# Tanami Train – Privacy Policy
Effective date: 12 March 2025

Tanami Train (“we”, “our”, or “us”) built the Tanami Train mobile application to help learners browse courses, register, verify certificates, and receive updates from Tanami Training Center. Protecting your privacy is fundamental to how we design the app. This policy describes what data we collect, how we use and share it, and the choices you have. By installing or using the app you agree to this Privacy Policy and to the Terms of Service that govern your use of Tanami Train.

---

## 1. Information We Collect

| Category | Details |
| --- | --- |
| **Account and profile data you provide** | Mobile number, password, email address, verification codes, profile details (such as name, language preference, professional information) and any messages you send to our support team. |
| **Course & application data** | Courses you view or register for, bookmarked media, certificates you search for or verify, and forms submitted inside the app (e.g., registration requests or contact requests). |
| **Device and usage data** | A randomly generated device ID stored locally, push-notification tokens, app version, log files, and basic diagnostics (OS version, time stamps, error messages). This helps us secure the service and deliver notifications. |
| **Camera & media access** | When you scan a QR code to verify a certificate, the app uses the device camera in real time; images are not stored or sent to our servers. When you export or share a certificate snapshot, the app writes a generated image to the photo library or cache storage so you can save or share it. |
| **Contact information** | When you tap the “Contact us” section we prefill phone or email fields; if you send an email or place a call, your message is handled by the relevant provider (mail client or telecom carrier). |

We do **not** collect biometric identifiers, precise location, or payment card data inside the app.

## 2. How We Use Information

We process the collected information to:

- Create and secure your Tanami Train account, authenticate logins, and deliver OTP codes.
- Provide the core functionality of the app (course browsing, certificate validation, saved media, notifications, and support chat).
- Register your device for push notifications and send transactional or marketing alerts (for example, new courses or reminders).
- Respond to support requests, bug reports, or legal inquiries.
- Improve reliability, detect fraud or abuse, and enforce our Terms of Service.
- Comply with applicable laws, regulatory obligations, or government requests.

We never sell your personal data.

## 3. Legal Bases

Depending on your region we rely on one or more of the following legal bases: performance of a contract (providing the service you requested); our legitimate interests (maintaining security and service quality); compliance with legal obligations; and your consent when we ask to access device features or send marketing communications.

## 4. Data Sharing and International Transfers

We share data only when necessary to run the service:

- **Tanami Train backend** – Your account, courses, and certificates are stored on Tanami Train’s secure servers hosted by our infrastructure partners. Data may be processed outside your country of residence subject to contractual safeguards.
- **Firebase Cloud Messaging (Google LLC)** – Used to deliver push notifications; device tokens are stored by Google in accordance with their [Privacy Policy](https://policies.google.com/privacy).
- **Notifee / OS notification services** – Used to display local notifications.
- **Telegram** – When you opt to receive verification codes via Telegram, we send your mobile number (masked when possible) to tanami_auth_bot to complete the OTP workflow.
- **Operating system providers** – When you share a certificate or open external links, data is handled by Android/iOS share sheets, email apps, browsers, or telecom carriers under their own policies.

We may disclose data if required by law, to protect users or our rights, or in connection with a merger or asset transfer (with notice when legally required).

## 5. Device Permissions

The app requests certain permissions so that features work properly:

- **Camera** – Required to scan QR codes for certificate verification. No footage leaves your device.
- **Photos / Media / Files** – Required to save certificate snapshots or allow you to share them. We only write images you explicitly export.
- **Notifications** – Used to deliver course alerts, account updates, and reminders.
- **Network access** – Required to contact Tanami Train servers, download course content, and verify certificates.

You may revoke permissions at any time in Android/iOS system settings; some features may stop working without the relevant permission.

## 6. Data Retention

- Account and course records are retained while your account is active. If you delete your account or request deletion, we remove or anonymize your personal data within a reasonable period unless the law requires longer retention.
- Device IDs, push tokens, and cached images are removed when you sign out, clear app data, or uninstall the app.
- Support communications are kept for up to 24 months for audit and training purposes.

## 7. Your Choices and Rights

Depending on your jurisdiction, you may have the right to access, update, correct, delete, or export your personal information, object to certain processing, or withdraw consent. You can:

1. Update basic profile details from the “Account” section in the app.
2. Manage notification preferences via system settings.
3. Request account deletion or data export by emailing `info@tanamitrain.com`.

We will respond to verified requests within the timeframe required by applicable law.

## 8. Security

We use HTTPS, access controls, authentication tokens, and limited staff access to protect your information. No system is perfectly secure; please keep your password confidential, use a unique password, and notify us immediately of suspected unauthorized access.

## 9. Children’s Privacy

Tanami Train is designed for learners aged 13 and above (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children under that age. If you believe we have done so, contact us and we will delete the data promptly.

## 10. Changes to This Policy

We may update this Privacy Policy to reflect new features, legal requirements, or business practices. Significant changes will be announced inside the app or via email. Continued use of the app after changes become effective constitutes acceptance of the revised policy.

## 11. Contact Us

If you have any questions, requests, or complaints regarding privacy, please contact us:

- **Email:** info@tanamitrain.com  
- **Phone:** +963 992 293 006  
- **Postal:** Tanami Training Center, Damascus, Syria (or your local training branch)

We aim to answer all privacy inquiries within 14 days.

---

By using the Tanami Train app you acknowledge that you have read and understood this Privacy Policy.
