Privacy Policy — Tanvik Mobile App

This policy explains what information the Tanvik mobile app ("the App") collects, how it's used, and how it's protected. The App is a companion tool for businesses already using the Tanvik platform (tanvik.io) to manage their WhatsApp customer communications — it gives your team members access to leads, conversations, and a dashboard from a phone.

Who this applies to

The App is used by staff and agents of businesses ("Clients") that have an active Tanvik account. It is not a consumer app — end customers of our Clients (the people messaging on WhatsApp) do not use this App directly; their messages are handled by our Clients through it.

Information we collect

• Account information: your name, email address, and role, used to sign in and to determine which workspace's data you can access.
• Business data you access: leads, contacts, and WhatsApp conversation history belonging to the Client workspace you're a member of. This data originates from your business's own customer interactions, not from the App itself.
• Messages you send: text messages and images you send to customers through the App are transmitted via WhatsApp's Business API (operated by Meta) and stored in your workspace's database.
• Device push token: if you enable notifications, we store a device identifier (an Expo push token) so we can alert you to new messages. This token is tied to your account and workspace, not to any personal identity beyond that.
• Photos: if you attach an image to send in a chat, the App requests access to your photo library for that single action. Images are uploaded only when you choose to send them.

What we don't do

• We don't sell any data collected through the App.
• We don't use your data to serve ads.
• We don't access your photo library, contacts, or device data beyond what's explicitly needed for the feature you're using at that moment.

How data is stored and protected

All business data is stored in Tanvik's Supabase-hosted database with row-level security, meaning each workspace's data is isolated and only accessible to authenticated members of that workspace. Data in transit is encrypted (HTTPS/TLS). Push notification delivery is handled via Expo's push notification service, which relays a message payload to Apple (APNs) or Google (FCM) without Tanvik or Expo retaining the notification content beyond delivery.

Third-party services this app relies on

• Meta (WhatsApp Business Platform): for sending and receiving WhatsApp messages.
• Supabase: our database and authentication provider.
• Expo: for push notification delivery.

Each of these providers has its own privacy practices governing data as it passes through their systems.

Data retention

Business data (leads, conversations, messages) is retained for as long as your organization maintains an active Tanvik account, or as required by applicable law. Account information is retained while your user account remains active. You can request deletion of your account by contacting your workspace administrator or Tanvik support.

Children's privacy

The App is intended for business use by adult staff members and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of the App after changes means you accept the updated policy.

Contact

Questions about this policy or your data can be sent to privacy@tanvik.io.