What you give us

• Your mobile number (used to create and secure your account) and, if you add it, your email address and name.
• Your profile: first name, date of birth and age, gender, the people you want to meet, photos (up to six), bio, height, and the lifestyle details you choose to add (education, religion, ethnicity, languages, children, pets, smoking, drinking, diet, fitness, body type, hair and eye colour, personality, what you are open to).
• Photo-verification selfies, when you choose to verify.
• Stories you post (photos or short videos, with captions, stickers and the place tag you add).
• Your answers to in-app questions, your filters and preferences, and the travel locations you choose.
• Messages, photos and voice notes you send to other members, and messages you send to our support team.
• Reports you make about other members, and what you write in them.
• Payment details needed to complete a purchase: the plan or feature bought, amount, currency, payment method, the transaction reference from the store or payment provider, and your mobile-money number where you pay that way. We do not store card numbers.

What the app collects while you use it

• Your location (precise, when you allow it), the place name derived from it, and the location of a travel destination you select.
• Your activity: profiles you see, like, pass, super-like and report; matches; messages sent and received (and whether they were read); contact reveals requested, approved and viewed; stories viewed; boosts and spotlights used; which screens you use and when.
• Your device: device type, operating system, app version, language, time zone, a device identifier, push-notification token, and IP address (from which we estimate your country and city).
• Sign-in records: the time, device and country of each sign-in, and the one-time codes we send you.
• If you arrived through a link from a partner or an advert: the link clicked and the install, so that we can credit the partner. We do not give partners your profile.

Sensitive information. Your sexual orientation, what you are looking for, your religion and ethnicity are sensitive. We collect them only because you choose to add them to your profile so other members can see them, and we use them only to show your profile, to apply filters that members set, and for the safety review described in section 4. You can leave these fields empty.

Information about other people. When you report, block, message or reveal a number to another member, we record that it happened and keep what you wrote. Do not post anyone else's photo or details on your profile.

• To run the Service: create and secure your account, show your profile to members near you (or near a travel location you choose), show you profiles that match your filters, deliver messages, matches, likes and notifications, and operate boosts, spotlights, contact reveals and stories.
• To decide what you see: the order of profiles depends on distance, your filters, how new or active members are, boosts and spotlights, chance, and plan limits. This is automated; it does not make a legally significant decision about you.
• To keep members safe: review photos, bios and stories before and after they are shown; verify photos; detect scams, spam, harassment, threats, fake profiles, under-18 accounts and other breaches, as described in section 4.
• To take payments and keep accounts: process purchases, confirm them with the store or payment provider, prevent fraud and chargebacks, and keep the records tax and accounting law require.
• To support you: answer your messages to support, investigate complaints and appeals.
• To improve Pendova: measure how features are used, fix problems, and test changes. We use aggregated statistics wherever we can.
• To tell you about Pendova: send tips, reminders and offers, which you can switch off (section 9).
• To measure our advertising: tell an advertising platform that an install, sign-up or purchase happened after one of our adverts, using hashed identifiers, so we can see which adverts work.
• To meet legal duties: respond to lawful requests from authorities, keep required records, and establish or defend legal claims.

Our legal bases (where a law requires one): performing our contract with you (the Service you signed up for); your consent (precise location, sensitive profile fields, marketing messages, photo verification); our legitimate interests in keeping members safe, preventing fraud, securing and improving the Service and promoting it; and compliance with legal obligations.

Pendova is a place where people meet strangers, so safety review is a core part of the Service and not an optional extra. This is what it involves:

• Content review. Profile photos, bios, verification selfies and stories are checked by our team and by automated tools, including artificial-intelligence models, before and after they are shown. Those tools look for nudity, under-18s, contact details, advertising, stolen images and illegal content.
• Behaviour signals. Automated systems continuously look at reports and blocks you receive, how many members you message and like and how they respond, whether you send the same message to many people, how new your account is, and patterns in the text of messages (for example requests for money, scam scripts, threats, abuse, offers of paid sex, mentions of being under 18). They produce a risk score.
• AI review. For accounts with a high risk score, an artificial-intelligence model reads the reports made about the account, the account's profile and recent messages, and may look at its main photo, and gives our team a summary, evidence and a recommendation. The model is run by a cloud provider under contract with us, does not use your data to train itself, and does not decide alone whether to delete an account.
• Human review. A trained member of our team decides what happens: nothing, watching, content removal, feature limits, suspension, or deletion. To decide, they may read the messages, reports and history of the account under review. Every time a reviewer opens private material, and every decision, is logged with the reviewer's identity.
• Automatic suspension. When our systems are highly confident that an account poses a critical danger to others (for example an active scam or threats), the account may be suspended automatically before a person reviews it. Deletion is always a human decision. See the Terms of Service for the actions we may take and how to appeal.
• Your private messages. We do not read members' messages for any purpose other than safety review, support (when you share a conversation with us), and legal obligations. Message content is never used for advertising.

• Other members see your profile (name, age, photos, bio, lifestyle details, verification badge, approximate distance, place name, whether you are new, and your stories), unless you pause your profile or use incognito mode. They see your phone number only as described in section 6. Members who match with you can message you. We never show your exact location, your email or your date of birth.
• Service providers that process data for us under contract and only on our instructions: cloud hosting and storage for the app and your photos; push-notification, SMS, WhatsApp and email delivery; payment processors, Google Play and the Apple App Store; an IP-geolocation service; artificial-intelligence model providers for content and safety review; crash and performance monitoring; and customer-support tools.
• Advertising and measurement platforms receive limited, hashed information about installs, sign-ups and purchases to measure our adverts. They do not receive your profile, photos or messages.
• Partners and affiliates who refer new members receive only the fact that a click led to an install or a qualifying event, never your identity.
• Authorities and others for legal reasons: where the law requires, to respond to a valid legal request, to report a crime (including any child-safety concern), to enforce our Terms, or to protect the rights, property or safety of Pendova, our members or the public.
• A buyer or successor if Pendova is sold, merged or reorganised; this policy will continue to apply to your data.
• With your consent, in any other case.

We do not sell your personal information and we do not share it with data brokers.

• Your number is private by default. We use it to sign you in, to send one-time codes and service messages, and (if you have not opted out) reminders and offers.
• You can choose in Settings to make your number visible to members, or to keep it private so that it is shared only when you approve a request from a specific member.
• Some paid features (contact reveals, WhatsApp requests) let a member ask to see your number; nothing is shared until you say yes, and you can decline.
• Once you have shared your number with a member, they have it; Pendova cannot take it back. Think before you share.

• Pendova needs your location to show you people nearby and to show you to them. We ask your device for permission; you can withdraw it in your device settings, but the Service will not work properly without it.
• Other members see a rounded distance and a place name, never your coordinates. We keep your last known coordinates to run the Service.
• Premium members can set a travel location; we then use that location instead of your real one for showing profiles.
• We also estimate your country and city from your IP address for security, for pricing in your currency, and for statistics.

• Payments are handled by Google Play, the Apple App Store, or payment providers we work with (mobile money and card processors). They collect what they need to take the payment under their own privacy policies. Pendova receives a confirmation, a transaction reference, the amount and currency, and for mobile money the number that paid.
• We keep payment records for as long as accounting and tax law require, even after you delete your account.

• Service messages (codes, security, moderation, receipts, changes to terms) are sent by SMS, WhatsApp, email, push or in-app while you have an account. You cannot opt out of these.
• Reminders and offers (for example a reminder to finish your profile, a note that someone liked you, or a plan offer) are sent by SMS, email, push or WhatsApp. Switch them off in Settings, reply STOP to an SMS, use the unsubscribe link in an email, or turn off notifications on your device. We record your choice and respect it.
• We track whether our emails are delivered, bounce or are reported as spam, and whether you tap a link in a message, so that we stop sending to addresses that do not want our mail.

• While you have an account we keep your profile, activity and messages so that the Service works.
• When you delete your account (from Settings or by writing to us), your profile disappears from the Service immediately and you are signed out everywhere. We then keep the account's data for up to 12 months in case you change your mind, to deal with complaints, and for the safety purposes below, after which it is deleted or anonymised.
• Safety records (reports, moderation decisions, suspensions, deletions, and the content and account details they concern) are kept for as long as needed to stop a removed member from returning and to deal with disputes, normally 5 years after the decision.
• Payment and accounting records are kept for the period the law requires (in Kenya, at least 7 years).
• Messages you sent remain visible to the member who received them until they delete them or their account is deleted.
• Backups are kept for a short, fixed period and overwritten on a schedule; deleted data may persist in backups until then.
• Statistics that no longer identify you may be kept indefinitely.

Subject to the law that applies to you, you can:

• See and update your profile, filters, privacy choices and notification choices at any time in the app.
• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is wrong.
• Delete your account from Settings, or ask us to delete your data. We will do so except for what we must keep under section 10, and we will tell you what we are keeping and why.
• Object to or restrict certain processing, including marketing, and withdraw a consent you gave (for example location, or a sensitive profile field, which you can simply remove).
• Ask for human review of any decision made about your account by our automated systems, and appeal a suspension or deletion as set out in the Terms of Service.
• Complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke) or to the authority in your own country. We would rather you contacted us first so that we can put things right.

To exercise a right, email info@pendova.com from the number or email on your account, or use Settings → Help & Support in the app. We will answer within 30 days. We may ask you to confirm your identity so that we do not hand your data to someone else. We will not treat you differently for exercising your rights.

• We protect your data with encryption in transit, access controls, logging of staff access to private material, trusted-device checks on our own admin tools, regular backups and monitoring. Staff who review content are bound by confidentiality.
• No system is completely secure. Keep your phone locked, never share one-time codes, and tell us at once if you think your account has been accessed by someone else.
• If a breach affecting your data occurs, we will notify you and the regulator as the law requires.

• Pendova is for adults only. We do not knowingly collect data from anyone under 18, and our review tools look for signs that a member may be under 18.
• If we learn that an account belongs to someone under 18 we remove it, and we may report the matter to the authorities where the law requires. If you believe a member is under 18, report the profile in the app or write to info@pendova.com. See also our Child Safety Standards.

• Your data is stored and processed on servers operated by cloud providers in Europe and other regions, and may be accessed by our team and providers from Kenya, India and elsewhere.
• Where data leaves your country we rely on the safeguards the law provides, such as contracts with our providers that require equivalent protection, and we transfer only what is needed.

• We will update this policy when our practices change. The date at the top shows the current version. For significant changes we will tell you in the app or by message before they take effect, and where the law requires it we will ask for your consent again.