Privacy policy

Last updated: 8 October 2026

This policy applies to the Tomo website and the Tomo mobile application on iOS and Android. It explains what information Tomo Studio Ltd collects, why it is used, how it is shared and protected, and how you can delete it. The rules for using Tomo are in the terms of service.

Want to delete your account? See Account deletion for the in-app and web request paths.

Who operates Tomo

Tomo is operated by Tomo Studio Ltd, a private company limited by shares and registered in England and Wales. Company number: 17435997. Registered office: 20 Wenlock Road, London, England, N1 7GU.

Website and waitlist information

Cloudflare, the website hosting and security provider, automatically processes technical request information, such as an IP address, request headers, browser or device details, and bot-detection signals. It may set essential security cookies to deliver the website and prevent abuse. Tomo does not use these cookies for advertising.

Waitlist applications

When the waitlist is open, you can apply to join Tomo with an application form. A form provider hosts the form. The Tomo website does not collect your answers itself.

The form asks for your name, your email address, and your phone type (iPhone or Android). It asks what the occasion is, how many people are in your group, and the mix of phones in your group. It also asks how you heard about Tomo and if you are happy to answer a short survey. You can add details about the occasion and when it starts. These two answers are optional. A separate, optional checkbox lets you ask for occasional Tomo product updates.

Tomo Studio Ltd uses your answers to review applications, to contact you about your application, and, if you said yes, to send you one short survey about Tomo. It processes your answers because you asked to join Tomo. It sends product updates only if you tick the checkbox, and you can withdraw that choice at any time with the unsubscribe link in each update.

These providers process your application for Tomo Studio Ltd:

• A form provider hosts the form and receives your answers.
• A bot-protection provider checks that a person, not an automated program, sends the form.
• A spreadsheet provider stores your answers so that Tomo Studio Ltd can review applications.
• An email provider processes your name, email address, and message when Tomo Studio Ltd sends an access-code email.

Tomo Studio Ltd deletes application answers from the form and spreadsheet providers six months after the waitlist closes, or earlier if you ask. If you agreed to product updates, Tomo Studio Ltd keeps your email address after that time only to send those updates. Each product-update email has its own unsubscribe link.

To correct or delete your answers, email support@gettomo.co.

Access codes

When Tomo Studio Ltd makes an access code, its record includes the email address it was made for, its use limit, its use count, and whether it is active. For an emailed code, the record also keeps a copy of the email, including your name, and its delivery status. Your sign-in email does not need to match the address that receives the code. Tomo Studio Ltd deletes access-code records six months after the waitlist closes, or earlier if you ask. When you redeem a code, join through an invite, or already used Tomo before access codes started, Tomo Studio Ltd records approval against your account ID. Approval lets you create Tomos and is kept until your account is deleted.

Mobile application information

Account and sign-in information

The mobile application uses a platform sign-in provider—Apple on iPhone, and Google on Android—and a cloud authentication service. These services process the account identifiers, authentication credentials, email address or private relay address, and name information needed to sign you in. Tomo Studio Ltd stores your application user ID, sign-in provider details, account dates, and deletion-request status.

Profile and Tomo information

You can provide a display name and profile photo. When you create, join, or use a Tomo, the mobile application stores its name and photo, invitation information, membership, member profile summaries, creator, and application-generated identifiers. Your display name, profile photo, membership, and contributions are visible to the other members of that Tomo.

Clips, video, audio, and photos

The mobile application stores the video and audio clips you record and upload. It also stores metadata needed to organise, sync, recover, play, delete, and export them, such as the creator and Tomo, capture time, local date and time zone, duration, upload status, storage reference, and application-generated identifiers.

When location capture is enabled and you grant permission, the mobile application may store a recent foreground location with a clip, including its coordinates, accuracy, and measurement time. Tomo does not request background location. A missing or denied location never prevents you from recording a clip. Location is not included in analytics or diagnostics.

If you select a profile or Tomo photo, that image is uploaded to cloud storage. If you choose to save an exported video or a photo captured while recording, the mobile application writes the item you requested to your device's Photos or media library. It does not read your whole library for that purpose.

Subscriptions and purchases

When you buy Tomo Pro, Apple or Google takes the payment. Tomo Studio Ltd does not receive your card or bank details. A subscription provider shows the Tomo Pro offer and receives purchase information from the store, such as the product, price, currency, purchase and renewal dates, store transaction identifiers, and whether the subscription is active, a test purchase, cancelled, or refunded. It also records when the offer is shown and when a purchase starts or ends.

Tomo links this information to your account with a random billing identifier, not your name or email address. Tomo Studio Ltd stores whether your account has an active purchase and when it was last checked, so that the app can set your plan and storage allowance. Apple, Google, and the subscription provider keep their own purchase records under their own policies, including after you delete your Tomo account.

Device, analytics, and diagnostics information

The mobile application may keep pending uploads, temporary clips, thumbnails, cached media, export files, settings, and recovery records on your device. It processes technical information needed to run, secure, measure, and improve the service. This can include device and operating-system details, application version and build, language or time zone, network state, session identifiers, permission outcomes, pseudonymous identifiers, crashes, handled errors, performance measurements, and release health.

Analytics is not used for advertising. Diagnostic screenshots, view hierarchies, session replays, default personal information, network-request capture, and diagnostic log collection are disabled. Filters remove names, emails, invitation information, file paths, storage references, media, and other unneeded content before diagnostic events are sent.

How information is used

• Create, authenticate, and maintain your mobile account and profile.
• Review waitlist applications and send access codes.
• Let you create, join, and use Tomos.
• Record, upload, sync, store, play, delete, and export clips.
• Sell and manage Tomo Pro subscriptions, and set your plan and storage allowance.
• Recover interrupted uploads and maintain service reliability.
• Measure feature use and improve performance and usability.
• Diagnose failures, prevent abuse, secure the service, and comply with law.

How information is shared

• With members of your Tomos, including your profile, membership, clips, and information shown in Tomo exports.
• With website hosting, waitlist form, bot-protection, spreadsheet, email, database, platform sign-in, subscription, cloud, analytics, diagnostics, app-distribution, and operating-system providers that process information for Tomo Studio Ltd.
• At your direction, such as when you share an invitation or save and share an exported video.
• When reasonably necessary to comply with law, respond to valid legal process, prevent fraud or abuse, or protect users and the service.

Tomo Studio Ltd does not sell personal information, serve third-party advertising, or use personal information to track you across other companies' applications or websites.

Where information is processed

Some providers process information outside the UK, for example in the United States or the European Union. When information leaves the UK, Tomo Studio Ltd relies on safeguards that UK data protection law allows, such as adequacy regulations or the UK International Data Transfer Agreement or Addendum.

Security

Information is encrypted in transit using HTTPS/TLS. The service is not end-to-end encrypted. Tomo Studio Ltd's cloud providers can process stored account information and content as needed to operate the service. No transmission or storage system can be guaranteed completely secure.

Retention

Account, profile, Tomo, and clip information is kept while your account is active and as needed to provide the service. You can delete individual clips at any time. When a host deletes a Tomo, its clips and videos are kept for 30 days in case of a mistake, and then removed from Tomo's storage. Account-deletion requests are completed within 30 days.

Deleted information may remain for a limited time in provider backups, security records, and operational logs. Analytics, diagnostics, hosting, and cloud providers keep those records under their standard service settings and legal obligations. Aggregated or anonymised statistics that no longer identify your account may be retained. Copies that you or other people exported, saved, or shared outside Tomo are outside Tomo Studio Ltd's control.

Account deletion

You can request deletion in either of these ways:

• In the mobile application: go to You → Account → Delete Account and confirm the request.
• On the web or without the mobile application: email support@gettomo.co and ask Tomo Studio Ltd to delete your account. Tomo Studio Ltd may ask for information needed to verify that the account is yours.

When the request is complete, Tomo Studio Ltd deletes your authentication account, application profile, profile photo, clips, cloud media, metadata, and pending server records. Tomo Studio Ltd also removes you from Tomos and deletes or anonymises account-linked identifiers where required. The retention limits and exceptions above still apply.

Your rights

Tomo Studio Ltd is the data controller for the information described in this policy. Under UK data protection law, you can ask Tomo Studio Ltd to access, correct, delete, restrict, object to, or export your personal information. Where Tomo Studio Ltd relies on your consent, you can withdraw it at any time. Withdrawing consent does not affect processing that happened before.

To use these rights, email support@gettomo.co. You can also correct your name and photo, and delete clips or your account, in the app. Tomo Studio Ltd may ask for information needed to verify that the request comes from you, and normally replies within one month.

If you have a concern about how Tomo Studio Ltd uses your information, contact Tomo Studio Ltd first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.

Legal bases

UK data protection law requires a legal basis for each use of personal information. Tomo Studio Ltd relies on these:

• To perform the contract with you (the terms of service): to create and maintain your account and profile, let you create, join, and use Tomos, record, upload, store, play, delete, and export clips, recover interrupted uploads, and sell and manage Tomo Pro subscriptions and your storage allowance. This basis also covers reviewing your waitlist application and sending an access code, because you asked for them before you started to use Tomo.
• Tomo Studio Ltd's legitimate interests: to measure feature use and improve performance and usability, diagnose failures, keep the service secure, and prevent fraud and abuse. Tomo Studio Ltd uses pseudonymous identifiers and filters for these uses, and does not use them for advertising. You can object to these uses by emailing support@gettomo.co.
• Consent: to store a location with a clip when you turn on location capture and grant permission, and to send product-update emails when you agreed to them. You can turn off location in your phone settings and unsubscribe from any product-update email.
• A legal obligation: to comply with law, respond to valid legal requests, and keep records that the law requires.

Children

You must be 13 or older to use Tomo. Tomo does not knowingly collect personal information from children under 13. If Tomo Studio Ltd learns that a child under 13 provided personal information, Tomo Studio Ltd will take reasonable steps to delete it.

Changes

Tomo Studio Ltd may update this policy as Tomo or its data practices change. The current version will remain available at this URL with a revised last-updated date.

Contact

For privacy questions, support, or deletion requests, email support@gettomo.co.