Beruk / Favor Cards
  • English
  • 简体中文
  • Español
  • Português
  • 日本語
  • 한국어
  • Français
  • Deutsch

Privacy Policy

Last Updated: 2026-09-05


Article 1 (Data We Collect)

Data Provided by Users

DataPurposeRetention Period
Authentication information (Apple / Google account ID)LoginUntil account deletion
Nickname (display name)Shown to chat partners and when sending or receiving cardsUntil account deletion
Plaza display nameShown as the author in the Plaza (visible to other users)Until account deletion
Profile image / group iconDisplay in profiles and chatsUntil account deletion
Character appearance choice (gender)Stamp artwork variants and how you are depicted in AI illustrationsUntil account deletion
Birthday (month and day)Showing your birthday to friendsUntil account deletion
Year of birth (optional; never shown to other users)Generating AI illustrations suited to your age group, and age-group analysis for service improvementUntil account deletion
Chat messages (text)Service provisionUntil the room is deleted
Chat images, videos, voice messages, and doodlesService provisionUp to 14 days (auto-deleted)
Current location (precise coordinates, a display address, and a place name) — only when you send itSharing a place in a chatSame as the message (until the room is deleted)
Call history (caller, outcome, call duration)Showing the call historySame as the message (until the room is deleted)
Cards (message content, recipients, etc.)Sending and receiving cardsRetained in the recipient’s history (may remain even after account deletion)
AI illustration generation settings (input content)Generation of AI illustrationsUntil account deletion (deleted upon withdrawal)
Generated AI illustrationsCard creation and the community illustrations galleryHeld by the operations team. Illustrations published to the community illustrations gallery remain available to other users even after withdrawal
Custom stamp imagesUse in chatsUntil account deletion
Plaza posts and comments (text / images)Provision of the Plaza feature (visible to other users)Until deleted (may remain even after account deletion)
Inquiry contentCustomer support90 days after account deletion (see below)
Report content (reason / supplementary text)Investigation of misuse1 year after resolution

Data Collected Automatically

DataPurposeRetention Period
Device languagePush notification languageUntil account deletion
Device identifier for push notificationsSending push notificationsUntil account deletion
App version / OS versionBug investigationLinked to inquiries
Usage data (including user ID and IP address)Service improvementSubject to the retention policies of third-party services in Article 7
Error information (including user ID)Bug detection and fixingSubject to the retention policies of third-party services in Article 7
Billing information (purchase and subscription status)Provision of billing and subscriptionsUntil account deletion
Image safety analysis resultsDetection of inappropriate contentDeleted together with the image

Article 2 (Purpose of Data Use)

We use the collected data only for the following purposes:

  1. Provision and maintenance of the Service (chat functionality, calls, sending and receiving cards, the Plaza, AI illustration generation, push notifications)
  2. Provision of billing and subscriptions
  3. Responding to inquiries
  4. Investigation and prevention of misuse (handling reports, determining violations of the Terms of Service)
  5. Service improvement and analysis (including analysis by age group)
  6. Compliance with applicable laws

Article 3 (About Calls)

  • Call audio and video are exchanged directly between devices (peer-to-peer)
  • When a direct connection is not possible, the media is relayed through a relay server (Cloudflare Realtime TURN). The relay only forwards the media and does not record or store its content
  • We do not provide any call recording feature. We do not store the content of calls (when relaying is required, the audio and video pass through the relay server described above)
  • After a call, all that remains in the chat is the caller, the outcome (answered / missed / declined, etc.), and the call duration
  • The camera and microphone are used only during calls, while recording a voice message, and when taking a photo or video. We never record in the background
  • On iOS, the system may show the call in the device’s Phone app history

Article 4 (About Location)

  • Location is obtained only at the moment you tap “Send location” in a chat. We never track location in the background
  • What is sent is the coordinates obtained by your device, a display address derived from them on your device (down to the area and street name, with building numbers stripped), and a place name
  • The coordinates are precise. Even though the display address is shortened, the coordinates themselves can identify where you are. Please make sure the place is one you are willing to share with that person
  • If your device is set to “approximate location”, coarser coordinates are sent (the message shows that this is the case)
  • Location you send is shared only inside that chat (in a group chat, the members of that group can see it). It is never shared with other chats or third parties
  • We never use location for advertising, tracking, or behavioral analysis

Article 5 (Processing by AI)

  • Uploaded images are subject to automated safety assessment using machine learning. The assessment is performed on servers managed by us, and only the assessment results are stored
  • Text sent in the Plaza, in comments, or in chats may be subject to automated assessment of inappropriate expressions by AI (OpenAI moderation)
  • The AI illustration generation feature sends the entered prompt (text) to OpenAI in order to generate an image. Generated images pass through a filter designed to prevent inappropriate content
  • When a report is filed, AI may be used for an initial assessment of whether the content violates the Terms of Service
  • AI assessments are supplementary; final decisions on actions are made by the operations team

Article 6 (Data Access in Case of Reports)

For the purpose of investigating misuse, the operations team may access the content of a reported chat or Plaza post (text and images). Access is limited to the purpose of handling reports and will not be conducted for any other purpose.


Article 7 (External Transmission / Third-Party Services)

To the extent necessary for providing the Service, information is transmitted from the user’s device or our servers to the following third-party services:

ServiceProviderData TransmittedPurpose
Firebase AuthenticationGoogleAuthentication informationUser authentication
Cloud FirestoreGoogleUser data, chat (including location messages and call history), card, and Plaza dataData storage
Firebase Cloud MessagingGoogleDevice tokensPush notifications
Cloudflare R2Cloudflare, Inc.Image, video, voice message, and doodle filesFile storage and delivery
Cloudflare Realtime TURNCloudflare, Inc.Call audio and video (only when the network requires relaying; relayed only, never stored)Call relaying
OpenAIOpenAI, L.L.C.AI illustration generation input prompts, moderation-target textAI illustration generation, text safety assessment
MixpanelMixpanel, Inc.Usage data (including user ID and IP address)Service improvement
SentryFunctional Software, Inc.Error information (including user ID)Bug detection
RevenueCatRevenueCat, Inc.Billing information (including user ID)Subscription processing
StripeStripe, Inc.Billing informationWeb-based payment processing

Please refer to the official websites of each provider for their respective privacy policies.


Article 8 (Data Retention and Deletion)

Automatic Deletion

  • Chat images, videos, voice messages, and doodles are automatically deleted up to 14 days after being sent (text messages are retained for as long as the room exists)
  • Call audio and video are never recorded or stored. All that remains is the call history (caller, outcome, call duration)
  • Cards expire once they pass the expiration date set for each card
  • Rooms are deleted once all participants have left and the room is empty

Account Deletion

  • When a user deletes their account, the account immediately becomes unavailable, and user data such as authentication information, profile, AI illustration generation settings, and custom stamps is deleted within 30 days
  • However, the following may be retained even after account deletion, due to their impact on other users or for reasons of service operation:
    • Cards sent to other users (they remain in the recipient’s history)
    • Content posted to the Plaza
    • Generated AI illustrations (held by the operations team; illustrations published to the community illustrations gallery remain available to other users even after withdrawal)
  • Inquiry content is disassociated from the user (anonymized) upon account deletion and automatically deleted after 90 days

Suspension (BAN)

  • Accounts that violate the Terms of Service may be suspended
  • Data of suspended accounts is retained for up to 1 year before deletion

Operational Logs

For the purposes of service improvement, support handling, and investigation of misuse, we retain operational logs separately from the app’s database. Accounts, chats, and posts that are in active use are retained for as long as we provide the Service. Retention periods after deletion are as follows, by type.

Log typeRetention after deletion
Chat, Plaza, card, and account operation logs (including message content)Up to 1 year
Report recordsUp to 1 year
Invite linksUp to 90 days
Inquiry recordsUp to 90 days
Delivery history of notifications from the operations teamUp to 180 days
Image safety assessment resultsUp to 14 days
  • Retained data includes user IDs, but is used only for the purposes stated above
  • For information anonymized upon account withdrawal, the pre-anonymization records remaining in the operational logs are also deleted within 30 days
  • To the extent necessary to respond to requests based on laws and regulations (such as requests for disclosure of sender information or inquiries from investigative authorities), to investigate reported content, or to resolve disputes, data may be retained until those proceedings are concluded

Article 9 (User Rights)

Users may exercise the following rights. Please contact us through the inquiry feature.

  • Right of Access: The right to request disclosure of your data
  • Right to Erasure: The right to request deletion of your data (account deletion removes most of your data. As described in Article 8, some data—such as cards sent to other users, Plaza posts, and generated AI illustrations—may be retained)
  • Right to Rectification: The right to request correction of your data

Article 10 (Additional Provisions for EU Users — GDPR)

The following additionally applies to users located in the EU/EEA:

  • Legal Basis for Processing: Performance of a contract for service provision, and legitimate interests for the prevention of misuse
  • Data Portability: The right to request your data in a structured, machine-readable format
  • Right to Object: The right to object to processing based on legitimate interests
  • Right to Lodge a Complaint: The right to lodge a complaint with a data protection supervisory authority

Article 11 (Children’s Privacy)

This Service is intended for users aged 13 and over. We do not knowingly collect data from anyone under the age of 13. If we become aware that data from a person under 13 has been collected, we will promptly delete it. When entering a date of birth, a date that would make the user under 13 cannot be registered.


Article 12 (Changes to This Privacy Policy)

  • If we make changes to this policy, we will post the revised version on this page with an updated Last Updated date
  • When we make changes that affect users, such as the following, we will also notify users within the app
    • When we increase the types of data we collect
    • When we add or change the purposes of data use
    • When we extend data retention periods
    • When we newly provide data to third parties
  • For changes that do not alter how data itself is handled, such as wording corrections or clarifications, the update to this page serves as the notice
  • In the case of significant changes, we may request renewed consent

Article 13 (Contact Us)

For inquiries regarding the handling of personal information, please contact us at the following email address.

Email: support@beruk.co

Privacy Policy Terms of Service
© 2026 Beruk