Privacy policy

Last updated: 14 September 2026

This policy applies to the Tomo website and the Tomo mobile application on iOS and Android. It explains what information Tomo Studio Ltd collects, why it is used, how it is shared and protected, and how you can delete it.

Want to delete your account? See Account deletion for the in-app and web request paths.

Who operates Tomo

Tomo is operated by Tomo Studio Ltd, a private company limited by shares and registered in England and Wales. Company number: 17435997. Registered office: 20 Wenlock Road, London, England, N1 7GU.

Website and waitlist information

Waitlist applications are not open. This website does not collect waitlist application data. There is no application form, and the website does not send waitlist emails.

Cloudflare, the website hosting and security provider, automatically processes technical request information, such as an IP address, request headers, browser or device details, and bot-detection signals. It may set essential security cookies to deliver the website and prevent abuse. Tomo does not use these cookies for advertising.

Mobile application information

Account and sign-in information

The mobile application uses a platform sign-in provider—Google on Android and Apple on iOS—and a cloud authentication service. These services process the account identifiers, authentication credentials, email address or private relay address, and name information needed to sign you in. Tomo Studio Ltd stores your application user ID, sign-in provider details, account dates, and deletion-request status.

Profile and Tomo information

You can provide a display name and profile photo. When you create, join, or use a Tomo, the mobile application stores its name and photo, invitation information, membership, member profile summaries, creator, and application-generated identifiers. Your display name, profile photo, membership, and contributions are visible to the other members of that Tomo.

Clips, video, audio, and photos

The mobile application stores the video and audio clips you record and upload. It also stores metadata needed to organise, sync, recover, play, delete, and export them, such as the creator and Tomo, capture time, local date and time zone, duration, upload status, storage reference, and application-generated identifiers.

When location capture is enabled and you grant permission, the mobile application may store a recent foreground location with a clip, including its coordinates, accuracy, and measurement time. Tomo does not request background location. A missing or denied location never prevents you from recording a clip. Location is not included in analytics or diagnostics.

If you select a profile or Tomo photo, that image is uploaded to cloud storage. If you choose to save an exported video or a photo captured while recording, the mobile application writes the item you requested to your device's Photos or media library. It does not read your whole library for that purpose.

Device, analytics, and diagnostics information

The mobile application may keep pending uploads, temporary clips, thumbnails, cached media, export files, settings, and recovery records on your device. It processes technical information needed to run, secure, measure, and improve the service. This can include device and operating-system details, application version and build, language or time zone, network state, session identifiers, permission outcomes, pseudonymous identifiers, crashes, handled errors, performance measurements, and release health.

Analytics is not used for advertising. Diagnostic screenshots, view hierarchies, session replays, default personal information, network-request capture, and diagnostic log collection are disabled. Filters remove names, emails, invitation information, file paths, storage references, media, and other unneeded content before diagnostic events are sent.

How information is used

• Create, authenticate, and maintain your mobile account and profile.
• Let you create, join, and use Tomos.
• Record, upload, sync, store, play, delete, and export clips.
• Recover interrupted uploads and maintain service reliability.
• Measure feature use and improve performance and usability.
• Diagnose failures, prevent abuse, secure the service, and comply with law.

How information is shared

• With members of your Tomos, including your profile, membership, clips, and information shown in Tomo exports.
• With website hosting, database, platform sign-in, cloud, analytics, diagnostics, app-distribution, and operating-system providers that process information for Tomo Studio Ltd.
• At your direction, such as when you share an invitation or save and share an exported video.
• When reasonably necessary to comply with law, respond to valid legal process, prevent fraud or abuse, or protect users and the service.

Tomo Studio Ltd does not sell personal information, serve third-party advertising, or use personal information to track you across other companies' applications or websites.

Security

Information is encrypted in transit using HTTPS/TLS. The service is not end-to-end encrypted. Tomo Studio Ltd's cloud providers can process stored account information and content as needed to operate the service. No transmission or storage system can be guaranteed completely secure.

Retention

Account, profile, Tomo, and clip information is kept while your account is active and as needed to provide the service. You can delete individual clips at any time. Account-deletion requests are completed within 30 days.

Deleted information may remain for a limited time in provider backups, security records, and operational logs. Analytics, diagnostics, hosting, and cloud providers keep those records under their standard service settings and legal obligations. Aggregated or anonymised statistics that no longer identify your account may be retained. Copies that you or other people exported, saved, or shared outside Tomo are outside Tomo Studio Ltd's control.

Account deletion

You can request deletion in either of these ways:

• In the mobile application: go to You → Account → Delete Account and confirm the request.
• On the web or without the mobile application: email privacy@gettomo.co and ask Tomo Studio Ltd to delete your account. Tomo Studio Ltd may ask for information needed to verify that the account is yours.

When the request is complete, Tomo Studio Ltd deletes your authentication account, application profile, profile photo, clips, cloud media, metadata, and pending server records. Tomo Studio Ltd also removes you from Tomos and deletes or anonymises account-linked identifiers where required. The retention limits and exceptions above still apply.

Children

Tomo is not intended for children under 13. If Tomo Studio Ltd learns that a child under 13 provided personal information without appropriate consent, Tomo Studio Ltd will take reasonable steps to delete it.

Changes

Tomo Studio Ltd may update this policy as Tomo or its data practices change. The current version will remain available at this URL with a revised last-updated date.

Contact

For privacy questions, support, or deletion requests, email privacy@gettomo.co.