Tako Privacy Policy
Last updated: October 26, 2026
Effective date: October 26, 2026
This Privacy Policy explains how we collect, use, retain, disclose and protect personal information when you use Tako, and how you can manage that information.
Personal information controller and service provider: Tako. “We” means Tako and “you” means a person using the services. Our privacy and support email is info@takoim.com.
Please read this Policy carefully. Reading this Policy, accepting the Terms of Service or starting to use the app does not provide blanket authorization for all processing of personal information. When consent is required, we will explain the relevant purposes, scope and consequences and obtain the authorization required by applicable law.
1. Scope
This Policy covers account registration and login, friends and group chats, messaging, social activity in Square, profile and settings management, and related support, security and service operations provided by Tako.
If you follow a link shared by a user to an independent third-party service, that provider's own processing is subject to its privacy rules. Tako's processing when displaying links, transmitting information or providing its own services remains subject to this Policy. The involvement of a third party does not remove our responsibilities.
2. Core processing principles
2.1 Data minimization
We process personal information only as necessary to provide the functions you choose, protect service security, handle requests and meet legal obligations. Information or permissions that are not necessary must not be a condition for using unrelated basic functions.
2.2 Specific purposes
General statements such as “improving the experience” or “business needs” do not justify unlimited collection. Before introducing a new purpose, changing how information is used or adding third-party recipients, we will explain the change and obtain any authorization required by law.
2.3 Protection of communications
Private messages are processed only for defined purposes such as delivering communications, storage or synchronization chosen by the user, necessary security incident handling or legal requirements. This Policy does not authorize using private communications for unrelated advertising, marketing profiles or other independent commercial purposes. Except for processing necessary to provide normal social functions and limited information expressly required to be retained by law, Tako does not retain additional user information and does not sell any user information.
3. Information processed by function
3.1 Registration, login and verification
When you create, access, recover or secure an account, we process account details and necessary verification information submitted through the relevant screen, login status and account identifiers. This enables account creation, verification of actions, session management and protection against unauthorized use.
If you choose email registration or verification, we process the email address you submit and information necessary to complete verification. Any additional information required by a login method must be explained in that process. This Policy does not automatically authorize collecting every contact detail or identity document.
3.2 Profile and settings
When you edit your profile, we process the nickname, avatar, biography and related account identifiers you choose to provide, to display your profile and identify participants in conversations. Visibility to other users follows the relevant explanations and available privacy settings. Do not include information in a public profile that you do not want others to know.
We process your language, appearance, notification, privacy and other function preferences to save those settings. Managing app storage or clearing the local cache does not automatically delete information on servers or copies held by other users.
3.3 Friends and group chats
When you add friends, handle friend requests, or join or manage groups, we process the accounts involved, friendship relationships, request and response status, group identifiers, membership, roles and related actions. This enables invitations, delivery to conversations and access management.
Account and group information is shown to relevant friends, members or administrators as necessary for the function. Creating friendships within Tako does not authorize us to read your entire device address book.
3.4 Messages and communications
When you send a message or use a communication method available in the current version, we process the sender, recipients, conversation identifier, sending time, delivery status and the text, images, voice messages, videos or files you choose to send, to the extent necessary to complete the action.
If you use voice or video calling, audio, video and connection information needed to establish and maintain the call is processed only for the purposes explained for that function. Call-history records are different from recordings of audio or video. This Policy does not provide blanket authorization to record calls or retain additional recordings. Any such additional processing requires separate notice and the applicable authorization.
Messages are delivered to the recipients or group members you select. They may save or forward content on their own devices. Message history, offline delivery and synchronization are limited to functions actually provided and their explained scope; they do not justify indefinite retention of communications.
3.5 Square posts and interactions
When you publish posts or comments, follow accounts, like or share content, or use another interaction supported by the current version, we process the relevant account, content, time, interaction targets and relationships to display the actions and content you initiate.
Review the audience before posting. Public content and its interactions may be viewed, saved or forwarded by other users. If you select a narrower audience, we will limit display according to the applicable setting. Browsing Square does not authorize access to private chats or their use for recommendations.
3.6 Notifications and alerts
To deliver notifications you enable, we process notification settings, account associations and identifiers needed to route notifications to your device, within the necessary scope. Information displayed in notifications follows the function's explanation and settings. Lock-screen previews may be visible to others; you can manage notifications and previews in your device settings.
3.7 Operations, security and diagnostics
To verify login, maintain network connections, prevent abnormal access and diagnose faults, we process information relevant to those events as necessary: IP addresses, device model, operating-system and app versions, system language, network status, error records and action times.
Device or push identifiers and crash diagnostics are limited to their actual purpose and necessary fields. They do not authorize access to all device contents, a list of installed apps or unrelated files. Where diagnostic records include personal content, their scope and access must be appropriately restricted and protected.
3.8 Support, reports and appeals
When you contact us through an in-app channel or email, we process the contact details, issue description, relevant accounts or content locations, necessary attachments and handling records you provide. This allows us to respond, investigate issues, address violations and protect relevant rights.
Reports and appeals may include information about other people. We limit its use and access to the necessary investigation and do not unnecessarily disclose a reporter's identity or contact details to the person reported. Please conceal unrelated information and do not submit passwords, verification codes or unnecessary sensitive material.
4. Device permissions and your choices
Permissions are requested when you actively use the relevant function. System permission does not replace an explanation of the purposes and scope of personal information processing.
- Camera: Requested for functions actually available that you choose to use, such as taking and sending a picture, changing an avatar, scanning a code or video communication. Denial prevents the action that requires the camera and must not affect unrelated text conversations.
- Microphone: Requested when you choose an available function such as recording a voice message or voice or video communication. Denial prevents the relevant microphone-dependent action.
- Photos, media or files: Access is requested within the necessary scope when you choose to upload, send or save content. With a system picker, access follows the content you select and the permission granted by the system.
- Notifications: Used for message, interaction or service alerts you enable. Denying or disabling notifications does not delete your account or stop processing within the app.
You can change permissions in iOS or Android system settings. Revoking permission generally stops future access that depends on it, but does not automatically delete information previously submitted lawfully. See Section 10 for deletion requests.
This Policy does not give blanket authorization to access contacts, precise location, calendars or the clipboard, or to track activity across apps. A new need for such processing requires a separate explanation of its necessity, scope and available choices. Acceptance of this Policy alone does not authorize access.
5. Purposes, legal grounds and sensitive information
The information above is used to provide the communications and social functions you request, save settings, protect accounts and service security, handle support and rights requests, and comply with applicable legal obligations.
We identify the appropriate legal ground for the particular activity and jurisdiction, such as consent, necessity to perform the service you request, a legal obligation or another ground allowed by law. Requirements differ between jurisdictions; no single ground is extended without limit to every activity.
Information defined as sensitive personal information under applicable law is subject to the stricter requirements for necessity, notice, authorization and protection. Do not publish your own or another person's identity documents, health information, intimate images or other unnecessary sensitive material in public content.
6. Service providers, sharing, transfers and disclosure
6.1 Information provided to other users at your direction
Messages you send, content you publish and related profile information are displayed to your chosen recipients, group members or public audience as necessary to complete your action. Consider the audience before sending or publishing.
6.2 Technical and other service providers
Where a provider must process information on our behalf for a specific service, such as hosting, message delivery, notifications, security support or troubleshooting, we limit the purpose, data scope and duration. Providers must meet confidentiality, security and deletion obligations and must not independently use data beyond their instructions.
Before integrating a third-party service or software component that processes personal information, we will disclose its identity, function, information processed, purposes and privacy rules as required by applicable law.
6.3 Independent third parties and organizational changes
Before providing information to a third party that independently determines its processing, we will explain the recipient, information categories, purposes and rights channels, and obtain any required authorization. If an organizational change involves transferring information, we will explain the recipient and arrangements and require continued protection. A change in purpose or processing method must separately satisfy legal requirements.
6.4 Legal disclosures and protection of rights
For disclosure required by law or a lawful request from an authority, we will verify the basis and limit the information provided to what is lawful and necessary. Affected users will be informed to the extent legally permitted. Protecting rights or preventing risks does not justify unlimited collection, sharing or public disclosure.
7. Retention, storage location and international processing
7.1 Retention
Except for limited information expressly required to be retained by law, Tako does not retain user information beyond what is necessary to provide normal social functions. Information necessary to operate those functions is retained only for the shortest period necessary for the explained purpose. Associated data is deleted at the same time as the account, as described in Section 11. The following criteria apply:
- Account details, profile and settings: Retained only as necessary to provide the relevant function and deleted at the same time as the account. Information you remove or that is no longer needed is deleted promptly.
- Communications and relationships: Retained for defined purposes such as delivery, history chosen by the user or synchronization actually provided. Offering communications does not justify indefinite storage.
- Square content and interactions: Managed according to publication status, your deletion actions and account status. Evidence that must lawfully be retained is managed separately from normal public display.
- Support, reports and appeals: Limited to the period necessary to resolve the request, verify the outcome and protect relevant legal rights. Unrelated attachments are not kept indefinitely.
- Operational and security logs: Limited to the period needed to diagnose faults, prevent abuse and meet specific legal obligations, followed by deletion or lawful anonymization when the purpose is fulfilled.
Limited information expressly required to be retained by law is restricted by category, reason, access and duration. It is not used for unrelated business and is deleted when the required period ends. Deletion includes relevant copies controlled by Tako; backups must not be used to continue retaining information that should have been deleted. Removing a nickname or account identifier alone does not complete deletion of the account and associated data.
7.2 Storage and international processing
The actual locations of primary storage, backups and provider processing must reflect the deployment used. If processing involves storage abroad, cross-border transfers or remote access from another country or region, we will explain the purpose, data categories, recipients and safeguards and complete the assessments, contracts, notices and authorizations required by applicable law.
This Policy itself does not authorize unrestricted international transfers.
8. Local storage and similar technologies
Where needed, the app or associated web pages may use local storage or similar technologies necessary to maintain login sessions and save language or interface preferences. Use is limited to those purposes and follows the controls available on the device or browser.
Nonessential analytics, tracking or other independent purposes require a separate explanation and legally required choices before activation. Clearing local storage may sign you out or reset preferences; it does not delete the account or server-side data.
9. Security and incident handling
We take appropriate technical and organizational measures according to the information and risk, including restricting personnel access and permissions, protecting data transmission, reducing unnecessary retention and responding to abnormal events. Providers processing information on our behalf must meet protection obligations consistent with this Policy and applicable law.
If a personal information security incident occurs, we will take necessary steps to reduce its impact and carry out notification, reporting and follow-up required by applicable law. Internet transmission and storage cannot be guaranteed absolutely secure, but this does not remove Tako's legal protection responsibilities.
Keep your device and login credentials secure and do not share verification codes with strangers. Contact info@takoim.com if you suspect a leak or unauthorized account use.
10. Access, correction, deletion and withdrawal of consent
You can manage relevant information through available profile or settings functions or contact info@takoim.com to make the following requests. The rights available depend on applicable law:
- Understand processing rules and request access to or a copy of personal information.
- Correct inaccurate information or complete incomplete information.
- Request deletion, restriction or objection to particular processing when legal conditions are met.
- Withdraw consent-based authorization and manage device permissions and notification choices.
- Request data portability where applicable and challenge processing decisions or submit an appeal.
Withdrawal does not affect the lawfulness of processing before consent was withdrawn. If processing is essential to a function you choose, stopping it may prevent that function from continuing; unrelated functions must not be restricted for that reason.
To protect accounts and information, we may verify identity in proportion to the risk of the request. We do not require unrelated information or passwords or verification codes by email. Requests are handled within applicable legal deadlines. If an extension or partial refusal is necessary, we will explain the reason, basis and available remedies. Unreasonable fees or repeated verification must not obstruct the exercise of rights.
11. Account deletion and associated data
Please back up your personal data and information before choosing to delete your account.
When account deletion is completed, account information, profile details, associated user content and other account-linked data controlled by Tako are deleted at the same time. Relevant data processed by providers on our behalf must also be deleted at the same time.
Tako reads, uses and processes only the data necessary to provide normal social functions. Beyond the processing necessary for those functions, we do not retain additional user information and do not sell any user information. The only exception to non-retention is limited information expressly required to be retained by law. For that information, we will explain the categories, reasons and duration, strictly restrict access, prohibit unrelated use and delete it when the statutory period ends.
Content independently saved by other users on their devices is not automatically deleted with your account. This does not affect Tako's obligation to delete data it controls at the same time as the account. Deletion affects account recovery and access to its services. Before deleting your account, save any material you need and are entitled to retain. Contact info@takoim.com for help with account deletion or related data-removal issues.
12. Protection of minors
We do not independently provide services to users who do not meet applicable age and legal requirements. Where parental or guardian consent is legally required, we will obtain and verify the necessary authorization and apply protections appropriate to the user's age and risk. Minors' information must not be used for inappropriate purposes.
A parent or guardian who discovers information submitted without appropriate authorization, or a risk such as harassment, grooming or exposure of personal information, may contact info@takoim.com. Following reasonable verification, we will lawfully stop inappropriate processing, delete relevant information or take other necessary protective action.
13. Changes to this Policy
When processing rules change, we will update this Policy and notify you through an in-app notice, page notice or another appropriate method. Changes affecting important purposes, information categories, recipients or user rights will be highlighted, with renewed authorization where legally required.
Continued use alone will not be treated as consent to new processing that legally requires affirmative consent. You may keep a copy of this Policy and contact us about changes.
14. Contact Tako
Explain the type of request, necessary account-identification information and the issue. If your request is not adequately resolved, you may complain to a personal information protection authority with jurisdiction or seek remedies through courts and other legally available channels.