Tsaskhan Privacy Policy

Last updated: 26 September 2026 · Applies to the Tsaskhan app on Android and iPhone

Tsaskhan is a live map of your friends, your family and your couple. It only works if it handles your location, so this page says plainly what the app collects, who can see it, how long it is kept and how to delete it.

The short version

Your location is shown only to the people you accepted: friends, the family circles you joined, and your couple.
Tsaskhan keeps sharing while the app is closed. Your phone shows this the whole time: a notification on Android, the blue location mark on iPhone.
Ghost mode deletes your location from the server, not just the pin. One exception: if a parent made you a child in a family circle, that circle's parents still see you, and the app tells you so on screen.
No ads. We do not sell your data. There is no analytics or advertising code in the app.
Chat is encrypted on its way to the server, but it is not end-to-end encrypted.
You can delete your account and your data from inside the app at any time.

1. Who is responsible

Tsaskhan is made by Tulga Dashdorj, an individual developer in Ulaanbaatar, Mongolia. In this policy "we" means him. He decides how your data is handled and answers for it. Contact details are at the end.

2. What Tsaskhan collects, and why

What	Why
Email address and password	To sign you in, confirm the address, and let a friend find you by typing your address. Passwords are handled by Firebase Authentication; we never see them. Your address is not shown to other users.
The name you choose	What friends, circles and your couple see next to your pin.
Your location: latitude, longitude, accuracy, speed and the time it was taken	To put you on the map for the people you chose, to work out distances and routes, and to notice when you arrive at or leave a saved place.
Battery level and whether the phone is charging	Shown next to your pin, so your people know why you might go quiet.
Your status (coffee, studying, gym and so on) and whether ghost mode is on, with the time you turned it on	Shown on your pin; ghost mode is remembered across restarts so it cannot switch itself off.
Messages you send to a friend, with the time sent and when each of you last read the chat	To deliver the chat and show the unread dot.
Friend and couple requests: who asked whom, and whether it was accepted	So nobody sees you until you say yes.
Family circles: the circle's name and join code, who is in it, and each person's role (parent, child or member)	To run circles and parent mode.
Places you save (for example Home or School) and arrival and leaving lines ("Anu arrived at School, 08:02")	For your couple and your family circles.
Whether a child's location is on (on, off, or not allowed on the phone)	Only in parent mode, so parents are told when a child's location stops.
A random ID for this installation, and whether the phone is Android or iPhone	So that only one of your phones shares your location if you are signed in on two.
Push notification tokens, one per phone	To deliver notifications to that phone. See section 7.
Your plan (Free, Couple, Family or Big circle)	To unlock what your plan includes.

What Tsaskhan does not collect: your contacts, photos, camera, microphone, files, advertising ID or browsing. We do not ask for your age or date of birth. The app has no analytics, advertising or crash-reporting code of its own.

There is no location history. Your position is one record that is overwritten each time it updates. The only history is the arrival and leaving lines for places saved by your couple or your family circle.

3. Who can see what

A friend, after you have both accepted each other, sees your name, status, location, battery, and when your location last updated. A friend's phone also receives which kind of phone you share from (Android or iPhone); the app does not show it.
People in a family circle see the same for everyone in the circle, plus the circle's places and arrival lines. Anyone who has the circle's six-letter code can join it, so treat the code like a key. The person who made the circle can remove people.
Your couple also sees the places you saved together and when either of you arrives or leaves one. Both of you must say yes, and either of you can end it.
Parents in a family circle see more about a child. See section 6.
Somebody who types your email address can send you a request, and can therefore tell that the address has a Tsaskhan account. They see nothing else unless you accept.
Your messages are readable only by you and that friend in the app.
Nobody else. We do not sell data, share it with advertisers, or show ads. The companies that run the service for us are listed in section 8. We will hand over data to the authorities only when Mongolian law requires it.

4. Location, including in the background

Location is optional. Without it you can still chat and see your friends, but they cannot see you.

If you allow it and ghost mode is off, Tsaskhan keeps updating your position while the app is not on screen, so the people you chose do not see a pin from an hour ago. It sends an update when you have moved about 20 metres, when your battery changes, and about every 3 minutes while you stand still.

On Android, a notification ("Tsaskhan is sharing your location") stays on the whole time. Tsaskhan does not use Android's "Allow all the time" location permission; it keeps going with a visible foreground service instead.
On iPhone, the blue location mark shows at the top of the screen while Tsaskhan shares in the background.

Turning on ghost mode stops the background sharing, and the notification or blue mark goes away (except for a child in parent mode; see section 6). Location also stops if the system closes the app, or if you switch it off in the phone's settings.

When you ask for a route to someone, your position and theirs are sent to Google to work out the route.

5. Ghost mode

Ghost mode is one tap, in the top-left corner of the map. It does not just hide your pin: it deletes your coordinates, accuracy, speed and battery from the server, from your profile and from every family circle you are in. While you are a ghost, nothing new is sent. It stays on after a restart and on your other phone.

The exception: in a family circle where a parent has made you a child, your location keeps going to that circle, so your parents still see you, with a 👻 on your pin. Friends, other circles and your couple do not. The app always tells you this (section 6).

6. Children and parent mode

Tsaskhan is made for teenagers and adults. It is not a children's app and is not listed in any store's Kids or Families section. It has parent mode so that a family can use it together, and a child should use Tsaskhan only in a family circle set up by their parent, with their parent's agreement.

How it starts, and the parent's consent

A child uses Tsaskhan on their own phone, with their own account, and joins the family circle with its code. A parent in that circle then marks them as a child. By doing that, the parent confirms that they are the child's parent or legal guardian and that they agree to Tsaskhan handling the child's data as this policy describes. Mongolia's Law on Personal Data Protection asks for a parent's or guardian's consent for a child's data, and this is how that consent is given. If you are under 18, please use Tsaskhan with your parents' agreement.

What a parent can see about a child

The child's location and battery, even when the child turns on ghost mode (ghost mode still hides the child from friends and other circles).
When the child's location last updated, and a warning when it has been quiet for 30 minutes.
A warning when location is switched off or not allowed on the child's phone.
When the child arrives at or leaves a place saved in the circle, such as Home or School.
When the child leaves the circle.
When notifications are available: alerts for the above, a low-battery alert, and the child's SOS (section 7).

What a parent cannot see

A child's chats, who the child's friends are, and the child's couple. Parent mode does not block apps, limit screen time, or read anything else on the phone.

The child always knows

The child's map always shows a banner that cannot be closed, naming who can see them, for example "Mom and Dad can see where you are."
On Android the notification says "Your parents can see where you are, even in ghost mode." On iPhone the blue location mark stays on.
Tsaskhan never hides its icon, never runs in secret, and cannot be installed on somebody's phone without them.
A child can leave the circle or uninstall the app. The parents are told, and nothing more is shared after that.

A parent chooses one-way (the child does not see the parents) or two-way (they do), and can make the child an ordinary member at any time.

If you believe a child is using Tsaskhan without a parent's agreement, write to us (section 14) and we will delete the child's data.

7. Notifications and SOS

If you allow notifications, the app stores a push token for each of your phones. It is an address for delivering notifications to that phone, not your phone number. When something happens (a message, a friend or couple request, an arrival, a warning about a child, an SOS), our code on Google Cloud (Cloud Functions) sends the notification through Firebase Cloud Messaging, and on iPhone through Apple's push service. A notification can show a name and a short text, such as "Bolor arrived at Home" or the start of a message, and may appear on your lock screen. You can turn notifications off in the phone's settings. Tokens are deleted when you sign out or delete your account.

SOS sends an alert with where you are at that moment to [CHECK-SOS: who receives it, e.g. your parents in a family circle, your circle, your couple]. It works only with an internet connection and is not an emergency service. In an emergency, call 102 (police), 103 (ambulance) or 101 (fire).

8. Services Tsaskhan uses

These companies process data for us, only to run the app:

Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging): stores and delivers everything in section 2. Google processes it on our behalf under the Firebase privacy and security terms. For security, Google also handles technical data such as the IP address your phone connects from.
Google Maps Platform: draws the map and works out routes. Your phone talks to Google directly, and Google's Maps software can collect usage and diagnostic data for Google. See the Google Privacy Policy.
Google Fonts: the app downloads its two fonts from Google, which sees your phone's IP address.
Apple Push Notification service: delivers notifications to iPhones.
Google Play and the App Store: when paid plans can be bought, the store takes the payment. We never see your card; we only learn which plan you have and until when.

9. Where it is stored, and how it is protected

Your data is stored by Google Firebase in Google's data centres in Singapore (asia-southeast1), and our Cloud Functions run in Singapore (asia-southeast1). Both are outside Mongolia, so using Tsaskhan means your data is stored abroad.

Everything travels over encrypted connections (HTTPS/TLS), and Google encrypts it on its disks.
Security rules on the server decide who can read each record, so another user's phone cannot fetch anything it is not allowed to see.
Chat is not end-to-end encrypted. Messages are stored on the server in a form that the developer's administrator account could read. We do not read your messages or look at your location, except when you ask us to fix a problem with your account, or when the law requires it.

10. How long it is kept

Your location: one record, overwritten on every update. It is deleted when you turn on ghost mode or delete your account.
Messages: until either of you removes the other as a friend, or either of you deletes the account. Single messages cannot be edited or deleted.
Places and arrival lines: until someone deletes them, the couple ends, or you delete your account. There is no automatic expiry yet.
Your account: until you delete it. We do not delete inactive accounts automatically.
Push tokens: until you sign out, delete your account, or the token stops working.

We do not make our own backups of the database. After something is deleted, Google may keep it in its own backup systems for a limited time before it is overwritten.

11. Deleting your data and your account

In the app (Android and iPhone)

Tap the big round status button in the middle of the bottom bar, then Delete my account, and confirm. If the app asks you to sign in again, do so and repeat.

This deletes: your profile and last position, your email lookup, every friendship and every message in them (for your friends too), your couple with its places and arrival lines, your position, name and arrival lines in every family circle, your push tokens, and your sign-in. It cannot be undone.

What stays: a family circle you created stays for the people still in it, with its name, code and the places saved in it. Your account ID (a random string, without your name or email) can stay in a circle's role list until a parent changes it.

Without the app

Write to tsaskhan.support@gmail.com from the address you sign in with, with the subject "Delete my Tsaskhan account". We delete the same data within 30 days and reply when it is done.

Deleting some data but keeping the account

Ghost mode deletes your location.
Removing a friend deletes your chat with them.
Leaving a circle deletes your position from it; ending a couple deletes its places and arrival lines.
You can delete places and your own arrival lines.

12. Your rights, and Mongolian law

Tsaskhan handles personal data under Mongolia's Law on Personal Data Protection (Хүний хувийн мэдээлэл хамгаалах тухай хууль). We rely on your consent: you give it when you create an account, when you allow location, and when you accept a friend, a circle or a couple. You can withdraw it at any time with ghost mode, by removing people, or by deleting your account.

You have the right to know what we hold about you, to get a copy, to have it corrected, to have it deleted, and to withdraw your consent. Most of this you can do in the app. For a copy of your data, or anything else, write to us; we answer within 30 days. If you are not satisfied, you can complain to the Mongolian authority that oversees personal data protection.

Tsaskhan is made for Mongolia. If you use it elsewhere, your local law may give you further rights, and we will honour them when you write to us.

13. Changes to this policy

If we change what is collected or who can see it, we will update the date at the top and tell you in the app or by email before the change takes effect.

14. Contact

Questions, a copy of your data, or a request to delete it:
tsaskhan.support@gmail.com
Tulga Dashdorj · Tsaskhan · Ulaanbaatar, Mongolia

Монгол хувилбар: Нууцлалын бодлого