Política de Privacidad

The controller responsible for your personal data is Armin Bazarchi, an individual based in Spain, reachable at privacy@beboos.app. Beboos is not a registered company.

For any privacy question, to exercise your rights, or to appeal a moderation decision, contact us at privacy@beboos.app. We aim to respond within 30 days, as required by the GDPR.

We have not appointed a Data Protection Officer. We are not required to, and if that changes we will name one here.

Account: your phone number (used to verify your identity via SMS) and, if you sign in with Google, Facebook or Apple, the basic profile information that service shares with your consent. If you use Sign in with Apple and choose to hide your email, we receive only Apple’s private relay address.

Profile: your name, date of birth, gender, who you want to meet, relationship goal, bio, interests, and the photos you upload. We store your full date of birth so we can verify you are 18 or over; other users are shown only your age, never your birthday.

Selfie verification: when you verify your account you take a real-time selfie. This is biometric data, processed ONLY to confirm you match your profile photos and that a live person is present. The image is deleted immediately after the check, on both pass and fail. We do not create or keep a face template, and we do not reuse the image for anything else.

Imported social content: if you choose to share Instagram or Facebook screenshots to improve your matches, our AI reads them to understand your interests. They are deleted after analysis. This is entirely optional — the app works without it.

Messages and activity: the messages you send, connection requests, who you block, and reports you file.

Location: with your permission, we collect and store your precise coordinates (latitude and longitude) together with a geohash, so we can rank introductions by how near someone is. Other users are never shown your coordinates — only an approximate distance in kilometres. You can refuse or withdraw this permission in your device settings; matching then falls back to the other signals.

Push notification tokens: if you enable notifications, we store a token for each device you use, so we can deliver alerts about messages and connection requests. Turning notifications off in the app removes the token.

Device and usage data: basic technical information needed to operate the service, keep it secure, and prevent fraud and abuse.

We do not use analytics services, advertising identifiers, tracking pixels or third-party cookies, in the app or on the website.

Interest profile: our AI reads your bio, photos, stated interests and any social screenshots you share, and writes a profile of your inferred interests, lifestyle, personality traits and overall aesthetic, plus a short written summary. You can see this in the app under "What our AI sees in you". It is stored on your account and kept for as long as your account exists.

Matching vector: we also store a numeric representation of your profile, used to compute compatibility. It is not visible to you or to other users, and is kept for as long as your account exists.

Because this profile is written freely by an AI from your own photos and words, it may occasionally reflect characteristics we never asked you for. We do not target or filter on such characteristics, and you can ask us to delete the inferred profile at any time by contacting privacy@beboos.app.

To provide the service — creating your account and profile, matching you, and enabling chat. Legal basis: performance of our contract with you (GDPR Article 6(1)(b)).

Selfie verification. Because this involves biometric data used to identify you, we rely on your explicit consent (Article 9(2)(a)) in addition to our contract with you. Verification is required to use Beboos: if you do not wish to provide it, do not complete signup, and you may delete your account at any time.

Your gender and who you want to meet. This combination can reveal sexual orientation, so we treat it as special-category data and rely on your explicit consent (Article 9(2)(a)), given when you complete those onboarding steps. It is used only to match you.

Location and push notifications. Legal basis: your consent (Article 6(1)(a)), given through the operating system permission prompt and the in-app notification setting. You can withdraw either at any time.

Optional social screenshot import. Legal basis: your consent (Article 6(1)(a)), given when you choose to upload.

Safety, moderation, fraud prevention and security — verifying accounts, acting on reports, detecting objectionable content, and protecting users. Legal basis: our legitimate interests in keeping the community safe and the service secure (Article 6(1)(f)), and the legitimate interests of the users we protect.

Complying with the law and responding to lawful requests. Legal basis: legal obligation (Article 6(1)(c)).

We do not sell your personal data, and we do not use it for third-party advertising.

Beboos uses Google’s Gemini AI to analyse the content you share (bio, photos, imported social screenshots), to verify your selfie, and to write the introduction text you see. Introduction text shown to you is generated by AI.

Automated ranking: the person you are introduced to each day is chosen automatically, with no human involved. We consider this a recommendation rather than a decision with legal or similarly significant effects, but we tell you about it so you know how the app works. You can contact us at privacy@beboos.app with questions about how you are ranked.

Automated suspension: if three different users report you within seven days, or if our content check finds your profile breaches our rules, your account is automatically suspended and you lose access to the app pending review. This is an automated decision that significantly affects you, so you have the right to a human review. Email privacy@beboos.app to contest it: a person will look at your case, you can put your side, and we will tell you the outcome. Suspension is a hold pending that review, not a permanent judgement.

With other users: your photos, first name, age, bio, interests, shared interests, the AI introduction text, and an approximate distance. Other users never receive your coordinates, your contact details, your full date of birth or your matching vector. Messages are shared with the person you are chatting with.

Our staff: a small number of authorised administrators can view user records and the reports filed about them, and can suspend, reinstate or verify accounts. Access is limited to an explicit allowlist and used only for safety and support.

Service providers, who process data on our behalf: Google Firebase (authentication, database, file storage, cloud functions, push notifications), Google Gemini (AI analysis), and Vercel (website hosting). We will update this list if it changes.

Legal and safety: we may disclose information where the law requires it, or to protect the rights, safety and security of our users, the public, or Beboos.

Chat messages are stored in ordinary form on our servers and are not end-to-end encrypted. They can be accessed by us where necessary for safety, moderation or legal reasons. Please bear that in mind when deciding what to share.

Your account data, photos and messages are stored in the European Union (Google Cloud region europe-west1, Belgium).

Content sent for AI analysis — your bio, photos, imported screenshots and verification selfie — is processed through the Google Gemini API, which is not pinned to an EU region and may process data outside the European Economic Area. For those transfers we rely on the European Commission’s Standard Contractual Clauses, incorporated into our data processing agreement with Google.

You can ask us for more detail about these safeguards at privacy@beboos.app.

Verification selfies: deleted immediately after the check, on both pass and fail.

Imported social screenshots: deleted immediately after analysis.

Your profile, photos, messages, inferred interest profile and matching vector: kept while your account is active, and deleted when you delete your account.

Reports: kept for 24 months after the report is resolved, so we can recognise repeat behaviour and defend moderation decisions. A report is kept even if the person who filed it, or the person it names, later deletes their account.

Inactive accounts: if you do not use Beboos for 24 months we will contact you and then delete the account.

Backups: deleted data can persist in encrypted backups for up to 30 days before those backups are overwritten.

You can delete your account at any time in the app, under Profile → Settings → Delete Account. This is immediate and cannot be undone.

Deleting removes your profile, your photos, your inferred interest profile and matching vector, your conversations, and your sign-in identity.

Please note one consequence: deleting your account also deletes the conversations you were part of, which means the other person loses their copy of those messages too.

Reports are not deleted — see section 9.

Under the GDPR you have the right to access your data, correct it, delete it, receive a portable copy, object to or restrict certain processing, and withdraw any consent you have given. Withdrawing consent does not affect processing already carried out.

Where a decision about you was made automatically, you have the right to a human review — see section 6.

You can do much of this yourself in the app: edit your profile, change permissions, turn notifications off, delete your account. For anything else, contact privacy@beboos.app.

If you are unhappy with how we handle your data you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority where you live. We would appreciate the chance to address it first.

We protect your data with server-enforced access rules, encryption in transit, restricted administrative access, and app attestation to confirm requests come from the genuine Beboos app. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit who can reach it.

Beboos is strictly for people aged 18 and over. We ask for your date of birth at signup and block anyone under 18. We do not knowingly collect data from minors, and we delete any account we find belongs to one. If you believe a minor is using Beboos, tell us at privacy@beboos.app.

The beboos.app website is a marketing site that also hosts this policy and our Terms. It sets no cookies beyond what is strictly necessary to serve the pages, and runs no analytics or tracking.

If you join the waiting list, we collect your email address and your language preference so we can tell you when Beboos launches. Legal basis: your consent (Article 6(1)(a)). We keep it until launch or until you ask us to remove it, whichever comes first, and we do not use it for anything else. Email privacy@beboos.app to be removed.

We may update this policy. The effective date and last-updated date appear at the top. If a change materially affects your rights we will tell you in the app before it takes effect.

Questions? Contact us at privacy@beboos.app.