TamTam
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- The policy allows data sales or sharing; it does not describe an opt-out.
- The documents do not say who can read your content.
TamTam collects contacts, location, and ads IDs, shares with ad partners and VK, and treating continued use as agreeing to policy changes.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Sells or shares your data with no opt-out
Collected
Phone number, contacts, location (even in the background), photos/videos, and many device and ad IDs.
Read the exact line
Privacy policy
“Contacts from the User's phone book.6) Information about the location of the User.7) Information created or published by the User as a result of his actions when using the Service (including photos and videos).”
Training
They use it to run the app, personalize it, and they share it with advertisers and VK services.
Read the exact line
Privacy policy
“persons who provide the Company or the Company's affiliates with services related to the placement and display of advertisements in programs, products or services”
Sharing
Ad networks, partners, affiliates, VK ID services, Yandex.Metrika, and government if required.
Read the exact line
Privacy policy
“The information collected through cookies placed on the User's device can be accessed by web analytics service Yandex.Metrika.”
Kept
Kept while you use the service, then as long as Russian law says; no clear short delete window.
Read the exact line
Privacy policy
“Credentials and Other data are stored by the Company during the term of the agreement between the User and the Company on the use of the relevant Service, and after the termination of such an agreement - for the period required and established by the current legislation of the Russian Federation.”
Controls
You can edit some profile info in the app or write to their Moscow address to ask them to stop processing.
Read the exact line
Privacy policy
“The user has the right to revoke his consent to the processing of his personal data by sending a written application to the Company at the location of the Company”
Fine print
If they change the policy, using the app after they post it means you agree; it takes effect the next day.
Read the exact line
Privacy policy
“Actual use of the Messenger by the User after the amendments are made to the terms of this Policy means that the User agrees with the new terms.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Revoke location access in device settings
Device settings; policy says you can authorize or revoke location there
Edit or delete profile fields in the app
User Account in the Service
Send a written request to stop processing
39 Leningradsky Prospekt, bld. 79, Moscow, 125167, Russia
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They take your address book, where you are, and the photos and videos you send, not just your login.
Read the exact line
Privacy policy
“Contacts from the User's phone book.6) Information about the location of the User.7) Information created or published by the User as a result of his actions when using the Service (including photos and videos).”
For example, installing the app can upload people in your contacts even if they never used TamTam.
Live location can keep tracking you after you leave the app.
Read the exact line
Privacy policy
“For the live location service, Messenger uses the background location even if the app is closed or minimized.”
For example, if you share live location in a chat, the app may still use GPS while it is closed.
Your credentials and other data can go to advertising networks and similar companies.
Read the exact line
Privacy policy
“persons who provide the Company or the Company's affiliates with services related to the placement and display of advertisements in programs, products or services that are owned or controlled by such persons”
For example, an ad network could get identifiers tied to your account to show ads.
Partners and VK-related companies can process your data together with their own data.
Read the exact line
Privacy policy
“transfer of Credentials and Other data to partners and affiliates, and their processing by partners and affiliates, on the basis of instructions from the Company”
For example, logging in with VK ID can move your TamTam info into other VK products.
They can change the rules by posting them; keeping the app open counts as yes.
Read the exact line
Privacy policy
“Actual use of the Messenger by the User after the amendments are made to the terms of this Policy means that the User agrees with the new terms.”
For example, if they add new sharing the next day, using TamTam once can be treated as consent.
The mobile apps collect advertising IDs, Wi‑Fi names and MAC addresses, and similar tracking data.
Read the exact line
Privacy policy
“OpenUDID, IDFA, GAID, Apps Flyer UID, OS version, device model, year of release of the mobile device, time zone, preferred language, geo, Device ID ForVendor, name of the Wi-Fi network, MAC of the Wi-Fi access point”
For example, your phone’s ad ID and the café Wi‑Fi you join can be stored.
They say they do not use your face or other biometrics to identify you.
Read the exact line
Privacy policy
“The company has no purpose to process and does not process biometric data (in particular, it does not use an image to identify users) and special categories of data.”
For example, a profile photo is not supposed to be used as a face ID scan.
Staff are not supposed to look at your data unless their job requires it.
Read the exact line
Privacy policy
“The information is processed mainly automatically without access to it by the employees and / or contractors of the Company.”
For example, a support person should only open your data if needed to restore your account.
Stopping processing is done by a written letter to their office, not a simple in-app button.
Read the exact line
Privacy policy
“The user has the right to revoke his consent to the processing of his personal data by sending a written application to the Company at the location of the Company”
For example, you may need to mail a request to Moscow to have them stop using your data.
They claim they use security measures required by law, described in general terms.
Read the exact line
Privacy policy
“The company takes technical, organizational and legal measures in order to ensure the protection of information about Users from unauthorized or accidental access”
For example, they say staff who get access must follow internal security rules.
Words to know
Legal words from the lines above, in plain English.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
How we got here · grade F · score 31/100 · 15 of 15 policy answers backed by a verified quote · 8 not stated
What does the app collect beyond what it needs to work?
They collect more than account and messages: phone contacts, location including background live location, photos and videos, and many device and advertising identifiers.
Does it record your voice, face or body, and what happens to that?
They say they do not process biometric data and do not use images to identify users.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They share data with advertising networks and Yandex.Metrika, and collect IDFA, GAID and similar ad IDs.
Do they sell or share your data, and can you opt out?
They transfer credentials and other data to ad partners, affiliates, and VK services, with no opt-out described in this policy.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can edit some account fields in the app; full stop or destroy requests are by written contact. Data is kept for the contract plus Russian law periods.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe technical, organizational and legal security measures in general terms, not an independent audit.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Changes take effect the day after posting; actually using the messenger after that means you agree.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 3,485 words at a professional or legal expert level (Flesch reading ease 25.1).
