Privacy Policy

Tob Directory ("we", "us", "our") operates the Tob Directory mobile apps and website (the "Service") — a digital loyalty and discovery platform for food and retail vendors in Cambodia. This policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this policy.

1. Information we collect

Information you give us:

• Account details — your phone number, and (if you choose) your email address, so we can create your account and send you a one-time login code.
• Profile — your display name and, optionally, a profile photo you upload.
• Telegram details — if you use "Login with Telegram" or link Telegram, we receive your Telegram account ID and username so we can identify you and deliver login codes.
• Vendor content — if you are a vendor, the business information you enter (name, category, address, hours, phone) and photos you upload (logo, cover, gallery, menu items).

Information collected as you use the Service:

• Approximate location — only when you tap "Use my location", so we can sort nearby vendors by distance. We do not track your location in the background.
• Loyalty activity — the stamp cards you join, stamps you earn, rewards and deals you claim or redeem, coupons and bundles you buy and redeem, vendors you favorite, and referrals you send or accept.
• Pickup orders — if you place a pickup order with a vendor, the items you ordered, the order total, and any note you add, so the vendor can prepare and fulfil it.
• Reviews — any rating or review you write about a vendor, which is shown with your display name.
• Basic technical data — needed to operate and secure the Service (for example, request logs and device/app version).

2. How we use your information

• To create and secure your account and send you one-time login codes.
• To provide the loyalty service — track your stamps, rewards, claimed deals, and purchased coupons and bundles.
• To take and fulfil pickup orders you place with a vendor, and let you and the vendor see the order status.
• To operate Tob Supply, our wholesale ordering feature, so a vendor can place and track supply orders.
• To show vendor pages, and to sort vendors by distance when you ask.
• To deliver announcements from vendors whose stamp cards you have joined, and to run our referral program.
• To operate, maintain, secure, and improve the Service.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Information shared with vendors

Tob Directory connects you with vendors. When you interact with a vendor — earn a stamp, redeem a reward, redeem a deal or coupon, place a pickup order, or leave a review — that vendor can see your display name and the activity at their store (for example, stamps issued, rewards redeemed, and the items and note on a pickup order you placed) so they can serve you and keep their own records. Vendors do not receive your data unless you transact with, review, or join a program from them.

4. Third-party services we rely on

• Telegram — used to deliver login codes and to power "Login with Telegram". Your use of Telegram is subject to Telegram's own privacy policy.
• SMS — we use an SMS provider to deliver one-time login codes to your phone number. The provider processes your phone number solely to deliver that message.
• Email — if you log in by email, our email provider processes your email address solely to deliver your login code.
• Hosting — our servers run on a reputable cloud provider; data is stored on servers we control.

5. How we protect your information

All traffic between the apps and our servers is encrypted over HTTPS. Access to our systems is restricted, and administrative passwords are stored only as secure hashes. No system is perfectly secure, but we take reasonable measures to protect your data.

6. How long we keep it

We keep your information for as long as your account is active or as needed to provide the Service. If you ask us to delete your account, we will delete your personal information within a reasonable period, except where we must keep certain records to comply with law or resolve disputes.

7. Your choices and rights

• You can view and update your name, photo, phone number, and (for vendors) business details in the app.
• You can turn location sharing on or off at any time in your device settings.
• You can request a copy of your data, correction, or deletion of your account by emailing us at the address below.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will remove it.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, notify you in the app. Continued use of the Service after changes means you accept the updated policy.

10. Contact us

Questions or requests about your privacy? Email support@tobdirectory.com.