, device/install identifiers and selected backend events linked to an opaque organizer ID. Our backend event payloads to these two services exclude raw email, phone, messages, media and IP addresses; the SDKs separately process technical connection/device data. AppsFlyer backend event partner forwarding is disabled.
• Messaging and delivery, for example, WhatsApp, to send gifts, links, and one-time codes.
• Google Firebase supports mobile analytics, Crashlytics diagnostics and push messaging. Depending on the platform and service, it processes usage events, app/device identifiers, crash reports and push tokens. Availability differs between Android and iOS.
• Advertising measurement. When enabled, Meta and TikTok pixels and server-side conversion integrations measure selected marketing visits and product actions. Conversion matching can include hashed email/phone and account identifiers, click identifiers, IP address and browser information. Hashing these identifiers does not make them anonymous. Our browser route policy excludes private gift/recipient capability links and legal pages from these advertising scripts.

Provider roles and applicable contractual protections depend on the service. Analytics and attribution providers help us process service measurements; messaging and advertising-platform providers may also process information under their own terms. We may disclose information where legally required, limited to what is necessary.

We do not sell your memories or personal data. We use third-party analytics and advertising-attribution services for the measurements described in this policy.

We keep information for the purposes described above, subject to legal requirements and the retention settings of each service. Account/content records and vendor analytics records can have different retention periods. A deletion request is assessed against those records; uninstalling the app or clearing cookies does not itself delete server-side data.

You do not have to wait, you can ask us to erase your data at any time through our data deletion page.

Depending on the law applicable to you, you may have rights including:

• Access, get a copy of the personal data we hold about you.
• Rectification, correct anything inaccurate or out of date.
• Erasure, ask us to delete your data through our data deletion page.
• Portability, receive your data in a portable, machine-readable form.
• Restriction, ask us to pause certain processing while a concern is sorted out.
• Objection, object to processing based on our legitimate interests.
• Withdraw consent, change your mind about anything you agreed to, at any time.

Use our public data-deletion page or contact our privacy team to request access, deletion, correction or objection, including for linked analytics and attribution records. We may need proportionate identity verification. We will explain any legal retention exception and how relevant provider records are handled; provider deletion is not represented as automatic. You may also complain to the competent privacy regulator.

We protect your data with encryption in transit, access controls, and trusted infrastructure, so your media stays private to the people you choose.

No service can promise perfect security, but we work continuously to safeguard your information and to respond quickly if anything ever looks wrong.

Tadda is built for diaspora families, so a gift often travels across borders, between Europe, Africa, and beyond. That sometimes means your data is processed in a country other than your own.

When data moves internationally, we use appropriate safeguards, such as recognised contractual protections, so it keeps a level of protection consistent with the GDPR.

Organizer accounts are intended for adults. Children may appear in submitted content only with the involvement and appropriate permission of a parent or guardian; the service is not presented as a child-directed app.

A child may appear in a gift, or add a message, only with a parent or guardian's involvement and consent. If you believe a child's data has reached us by mistake, contact us and we will remove it.

The website uses cookies and local storage for preferences and sign-in, and can also use third-party analytics and advertising-measurement technologies. The native apps use SDKs and app-install identifiers rather than only browser cookies.

Essential preferences include:

• tadda_theme — keeps your light or dark mode choice.
• tadda_locale — remembers whether you prefer French or English.

Optional browser product analytics, advertising measurement and campaign-attribution capture start only after you accept the cookie preference. You can change that choice at any time on our Cookie Notice page. Declining or withdrawing stops subsequent browser measurement events and sends opt-out/withdrawal commands to SDKs already loaded. Requests already sent may complete, and withdrawing does not erase past server/vendor records or change the separate mobile-app processing described above.

As Tadda grows, this policy may evolve. When we make a meaningful change, we will update the date at the top of this page and, where it matters, let you know more directly.

A policy update does not itself provide consent for processing that requires consent. We will seek any separate permission required for a changed use.

Questions about your privacy, or want to exercise a right? We would genuinely like to hear from you. You can reach us in two ways:

• By email at hello@tadda.app
• Through our contact page