Privacy policy

1. Who is responsible

Gundo is responsible for processing your data. For any request: [email protected].

2. The gundo.ml website

This site sets no cookies, uses no audience measurement tool and contains no form. Fonts are served from our own domain.

Our host, Cloudflare, processes your IP address and technical logs to serve the pages and protect the site against attacks.

3. Data processed by the app

• Your account: your phone number, verified with a code sent by SMS, and the name, photo and bio you choose.
• Your address book, only if you allow it, to suggest friends. We keep only a fingerprint of each number, never the number itself or the contact’s name.
• Your messages and their attachments. When a chat is end-to-end encrypted, our server only keeps the encrypted content, which it cannot read. When it is not, the content is kept on our servers so it can be delivered to you.
• Delivery information: who writes to whom and when, reactions, read receipts, and your call log (participants, date, duration).
• Your calls: audio and video are not recorded. They travel between devices, directly or through a relay.
• Your stories, deleted 24 hours after they are posted.
• Your location, only if you allow it, for the shop map and neighbourhood alerts. Viewing or posting an alert records your device’s location.
• Your shops and orders: the shop information you make public (name, products, location), the orders you place or receive, and the documents you send to have a shop verified.
• Your devices: open sessions, device type, and the identifier used to send you notifications.
• Assistance features (translation, suggested replies, summary, transcription): only when you trigger them, the text or recording concerned is sent to an artificial intelligence provider to produce the result.

4. Why we process it

• To run the service: create your account, deliver your messages, set up your calls, show nearby shops.
• To protect the service and its users: limit abuse and block accounts that break the terms of use.
• To notify you: messages, calls and orders.

We do not sell your data and we do not pass it to advertising networks. Listings marked “Sponsored” come from shops on Gundo; we count how often they are shown and opened.

5. Encryption: what is protected, and what is not yet

• On Android and on computer, one-to-one and group chats, and their attachments, are end-to-end encrypted with the Signal protocol.
• This encryption is not available on iPhone yet. A group in which one member has no keys yet stays unencrypted.
• The server still knows the delivery information described above.
• Calls are encrypted in transit, but not yet tied to verified identities.
• No independent security audit has been carried out yet.

6. Who it is shared with

We use service providers, who act only on our instructions:

• Cloudflare: network, protection and file storage.
• A server hosting provider located in the European Union.
• Google (Firebase Cloud Messaging): delivery of notifications on Android. For an encrypted message, the notification does not contain its text.
• An SMS provider, for the verification code.
• An artificial intelligence provider, only for the assistance features you trigger.

These providers may process data outside Mali. We may also disclose data when the law requires us to.

7. For how long

• Your account data: for as long as the account exists.
• Stories: 24 hours.
• Verification codes: a few minutes.
• Backups of the service are encrypted.

8. Your rights

You can ask to access your data, have it corrected or deleted, and object to its processing, in accordance with Malian law no. 2013-015 of 21 May 2013 on the protection of personal data.

To exercise these rights, or to have your account and its data deleted, write to [email protected] from an address we can reply to, stating the phone number of the account.

You can also contact Mali’s personal data protection authority (APDP).

9. Minors

Gundo is for people aged 16 and over.

10. Changes

We will update this page when our practices change. The date at the top shows the last change.