USER CONSENT

This User Consent explains how your personal data is collected, used, stored, protected, transferred, and erased when accessing services via the Tribe application and the https://tribe.mn website.

Tribe processes user personal data in accordance with the Law of Mongolia on the Protection of Personal Information and applicable legal frameworks.

1.Information We Collect

Tribe may collect the following categories of information to provide the Service:

1.1.Registration Information:

•First name, last name;

•Phone number;

•Email address;

•Username and password;

•Profile picture and display name;

•DAN system identity verification results;

•Additional optional profile details supplied by the user (e.g., organization, job title).

Passwords are never stored in plain text and are encrypted using industry-standard technical security mechanisms.

1.2.Event and Participation Data:

•Event names, descriptions, photos, locations, dates, and times;

•Records of created, registered, or attended events;

•Participant responses, feedback, and selected time availability;

•Information regarding invited users;

•Event-related chats, comments, and notification data.

1.3.Location Data:

•Subject to explicit user permission, Tribe may access device location data to provide features such as event mapping, location tagging, directions, and discovering nearby events.

1.4.Device and Usage Data:

•Device model and operating system version;

•Application version;

•IP address;

•Access dates and timestamps;

•System error logs and service usage statistics;

•Cookies and local storage data (application data stored locally on the device).

1.5.Payment Information:

•When paid services are utilized, transaction metadata may be processed. Financial processing is performed by Monpay or other payment processors supported by Tribe.

Tribe does not store sensitive cardholder data (such as full primary account numbers or CVVs) on its servers.

2.Purposes of Data Collection

Tribe utilizes collected personal data for the following legitimate purposes:

2.1.Account creation, user identity verification, and authentication.

2.2.Creating, managing, and registering participants for events.

2.3.Dispatching invitations, confirmations, notifications, and reminders.

2.4.Processing transactions and orders for paid services.

2.5.Responding to user inquiries, requests, and formal complaints.

2.6.Ensuring service security, preventing fraud, and detecting unauthorized access.

2.7.Analyzing app performance, resolving technical errors, and improving service features.

2.8.Complying with legal obligations and regulatory orders issued by competent authorities.

2.9.Delivering marketing updates, new feature notices, and promotional materials (where consent has been explicitly granted).

3.Data Visibility

3.1.Participants within a specific event context may view limited details of other participants, such as display names, profile pictures, RSVPs, and selected available times.

3.2.Organizers can access participant rosters for their created events, including names, provided contact details, responses, and registration statuses.

3.3.Users can manage public visibility settings for their profiles and events via available privacy controls in the application.

3.4.By posting information in publicly accessible areas of the platform, Users acknowledge that such content will be viewable by other users.

4.Third-Party Data Sharing

Users hereby consent to Tribe sharing personal data with the following classes of third-party service providers strictly to the extent necessary to deliver the Service:

4.1.Cloud hosting, database, and infrastructure providers.

4.2.Email, SMS, and push notification delivery service providers.

4.3.Payment processing gateways, including Monpay and other supported financial service providers.

4.4.Mapping and location-based service providers.

4.5.Analytics, error logging, and system monitoring service providers.

4.6.DAN system and official identity verification providers.

4.7.Competent state authorities, law enforcement bodies, or courts where mandated by law.

Tribe adheres to the principle of data minimization, sharing only the data strictly necessary for the intended purpose.

5.Data Retention Period

5.1.Account registration data is retained until the user deletes their account or for the period specified by statutory law.

5.2.Event-related data is stored until deleted by the Organizer or for as long as necessary to maintain service functionality.

5.3.Financial and transaction records are retained for the duration mandated by financial, tax, and accounting laws.

5.4.Short-term technical data (such as verification codes and temporary access tokens) is kept only for the duration required for technical processing.

5.5.Upon receipt of a valid erasure request, Tribe will permanently delete or anonymize personal data within a reasonable timeframe, provided retention is not required by law.

6.Information Security

Tribe implements appropriate organizational and technical safeguards to protect personal data, including:

6.1.Encrypting data in transit using HTTPS/TLS protocols.

6.2.Enforcing role-based access control and privilege levels.

6.3.Storing passwords using non-reversible cryptographic hashing mechanisms.

6.4.Restricting network access to internal servers and databases.

6.5.Proactively preventing unauthorized access, data loss, modification, or destruction.

6.6.Monitoring system logs, operational errors, and security events.

6.7.Maintaining internal security policies and compliance procedures as required.

7.Cookies and Local Storage

7.1.Tribe may utilize cookies, local storage, and similar tracking technologies to maintain active user sessions, remember preferences, analyze service utilization, and uphold system security.

7.2.Users may restrict or disable cookies through their browser/device settings; however, doing so may impact the full functionality of certain Service features.

8.Rights of the User

User possess the following statutory rights regarding their personal data:

8.1.The right to be informed whether their personal data is being processed.

8.2.The right to access and receive a copy of their personal data.

8.3.The right to request rectification of inaccurate or incomplete data.

8.4.The right to request erasure of their personal data.

8.5.The right to restrict data processing under specific circumstances.

8.6.The right to withdraw previously granted consent.

8.7.The right to lodge a complaint with supervisory authorities as provided by law.

Requests to exercise these rights may be directed to:

•Email: support.tribe@gmail.com ; hello@tribe.mn ; tribe@mobicom.mn

•Website: https://tribe.mn

9.Marketing Communications

9.1.Subject to user consent, Tribe may send updates regarding new services, events, promotional offers, training, and news.

9.2.Users may opt out of receiving marketing communications at any time.

9.3.Opting out of marketing messages does not affect essential service communications, security alerts, or account verification notices.

10.Children's Privacy

10.1.Tribe is not intended for use by children under the age of 15.

10.2.Tribe does not knowingly collect personal data from children under 16 without parental or legal guardian consent.

10.3.If Tribe discovers that personal data from a child under 16 has been collected without verified consent, immediate steps will be taken to delete the information.

11.Account Deletion and App Uninstallation

11.1.Uninstalling the Tribe application from a device halts further data collection from that specific device.

11.2.Uninstalling the application does not automatically delete previously stored account records, events, or transaction histories stored on Tribe's servers.

11.3.To request complete account and data erasure, users must submit a request to support.tribe@gmail.com, hello@tribe.mn, or tribe@mobicom.mn.

12.Cross-Border Data Transfers

12.1.When utilizing global cloud infrastructure, payment processing, notification, or analytics providers, user data may be processed on servers located outside Mongolia.

12.2.In such instances, Tribe strives to enforce reasonable contractual, technical, and organizational measures to ensure an adequate level of data protection.

12.3.Tribe will comply with statutory requirements where special permits, notifications, or explicit user consents are required by law for cross-border data transfers.

13.Privacy Policy Amendments

13.1.Tribe reserves the right to update this User Consent periodically as required.

13.2.In the event of material modifications, Tribe will notify users through the app, website, email, or other appropriate channels.

13.3.Users who do not accept the updated terms reserve the right to stop using the Service and request account deletion.

13.4.Continued use of the Service following the posting of updated terms constitutes acceptance of the revised privacy policy.

14.Contact Information

Inquiries regarding this Privacy Policy, personal data protection, account deletion, or data correction may be directed to:

•Email: support.tribe@gmail.com ; hello@tribe.mn ; tribe@mobicom.mn

•Website: https://tribe.mn