Privacy Policy

Tag Along is operated by Fortwit Technology Limited (“Tag Along”, “we”, “us” or “our”). We determine why and how personal information is processed for our service and act as its data controller, or the equivalent role under applicable law.

Fortwit Technology Limited, 6B Abiola Okeke Close, Medina Estate, Gbagada, Lagos, Nigeria. Company email: Tagalong@fortwit.com. Website: www.mytagalongapp.com.

Use our published contact channel for privacy questions or to exercise a right. Include “Tag Along privacy” in the subject where practical. We will route the request to the person responsible for privacy. Any legally required regional representative or data protection officer contact will be included in the published contact details before the relevant offering begins.

This policy covers visitors, account holders, event hosts, attendees, people who contact us, and people whose information appears in a report or community contribution. It explains collection, use, disclosure, retention and your choices across our website and mobile applications.

Hosts, venues, external booking services, linked websites and sign-in providers may process information independently. Their own notices apply to that processing. We remain responsible for the information we control and for service providers acting on our instructions.

Providing account information needed to authenticate you is necessary to create an account. Event details are necessary to publish or join an event. Optional profile fields, marketing, precise device location and optional tracking have separate choices; declining them does not authorise us to collect them anyway. Some requested features may be unavailable without the information they need.

You must be at least 18 and old enough to enter a binding agreement where you live to create an account. We do not knowingly permit underage accounts. If you believe a child is using the service, contact us. We will investigate, restrict the account where appropriate and erase information that we are not legally permitted or required to retain. An adult age rule does not remove our obligation to protect children whose information reaches us.

Accepting our Terms of Service is not blanket consent to every use of personal information. We ask separately whenever consent is the legal basis.

Messages, images and event choices can reveal sensitive matters such as religion, health, ethnicity, sexual orientation or precise whereabouts. Please share carefully and avoid posting another person’s sensitive information without authority. We do not infer sensitive traits for advertising. Where processing requires an additional legal condition, we obtain explicit consent or rely on another condition that the law permits; otherwise we do not undertake that processing.

Camera, microphone and photo access is limited to the feature you choose. A permission prompt does not itself give consent for unrelated purposes. We do not upload your entire address book or continuously track background location under this launch policy. If these activities are introduced, we will first explain the purpose, recipients, retention and separate controls.

For third-party sign-in, we receive the information you authorise, such as an account identifier, name and email. We do not receive your Google or Apple account password. We do not use photos or videos for facial identification or build biometric identity profiles.

Where a law requires a legal basis, we use the grounds below for the stated purpose. A separate sensitive-data condition is also needed where applicable. We use consent where local law requires it rather than treating these grounds as interchangeable.

Discovery may use the area or filters you choose, event timing, availability and interests you provide. We do not use sensitive-trait advertising profiles. Where personalised ranking is introduced, we explain its material inputs and available controls before use.

For media moderation, the selected launch design uses AWS Rekognition to return content labels and confidence scores. Clear violations can be rejected automatically; uncertain uploads stay unpublished until reviewed; uploads that pass screening can publish. Humans may also review reports and relevant content, including messages reported to us. Screening can make mistakes and is not a guarantee that every harmful item will be detected.

You may contest a restriction and request meaningful human review through our support contact. We consider your explanation and relevant context. We do not use solely automated decisions with legal or similarly significant effects without the safeguards required by applicable law. Unrelated training of general AI models with your content is outside the purposes of this policy.

Other users and the public. Your chosen display name, profile image and content are shown to the audience indicated by the relevant feature. Public events and contributions may be copied, shared or indexed outside Tag Along. Before you publish, check the audience and avoid including private contact details or a home address unnecessarily.

Hosts and participants. Joining an event shares the profile and participation details needed to coordinate that event with the host and the audience identified in the join flow. Hosts do not receive private contact details or precise live location by default. Attendance export, if offered, is limited to disclosed fields and legitimate event administration; it is not permission for independent marketing.

Messages and location. Messages are available to their intended participants and may be accessed by authorised staff where needed to operate, secure or investigate the service. We do not represent chat as end-to-end encrypted. Optional live location sharing must identify the recipients and duration, remain off until activated, and provide a stop control. Sending an event address is different from sharing your live device location.

We do not sell personal information, share it for cross-context behavioural advertising, or permit providers to use it for their own unrelated advertising. This does not prevent the service disclosures explained above. We do not offer payment for surrendering privacy rights. A materially different practice requires updated notices and the choices or consent required by law.

We keep identifiable information only as long as needed for the disclosed purpose. The following launch schedule applies unless earlier deletion is required or a specific lawful exception justifies longer retention. Account deletion covers content, media and associated records, not only the login.

Our Nigerian operations and service providers may involve international access and transfers. Before a restricted transfer, we establish an applicable lawful mechanism, such as an adequacy decision or approved contractual safeguards with required assessments and additional protections. We do not rely on accepting this policy as blanket transfer consent. You may ask for destination and recipient information and a copy or explanation of relevant safeguards, with lawful confidential details redacted.

We apply proportionate technical and organisational safeguards, including controlled access, protection of information in transit and storage, authentication controls and incident handling. No service is risk-free. Where legally required, we notify the relevant authority and affected individuals within the applicable period. We do not promise a universal 72-hour notice to every user.

Contact us for access, correction, deletion, a portable copy, recipient information, consent withdrawal or review of a privacy decision. Applicable law may also give rights to object, restrict processing, limit sensitive uses or contest significant automated decisions. We do not unfairly discriminate for exercising a right.

We acknowledge within 5 business days and aim to complete requests within 30 calendar days of receipt or a shorter legal deadline. Identity checks are prompt and proportionate; verification does not automatically restart the statutory clock. We explain lawful extensions, refusals and complaint routes within the applicable deadline. Requests are normally free. Any legally permitted fee requires justification. An authorised agent may act with proof of authority.

Reply to the decision or contact us with “Privacy appeal”. We arrange review and respond within 30 days or a shorter required period. You may complain directly to the NDPC, an EEA supervisory authority, the UK ICO, a US state authority, Canada’s OPC, Australia’s OAIC, Brazil’s ANPD, South Africa’s Information Regulator or another competent body. Our process does not restrict that right. We honour legally required opt-out signals, including Global Privacy Control, for covered activities.

We publish the adopted policy’s effective date and version and highlight material changes before they take effect where required. We obtain new consent where needed; continued use does not authorise a new consent-based purpose.