Waloo Privacy Policy

Last updated: 15 October 2026

Waloo ("the app") lets people chat in groups and one-to-one, make voice and video calls, send voice messages, photos, videos and files, share animated emoji, post in a feed, and find people nearby. Waloo is published by Dejene, Gabacloud (gabacloud.com), Adama, Ethiopia ("we", "us"). This policy explains what information the app handles, why, and the choices you have.

1. Information you give us

• Account: your email address and password (stored only in protected, hashed form), or your Google account email and name if you sign in with Google.
• Profile: your display name and optional profile photo. Other Waloo users can see them.
• Contacts: the people you add as contacts and the requests you send, receive, accept or decline.
• Groups: the groups you create or join and your role in them.
• Messages: the texts, animated stickers, reactions, voice messages, photos, videos and files you send.
  • Message texts, stickers and voice messages are end-to-end encrypted on your phone. We store them only in encrypted form and cannot read or play them.
  • Photos, videos and files sent in chats are stored on our servers and can only be opened by the members of that chat.
• Feed posts: the text, photos and videos you post, and your reactions and comments. Feed posts are not end-to-end encrypted. Each post is visible to the audience you choose: everyone on Waloo, only your contacts, or only you.
• Reports and blocks: messages or posts you report (with the reason, and for encrypted messages the text your phone shows), and the people you block.
• Approximate location (optional): only if you turn on "People nearby", your location rounded to about 1 km, kept for at most 24 hours so nearby users can find you. Turning it off deletes it.

2. Information collected automatically

• Notification token: an identifier for your phone, used only to deliver notifications to you.
• Call set-up data: short technical messages, including network addresses, that two phones exchange to connect a call. They are deleted when the call ends. The sound and video of calls travel directly between phones and are not recorded or stored by us.
• Call history: who called whom, when, whether the call was answered and how long it lasted, so you can see your recent and missed calls. You can remove calls from your history.
• Encryption keys: the public half of your phone's encryption key, and chat keys that are themselves encrypted so only members' phones can open them.
• Advertising: the app shows ads from Google AdMob. Google may collect the device's advertising ID and usage data to show and measure ads. See how Google uses data from apps that use its services. You can reset or delete your advertising ID in your phone's settings.

3. Content safety checks

Before a photo or video is sent or posted, the app checks it on your phone with an on-device model and refuses adult content. The photo or video is not sent anywhere for this check. Reported content may be reviewed by our moderators.

4. Permissions the app asks for

• Microphone: for calls and for voice messages you choose to record.
• Camera: for video calls.
• Photos, videos and files: only the items you choose to send, post or set as your profile photo.
• Approximate location: only if you turn on "People nearby".
• Notifications: to tell you about messages, calls, missed calls, contact requests, likes, comments and announcements.

5. How we use information

We use it only to run Waloo: to sign you in, show your profile, deliver messages, files, calls and notifications, show the feed to the right people, keep the service safe (reviewing reports, suspending accounts that break our rules), and show ads. We do not sell your personal information.

6. Who processes information for us

• Supabase hosts the database, sign-in and file storage.
• Google Firebase Cloud Messaging delivers notifications.
• Google AdMob provides advertising.
• Google Fonts serves the animated emoji files, and public STUN servers operated by Google help phones connect calls. Both receive your network address when used.

Information is sent over encrypted connections (HTTPS/TLS).

7. How long we keep it

• Your information is kept while your account exists.
• Deleted messages, posts and comments are removed for everyone.
• Approximate location expires after 24 hours.
• When you delete your account, your profile, messages, posts, comments, reactions, contacts, group memberships, call history and the files you sent are deleted. Backups are overwritten within 30 days.

8. Your choices and rights

• Edit your name and photo at any time.
• Delete your messages, posts and comments; block people; mute or leave groups; turn "People nearby" on or off.
• Delete your account in the app (tap your photo, then "Delete account"), or see how to request deletion.
• Ask us for a copy of your information, or ask questions, at support@gabacloud.com.

9. Children

Waloo is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 uses Waloo, contact us and we will delete the account. See our Child Safety Standards.

10. Changes

If this policy changes, we will update this page and the date at the top. Important changes will also be announced in the app.

11. Contact

Dejene, Gabacloud, Adama, Ethiopia · support@gabacloud.com