Privacy Policy
Last Updated: 2026-09-05
Article 1 (Data We Collect)
Data Provided by Users
| Data | Purpose | Retention Period |
|---|---|---|
| Authentication information (Apple / Google account ID) | Login | Until account deletion |
| Display name | Shown to chat partners | Until account deletion |
| Chat messages (text) | Service provision | Up to 28 days (auto-deleted; for operational logs after deletion, see Article 6) |
| Chat images | Service provision | Up to 28 days (auto-deleted) |
| Inquiry content | Customer support | 90 days after account deletion (see below) |
| Report content (reason / supplementary text) | Investigation of misuse | 1 year after resolution |
Data Collected Automatically
| Data | Purpose | Retention Period |
|---|---|---|
| Device language | Push notification language | Until account deletion |
| Device identifier for push notifications | Sending push notifications | Until account deletion |
| App version / OS version | Bug investigation | Linked to inquiries |
| Usage data (including user ID and IP address) | Service improvement | Subject to the retention policies of third-party services in Article 5 |
| Error information (including user ID) | Bug detection and fixing | Subject to the retention policies of third-party services in Article 5 |
| Image safety analysis results | Detection of inappropriate content | Up to 28 days (deleted with the message) |
Article 2 (Purpose of Data Use)
We use the collected data only for the following purposes:
- Provision and maintenance of the Service (chat functionality, push notifications)
- Responding to inquiries
- Investigation and prevention of misuse (handling reports, determining violations of the Terms of Service)
- Service improvement and analysis
- Compliance with applicable laws
Article 3 (Processing by AI)
- Uploaded images are subject to automated safety assessment using machine learning
- When a report is filed, AI may be used for an initial assessment of whether the content violates the Terms of Service
- AI assessments are supplementary; final decisions on actions are made by the operations team
Article 4 (Data Access in Case of Reports)
For the purpose of investigating misuse, the operations team may access the conversation content (text and images) of a reported room. Access is limited to the purpose of handling reports and will not be conducted for any other purpose.
Article 5 (External Transmission / Third-Party Services)
To the extent necessary for providing the Service, information is transmitted from the user’s device to the following third-party services:
| Service | Provider | Data Transmitted | Purpose |
|---|---|---|---|
| Firebase Authentication | Authentication information | User authentication | |
| Cloud Firestore | User data, chat data | Data storage | |
| Cloud Vision API | Image files | Image safety assessment | |
| Firebase Cloud Messaging | Device tokens | Push notifications | |
| Mixpanel | Mixpanel, Inc. | Usage data (including user ID and IP address) | Service improvement |
| Sentry | Functional Software, Inc. | Error information (including user ID) | Bug detection |
| RevenueCat | RevenueCat, Inc. | Billing information (including user ID) | Subscription and donation processing |
Please refer to the official websites of each provider for their respective privacy policies.
Article 6 (Data Retention and Deletion)
Automatic Deletion
- Chat room data (messages and images) is automatically deleted up to 28 days after the room is created
Account Deletion
- When a user deletes their account, all user data is deleted immediately
- Authentication information is also deleted at the same time
- Inquiry data is anonymized (disassociated from the user) upon account deletion and automatically deleted after 90 days
Suspension (BAN)
- Accounts that violate the Terms of Service may be suspended
- Data of suspended accounts is retained for up to 1 year before deletion
Operational Logs
For the purposes of service improvement, customer support, and investigation of misuse, we retain operational logs separately from the app’s database. Accounts in active use are retained for as long as we provide the Service. Retention periods after deletion are as follows, by category.
| Log Type | Retention Period After Deletion |
|---|---|
| Room and account operation logs (including message content) | Up to 1 year |
| Report records | Up to 1 year |
| Inquiry records | Up to 90 days |
| Delivery history of notifications from the operations team | Up to 180 days |
| Image safety analysis results | Up to 28 days |
- Retained data includes user IDs and message content, but is used only for the purposes stated above
- For information anonymized upon account deletion, the pre-anonymization records remaining in the operational logs are also deleted within 30 days
- We may retain data until the relevant procedure is concluded, to the extent necessary to respond to legally based requests (such as requests for disclosure of sender information or inquiries from investigative authorities), to investigate reported content, or to resolve disputes
Article 7 (User Rights)
Users may exercise the following rights. Please contact us through the inquiry feature.
- Right of Access: The right to request disclosure of your data
- Right to Erasure: The right to request deletion of your data (user data is deleted immediately upon account deletion; as stated in Article 6, inquiry content and operational logs are retained for defined periods)
- Right to Rectification: The right to request correction of your data
Article 8 (Additional Provisions for EU Users — GDPR)
The following additionally applies to users located in the EU/EEA:
- Legal Basis for Processing: Performance of a contract for service provision, and legitimate interests for the prevention of misuse
- Data Portability: The right to request your data in a structured, machine-readable format
- Right to Object: The right to object to processing based on legitimate interests
- Right to Lodge a Complaint: The right to lodge a complaint with a data protection supervisory authority
Article 9 (Children’s Privacy)
This Service is intended for users aged 13 and over. We do not knowingly collect data from anyone under the age of 13. If we become aware that data from a person under 13 has been collected, we will promptly delete it.
Article 10 (Changes to This Privacy Policy)
- If we make changes to this policy, we will post the revised version on this page with an updated Last Updated date
- When we make changes that affect users, such as the following, we will also notify users within the app
- When we increase the types of data we collect
- When we add or change the purposes of data use
- When we extend data retention periods
- When we newly provide data to third parties
- For changes that do not alter how data itself is handled, such as wording corrections or clarifications, the update to this page serves as the notice
- In the case of significant changes, we may request renewed consent
Article 11 (Contact Us)
For inquiries regarding the handling of personal information, please contact us at the following email address.
Email: support@beruk.co