Privacy Policy

Version 2.0 — September 2026

This policy explains what iMatch collects, why, who it is shared with and how to get rid of it. iMatch is operated by Vumbua Technology, Dar es Salaam, Tanzania.

1. What we collect

• Your account — name, phone number, age, gender, and a password you choose. Email if you give one.
• Your profile — photos, bio, interests, what you are looking for, relationship status, and the answers you write to profile prompts.
• Location — your approximate area, and precise location if you allow it, so we can show you people nearby. You can refuse and set your region by hand; the app still works.
• What you send — chat messages, photos and voice notes, status posts, community posts and comments.
• Live audio and video — when you join a live room or a video call, your camera and microphone streams pass through our video provider so the other people can see and hear you. We do not record them.
• How you use iMatch — who you liked, matched with or blocked, the rooms you joined, when you were last online.
• Your device — a notification token so we can push you a message, and basic connection information.
• Payments — the mobile-money number you pay with, or, where you buy through Google Play, the purchase receipt Google gives us. We never see or store your card number or your mobile-money PIN.

2. Why we use it

To run your account and show you people who fit what you are looking for; to deliver your messages, calls and rooms; to keep people safe; to take payment for Premium; and to notify you about matches and messages. We do not sell your data and we do not use it for advertising.

3. Safety checks

Photos, profiles and some messages are checked automatically for nudity, scams, contact-sharing and abuse, using an AI service run by Amazon Web Services on our behalf, and by our moderators when something is reported. This is how we keep fake and abusive accounts off iMatch.

4. Who we share it with

• Other people on iMatch — your profile, and whatever you post or say, is visible to the people you are shown to. Your phone number is never shown automatically.
• Agora — carries live audio and video between people in a room or a call.
• Amazon Web Services — hosting, photo storage and the automated safety checks.
• Google — push notifications (Firebase), and purchases when you pay through Google Play.
• Our payment gateway and ClickPesa — to take a mobile-money payment.
• Authorities — only where the law requires it, or to protect somebody from harm.

5. How long we keep it

While your account exists. Delete the account and we delete your profile, photos, messages and matches within 30 days, except records we must keep for accounting or to enforce a ban. Statuses disappear after 24 hours by design.

6. Your choices

• Delete everything — in the app: Profile → Delete Account. Or ask us at imatch.vumbuatechnology.co.tz/delete-account.
• Correct it — edit your profile at any time.
• Turn things off — location, notifications, camera and microphone are all permissions you can refuse or withdraw in your phone's settings.
• Get a copy — ask us and we will send you yours.

7. Security

Traffic is encrypted in transit, passwords are stored hashed and never in readable form, and access to the database is restricted to the people who run the service. No system is perfect; tell us at once if you think your account has been taken.

8. Children

iMatch is for adults. We do not knowingly keep an account for anyone under 18 — if you find one, report it and we will remove it.

9. Changes

If this policy changes in a way that matters, we will tell you in the app.

10. Contact

support@vumbuatechnology.co.tz