Privacy Policy

Scope and information we collect

This notice covers Tizi na Masta mobile apps and its web service. Account information includes name, email, login-provider identifiers and, where applicable, a password hash. Profile information can include a photo, handle, city/country, phone, gender, goals and preferences. We process activities, routes, location, timing, distance and supported sensor/health readings when you use those features. We also process messages, posts, comments, groups, invitations, reports, support requests and consent records.

Event registration can include runner name, email/phone, city, age group, shirt size, emergency contact, goal time, registration status, BIB and check-in. Device/browser and request information, IP addresses, security logs and local storage support service operation and abuse prevention. Tell an emergency contact before supplying their details.

Sources and uses

Information comes from you, devices and connections you enable, login providers, other members interacting with you, event organizers and operational providers. We use it to provide accounts, activities, selected imports, communications, discovery, event administration, support, security and legal obligations. Health and location permission requests are separate from accepting user terms. A permission does not mean that every record is uploaded.

Visibility and recipients

You choose audiences for shared activities and posts. Public profile-photo URLs can be viewed by people who have them. Messages are delivered to their recipients; private content is not end-to-end encrypted against Tizi administrators. Authorized access may be needed to operate, secure and moderate the service. A safety link can be viewed by anyone who has it. Recipients can copy or forward shared content; changing settings cannot recall copies.

Authorized event organizers/staff receive the registration information needed for their event. Registering does not grant them blanket access to unrelated private workouts, routes or messages. Operational providers process necessary information for hosting, email delivery, security and maps. Hosting is provided on Hostinger infrastructure; Apple/Google process their respective login and health services. Map/tile services used by course and route views can receive IP addresses and viewed map areas; these include OpenStreetMap and the terrain/imagery providers attributed in the map. Information may be disclosed to comply with valid legal requirements or protect users and the service.

Optional uses and health information

Tizi does not sell member personal data to data brokers or advertisers. Optional promotional use and optional product-improvement analysis have separate settings and are off by default. Private routes, messages and health readings are excluded from those optional uses. Promotional reuse concerns public posts from opted-in accounts. Withdrawal stops future optional use but cannot recall previously distributed materials. Essential operations and security processing continue independently of those choices.

See the Consumer Health Data Privacy Notice for connected health records, purposes, recipients and withdrawal. Health data is not used for advertising or sold.

Security and storage

We use safeguards including encrypted transport and restricted access. Devices, account access, service providers and recipient behavior also affect confidentiality. No system is perfectly secure. We do not claim universal encryption of every device, disk or backup, verified end-to-end encryption, or a security certification.

Browser storage supports sign-in, preferences and offline functionality. Saved native sign-in is optional and uses device security features where supported; Tizi does not receive your fingerprint or facial template. See Storage and analytics.

Retention and deletion

Account and activity records are kept while your account remains active and as needed for the service. You can delete individual supported records, erase optional account content while retaining sign-in, or request account deletion. Account deletion hides/deactivates the account and schedules permanent deletion after a 30-day recovery period. Signing in alone does not cancel deletion: you must explicitly confirm reactivation before the deadline. Scheduled purge checks run periodically, approximately hourly.

Some information may remain in existing backups, necessary security/legal records or copies others already saved. Backup and operational archive retention can differ from the live-account countdown; this notice does not promise that every backup is erased at day 30. Those copies are not used to restore deleted accounts for ordinary service. For an applicable deletion request that needs additional handling, contact us; we assess retained categories, purpose and applicable deadlines. Completed deletion requests must be reapplied before recovered backups return to service. No indefinite right to retain information is created by this notice.

Rights and choices

Use privacy/audience controls, device permissions and account data controls, or email support@tizinamasta.com for access, correction, export, deletion, withdrawal, applicable opt-outs or an appeal. We verify requests proportionately and respond within applicable legal deadlines. Do not send passwords, sign-in codes or unnecessary identity/health records by email. Send “Privacy appeal” to request review of a decision; applicable regulator and other legal remedies remain available. We do not retaliate for exercising rights.

Children and international processing

Tizi is not directed to children under 13. Report a suspected under-13 account so we can investigate and take appropriate action. Local age and parental-consent requirements can be higher. We are not representing that a completed age-verification or guardian system is already available. Store age ratings are distinct from legal eligibility.

Tizi is operated from Tanzania with infrastructure and service providers that may process information in other countries, including U.S. hosting. Applicable local privacy rights and transfer requirements remain in force; accepting general terms does not waive them.

Changes

We update this notice when practices change and provide notice or obtain new consent where required. Publishing this notice does not authorize a new optional use or retroactively create consent.