Privacy Policy
Before opening Conect to the public, the operator must confirm that the privacy/support contact below is working and monitored; set and disclose retention periods and backup handling; decide how limited safety-report evidence will be handled when an account is deleted; complete applicable registration obligations with Uganda’s Personal Data Protection Office; confirm provider regions and safeguards; and finish the expired/stale photo-link recovery test. The operator details are provided below; this draft does not state that the remaining steps are complete.
This policy explains how Conect handles information when you use its dating and friendship discovery app through Telegram or its preview website. Conect is a third-party application, not a Telegram service. The operator is responsible for its own processing of information shared with Conect.
Operator details
Operator/legal name: SS Tulsa Stephen
Address: 7G2P+GG Kampala
Privacy/support contact: tulsa22nd@gmail.com
1. Information we collect
- Telegram and technical data: when launched inside Telegram, the Mini App receives Telegram-provided information needed to verify your session, including your Telegram user identifier and available account metadata. Telegram and hosting services may separately process network/device information such as IP address.
- Profile details: Conect username, display name, age, gender, who you are interested in, “Looking for” preference, city, country, bio, purpose (dating/friendship), interests and profile photos.
- Optional contact details: an email address if you choose to provide one. The app is designed not to show this email on normal public profile cards.
- Activity and connections: likes, passes, super-likes, matches, profile visits, blocks, chat messages and read/unread state, and reports you submit.
- Local browser data: the app uses browser storage to keep profile state and certain demo/preferences data on your device.
- Support/report information: the reason and any details you include when submitting a report about another profile.
Do not include sensitive personal information in a bio, email, message or report unless it is necessary to explain a safety concern.
2. How we use information
Conect uses information to create and display profiles, apply compatibility and discovery preferences, operate likes and matches, deliver chats, remember profile visits and blocks, process user reports, provide account settings, and respond to service or safety issues. Information may also be used to secure the service, investigate abuse and diagnose technical failures.
3. Who receives information
- Other Conect members: profile details intended for public discovery, selected photos, bio, interests and connection information may be shown to other members. Messages are made available to the participants in the relevant match.
- Telegram: Telegram provides the Mini App environment and the account/session information needed to verify your Telegram identity. Telegram’s own processing is described in Telegram’s policies and Mini App terms.
- Supabase: Conect currently uses Supabase services for backend functions, database records and photo storage.
- GitHub Pages: the preview web app is hosted using GitHub Pages.
- Location selection: during registration, Conect provides curated major-city suggestions for supported countries and lets you type a city or town manually. The selected city and country are saved to your profile.
Service providers may process information in countries other than Uganda. Before public launch, the operator must confirm the actual service regions, applicable safeguards and provider terms. Conect does not intentionally sell personal profile information.
4. Profiles and photo visibility
Profile information is intended to help other members decide whether to connect with you. Your optional email is not intended for display on public profile cards.
Profile photos are stored in a private Supabase Storage bucket. Conect displays them using temporary signed URLs that are currently configured to expire after one hour. A signed URL acts like a temporary access link: anyone who obtains a still-valid link may be able to view that image until the link expires, so do not share signed photo links. Ordinary anonymous public-object access is disabled for the bucket. The frontend is designed to retry photo loading with a refreshed link when a link fails or expires, but the expired/stale-link recovery scenario still needs its final runtime test before a broader public launch. Images, screenshots or copies downloaded while photos were previously publicly accessible cannot be recalled, and copies or caches outside Conect may remain.
5. Retention and account deletion
Conect keeps account information while it is needed to operate your profile and connections. The app provides a permanent account-deletion action. When deletion succeeds, the active application workflow deletes the profile and associated profile photos, interests, likes/swipes, matches, messages, blocks, profile visits and reports linked to the account.
Deletion may not immediately remove copies held in infrastructure backups, security logs or provider systems. The exact backup/log retention periods and any legal retention exceptions must be confirmed and stated by the operator before public launch. Reports are currently removed when the account they are linked to is deleted; this policy decision should be reviewed so safety evidence is handled appropriately.
To delete an account, open Conect → More → Settings & help → Delete account permanently. The app asks you to confirm and type DELETE. Deletion is irreversible. See How account deletion works.
6. Your choices and rights
You can edit profile details and interests in Conect, block members, submit reports, and request account deletion. Applicable data-protection law may provide additional rights such as access to, correction of, or deletion of personal data. Use the privacy/support contact above to ask about a request. That contact must be completed and monitored before public launch.
7. Security, age and policy changes
Conect is intended for adults aged 18 or older. The app uses server-side Telegram session verification and access checks for important actions, but no online service can guarantee absolute security. Keep your Telegram account secure, do not share login/session information, and report suspicious behaviour.
We may update this policy as features or providers change. Material changes should be reflected here with an updated date and communicated in a suitable way. The operator should maintain an incident-response process for suspected unauthorised access or data loss.
8. Legal framework
Conect is intended to operate in compliance with applicable data protection law, including Uganda’s Data Protection and Privacy Act, 2019 and Data Protection and Privacy Regulations, 2021 where they apply. This draft is informational and is not legal advice or a certification of compliance.