TegoOS Privacy Policy

The data controller is Empoorio (https://empoorio.org). This policy applies to the TegoOS Android application published on Google Play (com.empoorio.tegoos), to the site https://tegoos.com and to links using the tegoos:// scheme. For any privacy matter, write to legal@empoorio.org.

TegoOS never asks you to register or to build a profile out of your personal details:

• You can browse stays, view photos and check prices without identifying yourself in any way.
• To book, publish or write a review, your identity is your EmpoorioChain account — a public address. We ask for no legal name, email, phone number or identity document.
• Every action that commits you is signed in Eoonia Wallet (eoonia://web3), which shows you what you are about to sign. TegoOS never sees or stores your recovery phrase or your account's private key.
• Payments are made in DMS directly on the chain. There are no payment gateways, no cards, no Stripe, PayPal, Apple Pay or Google Pay: we never handle banking data.

EmpoorioChain is a public blockchain: anyone can read it, and what is written there cannot be deleted or altered. Using TegoOS records the following on chain, always tied to your public address and never to your name:

• The properties and rooms you publish: type, area, capacity, price and availability. The exact address is not published on chain.
• Bookings: dates, amount in DMS, status, the 3% commission and, where needed, the arbitrator's intervention.
• DMS movements between guest, host, the commission account and the escrow account.
• The listing's fingerprint (sha-256) and the address where it is stored, so that anyone can verify that what they see is what was published.

Content that does not belong on chain is stored in a Firestore database of the "tegoos" project, hosted in the European Union (eur3 region). The application can only create documents, never modify or delete them, and each one is signed with your account, so nobody can write in your name:

• Listings: the text, the features and the photos of the stay, stored under their fingerprint; each photo is stored under its sha-256 and the application discards it if it does not match.
• Public host profile: the name you choose, your introduction, languages and area. You write it and it is public by design.
• Reviews: one per completed booking, signed by whoever stayed. Before showing it, the application verifies against the chain that the booking exists and is theirs.
• Listing reports: the reason and your signature. They can only be created and are not publicly readable; we use them to review the reported listing.
• Public encryption keys: the public half of your X25519 key, signed with your account, so the other side can write to you privately.

The chat between guest and host and the sensitive details of the stay (exact address, arrival instructions, wifi password) travel end-to-end encrypted, and Empoorio cannot read them:

• Each phone generates its X25519 key pair and keeps the private half in the system's secure store (Keystore on Android). It never leaves the device.
• Each message is encrypted with the shared key (X25519), derived with HKDF-SHA256 using the booking number, and sealed with AES-256-GCM.
• Only ciphertext reaches the server. Anyone without the recipient's private key — ourselves included — cannot decrypt it.
• The exact address of the stay is shared over this channel only with a guest who holds a confirmed booking.

This data is sent nowhere and disappears when you uninstall the application:

• Your private encryption key, in the system's secure store.
• Your preferences: language, the currency you want prices shown in, and application settings.
• The image cache and any receipt PDFs you generate.
• The record of alerts you have already seen, so they are not repeated.

The application asks for the minimum permissions and uses them only as stated:

• Internet: to talk to EmpoorioChain's public nodes, download listings and photos, and load the map.
• Photos: the system picker opens when you tap "add photo" while publishing a stay or editing your profile. The application does not reach into your gallery on its own and never turns on the camera in the background.
• Notifications and background task: every 15 minutes, and only when connected, the application checks the chain and your encrypted inbox to alert you to a booking or a message. That check sends personal data to nobody; notifications are composed on your own phone.

We do not sell or share data, and there is no advertising, analytics or tracking inside the application. Only these third parties are involved, for the stated function:

• Google Firestore (Google Ireland): hosts listings, photos, reviews, profiles and encrypted messages, on servers in the European Union.
• OpenStreetMap: when you open the map, its tile server receives your IP address and the area you are looking at, as with any web map.
• EmpoorioChain public nodes: when you read from or submit a transaction to the chain, the node sees your IP address and your account.
• Google Play: distributes the application and applies its own download and update policies.
• Competent authorities, only where a legal obligation requires it.

We process this data to perform the accommodation contract you initiate (GDPR art. 6(1)(b)) and, for listing reports, on the legitimate interest of keeping the platform free of fraud (art. 6(1)(f)). You have the right to access, rectify, restrict, object to and port your data, and to lodge a complaint with your country's supervisory authority. One limit must be stated plainly: what is written to a public blockchain cannot be deleted, by us or by anyone. You can withdraw your listing so it is no longer offered, but the history of bookings and payments remains visible on chain. For what does sit on our servers — photos, profile, reviews, encrypted messages — write to legal@empoorio.org and we will remove it. Encrypted messages are deleted twelve months after the booking ends.

TegoOS is not directed at anyone under 18: booking a stay requires legal capacity to contract and an account of your own on the chain. We do not knowingly collect data from minors and will delete it from our servers if we receive it. Any material change to this policy will be published on this same page, with its date. For privacy questions, rights requests or legal notices: legal@empoorio.org.