Privacy policy
Version of 2026-11-09. Jambo Tembo is designed to collect as little data as possible: no account with e-mail or password, no ads, no advertising trackers, and animal recognition runs on your phone, offline.
1. Controller
Mohamed MECHRI, sole trader (entrepreneur individuel, EI), 16 rue Cuvier, 69006 Lyon, France, SIRET 919 196 071 00014. Contact for any data question: hello@jambotembo.app.
2. What stays only on your phone
- Your full-size photos and their AI analysis.
- The GPS track of your drives, the exact position of your captures and your vehicle's live position.
- Your purchase history and settings.
This data is never sent to our server and is deleted when you uninstall the app or use Profile > Delete all my data.
3. What is sent to our server
- Device identifier, nickname and avatar. The identifier is a cryptographic key created by the app, not linked to your name, number or Google account. Purpose: leaderboards and groups. Legal basis: performance of the contract (GDPR art. 6.1.b).
- Your captures: species, date and time, park, GPS accuracy and position rounded to about 1 km. No position is ever sent for threatened species (rhinos, pangolin). Purposes: points, leaderboards, anti-cheating. Legal bases: contract and legitimate interest in a fair game (art. 6.1.f).
- A photo thumbnail (240 x 240 px) and the rounded position, only if you chose "Yes, share" for the map. They are then visible, with your nickname, to other visitors who have the Safari Pass. Legal basis: your consent (art. 6.1.a), which you can withdraw at any time in Profile. Avoid photographing people or number plates.
- Your reports of inappropriate photos (moderation, legitimate interest).
- Your road reports (blocked road or roadworks): type, reason, position rounded to about 100 m, time, and your "still there" or "gone" confirmations. Purpose: warning other visitors (legitimate interest). They are shown to everyone without your nickname or any identifier, and deleted 30 days after they expire (24 h for a blocked road, 7 days for roadworks, without a new confirmation). If you delete your account, your current road reports stay visible but are no longer linked to your account.
- The Safari Pass: code used or Google Play / Stripe purchase identifier, date and duration (contract and legal obligation, art. 6.1.c). Card details are handled by Google or Stripe, never by us.
- Your IP address, used during the request to limit abuse; not stored by Jambo Tembo (the host may keep it briefly in security logs).
- Your e-mails, if you write to us, to reply.
Providing this data is not mandatory: without the server the app still works, without leaderboards, shared map or online purchase.
4. Phone permissions
- Location: which park you are in, your route, gate closing reminders. During a safari you start yourself, location is also tracked with the screen off; a permanent notification shows it and tracking stops when you end the safari.
- Camera: photographing animals (gallery photos are not accepted, to prevent cheating).
- Notifications: route tracking and return-to-camp reminders.
5. Automated decisions
The anti-cheating check may automatically give no points to a capture. This has no legal or financial effect; you can ask for a human review at hello@jambotembo.app.
6. Retention
- Server data (profile, captures, thumbnails): while you use the app, deleted automatically after 3 years without any activity.
- Sightings on other visitors' map: shown for 30 days at most.
- Purchase records: 10 years (accounting obligation).
- E-mails: 3 years after the last exchange.
7. Recipients
Only the publisher accesses the data. Providers: Cloudflare, Inc. (server hosting, processor), Google (Google Play, payments) and Stripe (card payments), the latter two acting as independent controllers for payments. Other visitors see your nickname in leaderboards, and your sightings if you chose to share them. No data is sold, rented or used for advertising.
8. Transfers outside the EU
Cloudflare, Google and Stripe may process data outside the EU, notably in the United States, under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023) or the European Commission's standard contractual clauses.
9. Security
Encrypted connections (HTTPS), requests signed with the device key, positions rounded before sending, passes bound to one phone, server access limited to the publisher.
10. Your rights
You can access, correct, delete and port your data, restrict or object to its processing, and withdraw consent at any time: in the app (Profile > Export my data, Edit, Delete all my data) or by writing to hello@jambotembo.app with your nickname; we reply within one month. You can also complain to the CNIL (www.cnil.fr) or your local authority.
11. Deleting your account
In the app: Profile > Delete all my data. Without the app: write to hello@jambotembo.app with your nickname, or see https://jambotembo.app/legal/delete?lang=en. Purchase records are kept as long as the law requires.
12. Visitors from South Africa, Kenya and elsewhere
You have the same rights wherever you live. In South Africa you may also contact the Information Regulator (inforegulator.org.za) under POPIA; in Kenya, the Office of the Data Protection Commissioner (odpc.go.ke) under the Data Protection Act 2019.
13. Age
Jambo Tembo is intended for people aged 15 and over. Under 15, map sharing may only be turned on with a parent's consent.
14. Changes
Significant changes are announced in the app. The current version is always at https://jambotembo.app/legal/privacy?lang=en.