Privacy Policy
This policy explains what information Tora collects, how we use and protect it, and the choices you have. Tora is a social and dating app for adults, operated by Palas Network.
Tora is private by default: your media and messages require an authenticated request tied to your account, and nothing is readable anonymously. This policy describes how that works in more detail.
1 Overview
Palas Network ("Tora", "we", "us") operates the Tora app. This Privacy Policy applies to your use of Tora. For privacy questions or requests, contact palasnetwork@gmail.com.
Tora is for adults only (18+) and is not intended for anyone under 18.
2 Information we collect
Information you give us
- Account and profile: display name, age, gender, photos, bio, and interests you add during onboarding and on your profile.
- Content you create: posts, comments, polls, messages, voice notes, images, and gifting activity.
- Sign-in: you sign in with Google or Apple, which gives us a basic account identifier (we don't receive your Google or Apple password).
Information collected automatically
- Device and app data: device type, app version, and similar technical information.
- Country / region: used to show you people and posts from your own country.
- Log and security data: requests to our service, including logs of rejected requests, used to keep Tora secure and running.
- Notification token: a push token so we can send you notifications (see below).
3 How we use your information
- Provide the core service — discovery and matching, the feed, voice rooms, chat, and 1:1 calls.
- Show you people and content from your country, and apply your filters.
- Send push notifications for new messages, matches, gifts, and incoming calls.
- Operate the gifting economy (Diamonds and Beans).
- Keep Tora safe — review reports, moderate content, and enforce our rules.
- Protect the service with security controls such as authentication and rate limiting.
- Show ads (see Advertising) and meet our legal obligations.
4 Service providers & where data is processed
We use trusted providers to run Tora. Your data is stored privately — for example, media is kept in a private storage bucket and is never exposed directly.
These providers process data on our behalf to deliver Tora, and may process it in different countries.
5 How we share information
We do not sell your personal information. We share information only:
- With the service providers above, so they can run Tora for us.
- With other users, according to your visibility — for example, your profile, posts, and the fact that you visited someone (their Visitors list).
- Where we are required to by law, or where it is necessary to protect safety, investigate a report, or enforce our rules.
6 Advertising
Tora shows ads through Google AdMob, including banner, native in-feed, occasional interstitial, and opt-in rewarded ads that grant Diamonds. To serve ads, AdMob may process device information and advertising identifiers in line with Google's policies.
Ads never expose your profile, messages, or content to advertisers. You can usually limit ad personalisation in your device settings.
7 How we protect your information
Tora is built private-by-default. Every request is checked at the edge, and:
- Every read and write requires a valid authentication token, and writes are restricted to the account owner.
- Media is stored in a private bucket and is never served publicly or anonymously.
- We use rate limiting, logging of rejected requests, and one-time tickets for real-time connections.
No online service can be perfectly secure, but we work to protect your information.
8 Messages, moderation & staff access
Your 1:1 chats are private and are only accessed for safety or legal reasons. Voice "Party" rooms are group spaces, not private calls, and trust & safety staff may monitor any room.
When you report something, it goes to a staff triage queue and is reviewed by a person. Staff use internal tools to review reports; all staff access is recorded in a tamper-evident audit log with a documented reason.
9 Data retention & deletion
- Stranger chats auto-delete after 24 hours unless the chat becomes permanent (mutual follow or a sustained conversation).
- Permanent chats last until a participant deletes their account.
- When you delete your account, we permanently remove your profile, photos, posts, comments, and messages, and your Diamond and Bean balances are forfeited and erased. This cannot be undone.
- We retain safety and ban records, and evidence frozen for a report, so bans stay effective and to meet our legal obligations.
See the Delete Account page for how to delete your account.
10 Your choices & rights
- Edit your profile at any time from the Me tab.
- Control notifications from your device settings.
- Block and report other users.
- Delete your account and data (see section 9).
Depending on where you live, you may have rights to access, correct, or delete your personal information. To make a request, email palasnetwork@gmail.com.
11 Age (18+)
Tora is only for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe someone under 18 is using Tora, please report it to palasnetwork@gmail.com.
12 Changes to this policy & contact
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. For any privacy question or request, contact us at palasnetwork@gmail.com. This policy is governed by the laws of Malaysia.