Privacy Policy
Last Updated: 2026-09-05
Article 1 (Data We Collect)
Data Provided by Users
| Data | Purpose | Retention Period |
|---|---|---|
| Authentication information (Apple / Google account ID) | Login | Until account deletion |
| Nickname (display name) | Shown to chat partners and when sending or receiving cards | Until account deletion |
| Plaza display name | Shown as the author in the Plaza (visible to other users) | Until account deletion |
| Profile image / group icon | Display in profiles and chats | Until account deletion |
| Character appearance choice (gender) | Stamp artwork variants and how you are depicted in AI illustrations | Until account deletion |
| Birthday (month and day) | Showing your birthday to friends | Until account deletion |
| Year of birth (optional; never shown to other users) | Generating AI illustrations suited to your age group, and age-group analysis for service improvement | Until account deletion |
| Chat messages (text) | Service provision | Until the room is deleted |
| Chat images, videos, voice messages, and doodles | Service provision | Up to 14 days (auto-deleted) |
| Current location (precise coordinates, a display address, and a place name) — only when you send it | Sharing a place in a chat | Same as the message (until the room is deleted) |
| Call history (caller, outcome, call duration) | Showing the call history | Same as the message (until the room is deleted) |
| Cards (message content, recipients, etc.) | Sending and receiving cards | Retained in the recipient’s history (may remain even after account deletion) |
| AI illustration generation settings (input content) | Generation of AI illustrations | Until account deletion (deleted upon withdrawal) |
| Generated AI illustrations | Card creation and the community illustrations gallery | Held by the operations team. Illustrations published to the community illustrations gallery remain available to other users even after withdrawal |
| Custom stamp images | Use in chats | Until account deletion |
| Plaza posts and comments (text / images) | Provision of the Plaza feature (visible to other users) | Until deleted (may remain even after account deletion) |
| Inquiry content | Customer support | 90 days after account deletion (see below) |
| Report content (reason / supplementary text) | Investigation of misuse | 1 year after resolution |
Data Collected Automatically
| Data | Purpose | Retention Period |
|---|---|---|
| Device language | Push notification language | Until account deletion |
| Device identifier for push notifications | Sending push notifications | Until account deletion |
| App version / OS version | Bug investigation | Linked to inquiries |
| Usage data (including user ID and IP address) | Service improvement | Subject to the retention policies of third-party services in Article 7 |
| Error information (including user ID) | Bug detection and fixing | Subject to the retention policies of third-party services in Article 7 |
| Billing information (purchase and subscription status) | Provision of billing and subscriptions | Until account deletion |
| Image safety analysis results | Detection of inappropriate content | Deleted together with the image |
Article 2 (Purpose of Data Use)
We use the collected data only for the following purposes:
- Provision and maintenance of the Service (chat functionality, calls, sending and receiving cards, the Plaza, AI illustration generation, push notifications)
- Provision of billing and subscriptions
- Responding to inquiries
- Investigation and prevention of misuse (handling reports, determining violations of the Terms of Service)
- Service improvement and analysis (including analysis by age group)
- Compliance with applicable laws
Article 3 (About Calls)
- Call audio and video are exchanged directly between devices (peer-to-peer)
- When a direct connection is not possible, the media is relayed through a relay server (Cloudflare Realtime TURN). The relay only forwards the media and does not record or store its content
- We do not provide any call recording feature. We do not store the content of calls (when relaying is required, the audio and video pass through the relay server described above)
- After a call, all that remains in the chat is the caller, the outcome (answered / missed / declined, etc.), and the call duration
- The camera and microphone are used only during calls, while recording a voice message, and when taking a photo or video. We never record in the background
- On iOS, the system may show the call in the device’s Phone app history
Article 4 (About Location)
- Location is obtained only at the moment you tap “Send location” in a chat. We never track location in the background
- What is sent is the coordinates obtained by your device, a display address derived from them on your device (down to the area and street name, with building numbers stripped), and a place name
- The coordinates are precise. Even though the display address is shortened, the coordinates themselves can identify where you are. Please make sure the place is one you are willing to share with that person
- If your device is set to “approximate location”, coarser coordinates are sent (the message shows that this is the case)
- Location you send is shared only inside that chat (in a group chat, the members of that group can see it). It is never shared with other chats or third parties
- We never use location for advertising, tracking, or behavioral analysis
Article 5 (Processing by AI)
- Uploaded images are subject to automated safety assessment using machine learning. The assessment is performed on servers managed by us, and only the assessment results are stored
- Text sent in the Plaza, in comments, or in chats may be subject to automated assessment of inappropriate expressions by AI (OpenAI moderation)
- The AI illustration generation feature sends the entered prompt (text) to OpenAI in order to generate an image. Generated images pass through a filter designed to prevent inappropriate content
- When a report is filed, AI may be used for an initial assessment of whether the content violates the Terms of Service
- AI assessments are supplementary; final decisions on actions are made by the operations team
Article 6 (Data Access in Case of Reports)
For the purpose of investigating misuse, the operations team may access the content of a reported chat or Plaza post (text and images). Access is limited to the purpose of handling reports and will not be conducted for any other purpose.
Article 7 (External Transmission / Third-Party Services)
To the extent necessary for providing the Service, information is transmitted from the user’s device or our servers to the following third-party services:
| Service | Provider | Data Transmitted | Purpose |
|---|---|---|---|
| Firebase Authentication | Authentication information | User authentication | |
| Cloud Firestore | User data, chat (including location messages and call history), card, and Plaza data | Data storage | |
| Firebase Cloud Messaging | Device tokens | Push notifications | |
| Cloudflare R2 | Cloudflare, Inc. | Image, video, voice message, and doodle files | File storage and delivery |
| Cloudflare Realtime TURN | Cloudflare, Inc. | Call audio and video (only when the network requires relaying; relayed only, never stored) | Call relaying |
| OpenAI | OpenAI, L.L.C. | AI illustration generation input prompts, moderation-target text | AI illustration generation, text safety assessment |
| Mixpanel | Mixpanel, Inc. | Usage data (including user ID and IP address) | Service improvement |
| Sentry | Functional Software, Inc. | Error information (including user ID) | Bug detection |
| RevenueCat | RevenueCat, Inc. | Billing information (including user ID) | Subscription processing |
| Stripe | Stripe, Inc. | Billing information | Web-based payment processing |
Please refer to the official websites of each provider for their respective privacy policies.
Article 8 (Data Retention and Deletion)
Automatic Deletion
- Chat images, videos, voice messages, and doodles are automatically deleted up to 14 days after being sent (text messages are retained for as long as the room exists)
- Call audio and video are never recorded or stored. All that remains is the call history (caller, outcome, call duration)
- Cards expire once they pass the expiration date set for each card
- Rooms are deleted once all participants have left and the room is empty
Account Deletion
- When a user deletes their account, the account immediately becomes unavailable, and user data such as authentication information, profile, AI illustration generation settings, and custom stamps is deleted within 30 days
- However, the following may be retained even after account deletion, due to their impact on other users or for reasons of service operation:
- Cards sent to other users (they remain in the recipient’s history)
- Content posted to the Plaza
- Generated AI illustrations (held by the operations team; illustrations published to the community illustrations gallery remain available to other users even after withdrawal)
- Inquiry content is disassociated from the user (anonymized) upon account deletion and automatically deleted after 90 days
Suspension (BAN)
- Accounts that violate the Terms of Service may be suspended
- Data of suspended accounts is retained for up to 1 year before deletion
Operational Logs
For the purposes of service improvement, support handling, and investigation of misuse, we retain operational logs separately from the app’s database. Accounts, chats, and posts that are in active use are retained for as long as we provide the Service. Retention periods after deletion are as follows, by type.
| Log type | Retention after deletion |
|---|---|
| Chat, Plaza, card, and account operation logs (including message content) | Up to 1 year |
| Report records | Up to 1 year |
| Invite links | Up to 90 days |
| Inquiry records | Up to 90 days |
| Delivery history of notifications from the operations team | Up to 180 days |
| Image safety assessment results | Up to 14 days |
- Retained data includes user IDs, but is used only for the purposes stated above
- For information anonymized upon account withdrawal, the pre-anonymization records remaining in the operational logs are also deleted within 30 days
- To the extent necessary to respond to requests based on laws and regulations (such as requests for disclosure of sender information or inquiries from investigative authorities), to investigate reported content, or to resolve disputes, data may be retained until those proceedings are concluded
Article 9 (User Rights)
Users may exercise the following rights. Please contact us through the inquiry feature.
- Right of Access: The right to request disclosure of your data
- Right to Erasure: The right to request deletion of your data (account deletion removes most of your data. As described in Article 8, some data—such as cards sent to other users, Plaza posts, and generated AI illustrations—may be retained)
- Right to Rectification: The right to request correction of your data
Article 10 (Additional Provisions for EU Users — GDPR)
The following additionally applies to users located in the EU/EEA:
- Legal Basis for Processing: Performance of a contract for service provision, and legitimate interests for the prevention of misuse
- Data Portability: The right to request your data in a structured, machine-readable format
- Right to Object: The right to object to processing based on legitimate interests
- Right to Lodge a Complaint: The right to lodge a complaint with a data protection supervisory authority
Article 11 (Children’s Privacy)
This Service is intended for users aged 13 and over. We do not knowingly collect data from anyone under the age of 13. If we become aware that data from a person under 13 has been collected, we will promptly delete it. When entering a date of birth, a date that would make the user under 13 cannot be registered.
Article 12 (Changes to This Privacy Policy)
- If we make changes to this policy, we will post the revised version on this page with an updated Last Updated date
- When we make changes that affect users, such as the following, we will also notify users within the app
- When we increase the types of data we collect
- When we add or change the purposes of data use
- When we extend data retention periods
- When we newly provide data to third parties
- For changes that do not alter how data itself is handled, such as wording corrections or clarifications, the update to this page serves as the notice
- In the case of significant changes, we may request renewed consent
Article 13 (Contact Us)
For inquiries regarding the handling of personal information, please contact us at the following email address.
Email: support@beruk.co