Privacy policy

1.Purpose

This policy explains how Conga Media Limited (“Conga”, “we”, “us”, or “our”) collects, uses, stores, and shares personal information in connection with the Conga app and its associated services. It is intended to inform users of their rights and Conga’s obligations under UK data protection laws, such as UK GDPR. The legal basis under which Conga collects, processes, and stores your data is set out in section 3.7 below.

2.Scope

This policy applies to all personal data processed by Conga in connection with the Conga app, including data collected from users, prospective users, and individuals who interact with Conga through its services or communications channels.

3.Policy

3.1About Conga

The Conga app is a location-based social platform that helps you discover, join, and share real-world experiences (the “Services”). This Privacy Policy explains what information we collect, why we collect it, and how we use and protect it.

The Conga app is operated by Conga Media Limited, a company registered in the United Kingdom (Company Number 13361185).

3.2Age Requirement

The Conga app is strictly for users aged 18 and over. The app is rated 18+ on the Apple App Store and Google Play, which restricts download and installation to users who meet the age requirement on those platforms. If you are under 18, you must not create an account or use the Services. If you believe a user may be underage, please report this to us at report@congamedia.com. If we become aware that a user may be underage, we will suspend the account pending review. If the user is confirmed to be under 18, the account and associated data will be permanently removed.

3.3Information We Collect

We collect different types of information depending on how you use the Conga app.

3.3.1Information You Give Us

When you create or use your Conga account:

• Name or username
• Email address and profile information
• Profile picture
• Photos, videos, comments, and other content you post publicly within the Conga app
• Log data and usage activity within the Services, such as searches you perform, Congas you view or join, likes and reactions, comments you make, and messages you send
• Communications with our team
• Newsletter and marketing preferences
• Account settings and preferences

Some profile information, such as your bio, is optional. You may also create an account using Google Sign-In or Apple Sign-In, in which case we may receive your name and email address from that provider.

We also collect location data with your permission — see Location Information below for details.

3.3.2Information We Collect Automatically

When you use the app, we automatically collect:

• Device type, operating system, and app version
• Device ID
• IP address and device identifiers
• Log data and usage activity within the Services
• Push token (if you enable notifications)

If you create an account using email and password, your password is stored as a secure one-way hash. We do not store or have access to your actual password.

3.4Subscription Information

Subscriptions are currently processed through the Apple App Store or Google Play, using RevenueCat as our subscription management provider. We do not process payments directly and do not store full payment card details. Through this process we receive limited information, including subscription status, billing country, renewal dates, and transaction identifiers.

3.5Location Information

Location is central to how the Conga app works. With your permission, we collect precise (GPS-derived) location data only while the app is open and in use. We do not collect your location when the app is closed or running in the background. We use this information to:

• Enable map-based features and show nearby Congas
• Verify users are physically near a Conga before allowing certain posts (e.g., “Moments”)
• Reduce misleading or fraudulent activity
• Improve safety, moderation, and platform integrity
• Personalise and improve the Services

Important things to know about location on Conga:

3.6How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Conga app
• Create and manage your account
• Enable social features, messaging, and content sharing
• Verify proximity-based interactions and activity
• Personalise your experience
• Process subscriptions
• Maintain platform safety and moderation
• Send newsletters and updates where you’ve opted in
• Prevent fraud, spam, abuse, and illegal activity
• Comply with legal obligations and enforce our Terms of Service and Community Guidelines
• Analyse usage to improve the Services
• Detect and prevent security threats

We do not sell your personal information to third parties, and we do not use your data for advertising purposes.

3.7Legal Basis for Processing

The table below summarises why we process your data and the legal ground we rely on.

Scroll the table horizontally to see all columns.

3.8How Visibility Works on Conga

The Conga app is a social platform. Certain information and activity may be visible to other users, including:

• Your username and profile information
• Uploaded content, comments, and interactions
• Congas you’ve joined and associated location activity

Private messages are stored on our servers to enable the messaging feature and are not end-to-end encrypted. While we do not routinely monitor or read private messages, we may access message content where necessary to investigate reports of abuse, maintain safety, or comply with legal obligations.

You are responsible for the content you choose to share through the Conga app.

3.9User Content & Moderation

Users may upload photos, videos, comments, messages, and other materials. By doing so, you acknowledge that:

• Other users may view or interact with certain content
• Content may be associated with a Conga or location
• Content may remain visible for a period of time depending on how the Services operate

Content moderation on the Conga app is conducted through human review. We may also use automated tools to help identify or surface content for review. Full details of how our moderation process works are set out in our Community Guidelines.

3.10Cookies, Analytics & Similar Technologies

The Conga app does not use cookies. We use analytics and crash-reporting tools (Firebase Analytics and Firebase Crashlytics) to understand how the app is used and to diagnose technical issues. These tools are “consent-gated,” meaning they only operate with your permission. Some data processed through these tools may be transferred outside the UK — see International Data Transfers below.

Our website (which provides corporate information) uses cookies for standard corporate website functionality. Please refer to our Cookie Policy at www.congamedia.com/cookies for more information.

3.11Marketing Communications

If you opt in, we may send newsletters, promotional communications, product announcements, and feature updates. You can unsubscribe at any time using the link in any email, or by adjusting your account settings.

3.12How We Share Your Information

We do not sell your personal information.

We may share information with:

• Trusted service providers who help us operate the Conga app (hosting, analytics, maps and location services, push notifications, social sign-in, customer support, moderation, payments, and security and fraud prevention)
• Authorities, where required by law, or to investigate fraud, abuse, or illegal activity
• A successor entity in the event of a merger, acquisition, or sale of assets

We may use aggregated or anonymised data for analytics, research, and business insights. This data cannot be used to identify you.

3.13International Data Transfers

Your core account and content data is hosted in the United Kingdom. Analytics and diagnostic data processed via Google Firebase may be transferred to and stored in countries outside the UK, including the United States. Where this occurs, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, to protect your information.

3.14Data Retention

You can delete your account at any time through the app settings. When you delete your account, your personal data is removed from our live systems immediately. Encrypted backup snapshots are retained for 7 days after deletion to enable access, if needed, by the authorities (following a deletion request, except where required by law or to investigate fraud or abuse reported before deletion), but are not otherwise accessible. At the end of that period the data is automatically deleted.

For information on how to delete your account, visit www.congamedia.com/deleteaccount.

3.15Security

We use technical and organisational measures designed to protect your information. These include encrypting certain data stored locally on your device, protecting data in transit with HTTPS, using automated app-integrity and threat-detection tools on supported devices, and restricting access to your account data on our systems through authentication and access controls. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

3.16Your Rights

Under UK data protection law, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at privacy@congamedia.com.

We may need to verify your identity before processing your request (for example, to grant access to your personal information).

3.17Your Privacy Controls

In addition to your legal rights set out above, the Conga app provides the following privacy controls directly within the app:

• Notifications: You can choose which notifications you receive from the Conga app through your device or app settings.
• Location access: You can manage or withdraw location permissions at any time through your device settings. Some features of the Conga app require location access to function.
• Analytics consent: Firebase Analytics and Crashlytics are consent-gated. You can withdraw your consent at any time through your privacy settings within the app.
• Blocking users: You can block other users at any time through the app.
• Account deletion: You can delete your account at any time through the app settings. Deletion is immediate, with no grace period once confirmed (see also section 3.14).

3.18Third-Party Services

The Conga app may contain links to or integrations with third-party services and platforms. Your use of these external services is governed by the relevant platform’s privacy policies. We are not responsible for the privacy practices, content, or security of third-party services.

3.19Changes to This Policy

We may update this Privacy Policy from time to time (for example, to comply with changes to law or regulation). If we make changes, we’ll notify you through the app, website, or other communications where appropriate. Your continued use of the Conga app after changes take effect means you accept the updated Privacy Policy.

3.20Contact Us