PRIVACY POLICY
Update Date: 2 août 2021
Welcome to BeReal!
We are committed to protecting the privacy of the personal information you provide to us when using BeReal and we value your privacy. That's why we have created this document (the “Privacy Policy”). It applies to all Users of the Platform.
We invite you to carefully read our Privacy Policy and to contact us for any question about the collection and processing of your Personal Data at the following e-mail address: [email protected].
Please note that the Privacy Policy is an integral part of the General Terms of Use and that the definitions set forth therein are applicable to this document.
1. Scope and Application
The Privacy Policy details the Personal Data collected and processed when using our Application, the purposes for which Users' Personal Data is processed, how BeReal uses it, and the features offered to allow Users to access and update their Personal Data.
Personal Data is defined as any information relating to a natural person who can be identified, directly or indirectly. It is for example: the name, first name, email and postal address of a physical person, his image on a photograph or a video, an IP address, a location data, etc.
2. Acceptance and Modification of Our Privacy Policy
By accepting the Terms of Use, you confirm that you have read and accept without limitation or qualification this Privacy Policy, which forms an integral part of the ToU. In case of disagreement with one or more of its conditions, the User is free not to use or no longer to use our services (especially in case of modification of the terms of the Privacy Policy).
This Privacy Policy may change from time to time, but any reduction in your rights will not be enforced without your consent. BeReal will post new versions of the Privacy Policy on the Application and at https://bere.al/fr/privacy and will alert Users by means of a pop-up window that will appear upon opening the Application.
In general, the Privacy Policy is always easily accessible at https://bere.al/fr/privacy or from your User Account settings.
3. Identification of the Data Controller
The processing of your Personal Data is subject to French law, including Law No. 78-17 of January 6, 1978 relating to computers, files and freedoms, as amended (known as the Data Protection Act) as well as the EU Regulation 2016/679 of April 27, 2016, known as the General Data Protection Regulation (GDPR).
According to the regulations in force, BeReal is the Controller of the processing of your Personal Data.
In this capacity, BeReal undertakes to comply with the legal provisions in force and to carry out a lawful, fair and transparent processing of Personal Data of Users. BeReal also guarantees to the Users that this processing is in accordance with the explicit and legitimate purposes determined in the Privacy Policy. The duration of processing does not exceed the time necessary for the purposes for which the Personal Data are collected and processed.
4. Categories of Personal Data Processed When Using the Application
a) Which Personal Data Are Processed?
In order to provide access to the Platform to its Services, BeReal may collect several categories of Personal Data about you, for different purposes, legal bases for processing and different retention periods. We offer a summary of all this information in the table below.
If you wish to know more about the Data collected and the purposes of processing you can also read the details below the following table.
Purpose of the Processing | Personal Data Processed | Legal Ground for the Processing | Retention Period |
Account creation and User identification - Account management | Mandatory profile data (Name, date of birth, phone number, password) | Performance of the contract between You and BeReal | Duration of the use of the services increased by 3 years after the last connection to the service or until the request for removal |
Optional profile data (biography, email address) | Consent | Duration of the use of the services increased by 3 years after the last connection to the service or until the withdrawal of consent | |
Purchase of paid features | Transaction Data submitted by the Store | Performance of the contract between You and BeReal | Duration necessary for the execution of the transaction increased by the legal retention period for accounting purposes |
Proper functioning of the Platform and its Services | Data related to your activity on BeReal, Communications with BeReal, Data related to devices and equipment used | Legitimate interests of the Data Controller | 2 years from collection date |
Data sent by your phone's camera and photos stored on your phone, Geolocation Data | Consent | Duration of the use of the services increased by 3 years after the last connection or until the withdrawal of consent | |
Administrative management of the Platform, complaints and reports from Users, Moderation of content in accordance with our ToU | Content Data, Communications with BeReal | Legitimate interests of the Data Controller | Duration of the use of the services + applicable statutory limitation |
Moderation of content in accordance with the law (prevention of illegal activities, fraud, cyber harassment, ...) | Content Data, Data about your activity on BeReal | Compliance with our legal obligations | 1 year from collection for metadata 5 years (statutory limitation) for data retained for dispute prevention purposes |
Connection with other Users | Contact data from your smartphone | Consent | Duration of use of services or until withdrawal of consent |
Geolocation |
BeReal collects two different types of Data:
Profile Data: This is the Data that you are required to enter when you sign in: your phone number, first or last name, date of birth, username, and password.
You can also fill in optional Data: your biography, email address, profile picture.
Communications with BeReal : When you report a problem with the Platform (inappropriate content, bugs, errors), respond to a survey about the quality of our Services, request assistance, or make a request to exercise your rights, we record the information you agree to share with us or that we need to respond to your request.
Data related to your activity on BeReal: this notably includes:
Content Data: We collect content that you create through our Services such as photos, RealMojis and comments. Note that Users who view your Content can always take a copy or screenshot of it. Therefore, we strongly recommend that you do not post or send to a friend any Content that you do not want to share.
Geolocation Data: For each photo, the Platform offers you the possibility to share, with your friends, your exact location or, when the photo is published publicly, an approximate location. We also offer you to locate your friends precisely on a map in relation to your position. Use of the Service requires your consent to the collection of Geolocation Data.
If you do not want BeReal to collect your Geolocation Data, you may refuse to give the Platform permission to access your location when you first open the application. If you wish to withdraw your consent after accepting such processing, you must change the permissions given to the application in the system settings of your phone.
Phonebook Data: With your consent, BeReal may access your phone book to identify your contacts already registered on BeReal or so that you can invite your friends to register on the Platform. We never access your contact list without your permission.
Device and Equipment Data: We collect information about and from the devices and equipment you use to access BeReal. This includes your IP address, device type, application crashes, operating system version, language used.
Cameras and Photos: Most of our Services require that you allow us to collect Data from your phone's camera and photo library (i.e. send and upload photos). If you refuse to allow us access to your camera or photo library, you may receive photos from and contact other Users, but you will not be able to take, upload and share your own photos.
We process the above-described Data in accordance with the requirements of the GDPR for various purposes on the bases of:
b) Cookies
A “cookie” (or “tracker”) is a connection indicator that designates a text file that may be recorded in a dedicated space on the hard disk of your terminal (computer, tablet, or smartphone), when you consult a service available online. A cookie allows its issuer to identify the terminal in which it is stored, during the period of validity or storage of the cookie. The cookie does not identify the User as such; it is used to record your browsing information on the Platform.
When you connect to the Platform, information relating to your browsing is likely to be recorded in “Cookies” files installed on your terminal, according to the choices you may have expressed concerning cookies and which can be modified at any time. These cookies allow personalized navigation and are also used for analytical purposes (audience measurement).
The existence of cookies and their purpose(s) will be indicated to you when you connect to the Platform, by the presence of an information banner placed at the bottom or top of the home page.
The deposit and reading of cookies on your terminal generally requires your prior consent, which, if applicable, is obtained by clicking on “I accept”. The consent given for the use of cookies is valid for 13 months. After this period we will ask you to renew your agreement.
In case of refusal of cookies, objection to those stored by default, or deletion of the cookies, the User is informed that he can no longer benefit from a number of features that are nevertheless necessary to navigate in some areas of the Platform. Where appropriate, BeReal disclaims any responsibility for the consequences related to the degraded operation of its Services resulting from the inability of BeReal to record or view the cookies necessary for the proper functioning of the Platform and that you have refused or deleted.
Finally, it is important to distinguish the cookies issued on the Platform from those issued by third parties. In this respect, we inform you that cookies may be placed from time to time on certain pages of the Platform by third parties (advertisers or others). Please be aware that BeReal has no control over the use of cookies by third parties.
BeReal uses the following cookies and trackers:
5. Conditions of use of Personal Data
Any use of Personal Data for purposes other than those set out above in our Privacy Policy will require the prior express consent of the User.
BeReal undertakes to keep the Personal Data of the Users only for as long as is strictly necessary for the declared processing of the data for the above-mentioned purposes or for the exercise and establishment of its legal rights, and in any case within the limits imposed by the law.
BeReal undertakes to delete the Personal Data from its databases at the end of these various periods. In case of request for deletion of your account, it will be effective within 30 (thirty) days. All of our backups are automatically deleted after 90 (ninety) days.
However, BeReal may retain certain information for a period of time after the closure of the User's personal account in order to meet legal, accounting and tax obligations and, in particular, to prevent possible unlawful behavior after the deletion of a User Account (reuse of an old account by a third party). In this case, the Personal Data will be deactivated and will no longer be accessible online.
6. Sharing of Information with Third Parties
a) No disclosure of Personal Information to third parties
With the exception of Content that you have licensed to us in accordance with the Terms of Use, BeReal will not disclose to third parties any information or Personal Data provided by Users. This information and Personal Data is used exclusively by BeReal's internal services and will not be transferred or sold to third parties without your prior express consent.
b) Communication of Personal Data for external processing purposes
Your information and Personal Data may, where appropriate, be transmitted to third party contractors involved in the provision of the Services (technical and hosting providers, sending notifications, publishing and sharing content, user tracking and satisfaction surveys, management of security incidents or fraudulent activity, etc.).
BeReal undertakes to communicate Users' Personal Data only to authorized and trusted service providers, who process it on our behalf, according to our instructions, in accordance with this Privacy Policy and in compliance with any other appropriate security and confidentiality measures.
c) Disclosure of Personal Data outside the European Union
Processing Personal Data as described in the Privacy Policy may involve transferring your Data to one or more other countries, inside or outside the European Economic Area, including the United States.
Where applicable, we use standard contractual clauses and/or other mechanisms approved by the European Commission to maintain a level of protection for your Personal Data equivalent to that guaranteed by the GDPR.
d) Disclosure for Legal and Statutory Purposes
Information and Personal Data may also be disclosed to a third party if BeReal is required to do so by law, regulation, or court order, or if such disclosure is necessary for the purposes of an investigation, court order or legal proceeding, either domestically or abroad.
In addition, BeReal may share information and Personal Data with third party companies, consultants or individuals in order to:
7. Security of Personal Data
We implement technical and organizational measures, such as encryption of Data or restriction of access to authorized personnel, to ensure that your Personal Data is processed securely in accordance with the Privacy Policy. However, the transmission of information via the Internet involves irreducible risks that do not allow us to guarantee perfect security of the information transmitted via the Platform. Consequently, any transmission of Personal Data is made at your own risk.
8. Respect of the rights of the Platform Users
You have certain rights regarding your Personal Data, as follows:
Before we can respond to a request to exercise one or more of your rights, we may ask you to confirm some of your Account information to verify your identity. In case of reasonable doubt, we may ask you for identification.
9. Information Regarding Children
BeReal is not intended for children under the age of 13. If you believe that we have Personal Information about a child or that it has been collected from a child under the required age, you may report your concerns to us by reporting the content or the User Account.
10. Information About Users Located In the USA
This clause is only valid and legally binding if you are a party to the BeReal Terms of Service. This clause regarding U.S. users, including California and Virginia residents, applies to Personal Information (as defined in applicable regulations) provided to BeReal by the User.
In light of the California Consumer Privacy Protection Act of 2018 (“CCPA”), we are providing this information to you as a service provider required to process your Personal Information (as defined in the applicable law), to confirm that we have adequate contractual terms in place. The term “applicable law” refers to all laws, regulations, standards, regulatory guidance and self-regulatory guidelines that may apply in relation to the management of your Data. Applicable laws include, but are not limited to, the California Consumer Privacy Protection Act (Cal. Civ. Code §1798.100 - 1798.199), or the Virginia Consumer Data Protection Act (SB 1392).
As a service provider, we will collect, hold, use, disclose and process your personal information only to fulfill our obligations to you under our agreement, for operational purposes previously stated in this Policy, to the exclusion of any other purpose.
We will not sell your personal information or disclose your personal information for commercial purposes.
We certify that we understand and comply with the restrictions and obligations set forth in Cal. Civ. Code § 1798.140(w)(2) as well as Va. SB 1392. In the event of any inconsistency or conflict between the terms and conditions of this clause and the TOS or Privacy Policy, the TOS or Privacy Policy shall govern with respect to Data of individuals in the European Economic Area.
If you have any questions about the CCPA or other U.S. regulations at BeReal or to exercise your rights under them, you may contact us as set forth in Section 11.
11. Contact
You can exercise these rights at any time in one of two ways:
BeReal undertakes to respond to your requests concerning the Privacy Policy or the exercise of your rights, as soon as possible and no later than the time limit set forth by applicable legislation.