Update Date: 2 août 2021
Welcome to BeReal!
1. Scope and Application
Personal Data is defined as any information relating to a natural person who can be identified, directly or indirectly. It is for example: the name, first name, email and postal address of a physical person, his image on a photograph or a video, an IP address, a location data, etc.
3. Identification of the Data Controller
The processing of your Personal Data is subject to French law, including Law No. 78-17 of January 6, 1978 relating to computers, files and freedoms, as amended (known as the Data Protection Act) as well as the EU Regulation 2016/679 of April 27, 2016, known as the General Data Protection Regulation (GDPR).
According to the regulations in force, BeReal is the Controller of the processing of your Personal Data.
4. Categories of Personal Data Processed When Using the Application
a) Which Personal Data Are Processed?
In order to provide access to the Platform to its Services, BeReal may collect several categories of Personal Data about you, for different purposes, legal bases for processing and different retention periods. We offer a summary of all this information in the table below.
If you wish to know more about the Data collected and the purposes of processing you can also read the details below the following table.
Purpose of the Processing
Personal Data Processed
Legal Ground for the Processing
Account creation and User identification - Account management
Mandatory profile data (Name, date of birth, phone number, password)
Performance of the contract between You and BeReal
Duration of the use of the services increased by 3 years after the last connection to the service or until the request for removal
Optional profile data (biography, email address)
Duration of the use of the services increased by 3 years after the last connection to the service or until the withdrawal of consent
Purchase of paid features
Transaction Data submitted by the Store
Performance of the contract between You and BeReal
Duration necessary for the execution of the transaction increased by the legal retention period for accounting purposes
Proper functioning of the Platform and its Services
Data related to your activity on BeReal, Communications with BeReal, Data related to devices and equipment used
Legitimate interests of the Data Controller
2 years from collection date
Data sent by your phone's camera and photos stored on your phone, Geolocation Data
Duration of the use of the services increased by 3 years after the last connection or until the withdrawal of consent
Administrative management of the Platform, complaints and reports from Users, Moderation of content in accordance with our ToU
Content Data, Communications with BeReal
Legitimate interests of the Data Controller
Duration of the use of the services + applicable statutory limitation
Moderation of content in accordance with the law (prevention of illegal activities, fraud, cyber harassment, ...)
Content Data, Data about your activity on BeReal
Compliance with our legal obligations
1 year from collection for metadata
5 years (statutory limitation) for data retained for dispute prevention purposes
Connection with other Users
Contact data from your smartphone
Duration of use of services or until withdrawal of consent
BeReal collects two different types of Data:
Profile Data: This is the Data that you are required to enter when you sign in: your phone number, first or last name, date of birth, username, and password.
You can also fill in optional Data: your biography, email address, profile picture.
Communications with BeReal : When you report a problem with the Platform (inappropriate content, bugs, errors), respond to a survey about the quality of our Services, request assistance, or make a request to exercise your rights, we record the information you agree to share with us or that we need to respond to your request.
Data related to your activity on BeReal: this notably includes:
Content Data: We collect content that you create through our Services such as photos, RealMojis and comments. Note that Users who view your Content can always take a copy or screenshot of it. Therefore, we strongly recommend that you do not post or send to a friend any Content that you do not want to share.
Geolocation Data: For each photo, the Platform offers you the possibility to share, with your friends, your exact location or, when the photo is published publicly, an approximate location. We also offer you to locate your friends precisely on a map in relation to your position. Use of the Service requires your consent to the collection of Geolocation Data.
If you do not want BeReal to collect your Geolocation Data, you may refuse to give the Platform permission to access your location when you first open the application. If you wish to withdraw your consent after accepting such processing, you must change the permissions given to the application in the system settings of your phone.
Phonebook Data: With your consent, BeReal may access your phone book to identify your contacts already registered on BeReal or so that you can invite your friends to register on the Platform. We never access your contact list without your permission.
Device and Equipment Data: We collect information about and from the devices and equipment you use to access BeReal. This includes your IP address, device type, application crashes, operating system version, language used.
Cameras and Photos: Most of our Services require that you allow us to collect Data from your phone's camera and photo library (i.e. send and upload photos). If you refuse to allow us access to your camera or photo library, you may receive photos from and contact other Users, but you will not be able to take, upload and share your own photos.
We process the above-described Data in accordance with the requirements of the GDPR for various purposes on the bases of:
A “cookie” (or “tracker”) is a connection indicator that designates a text file that may be recorded in a dedicated space on the hard disk of your terminal (computer, tablet, or smartphone), when you consult a service available online. A cookie allows its issuer to identify the terminal in which it is stored, during the period of validity or storage of the cookie. The cookie does not identify the User as such; it is used to record your browsing information on the Platform.
When you connect to the Platform, information relating to your browsing is likely to be recorded in “Cookies” files installed on your terminal, according to the choices you may have expressed concerning cookies and which can be modified at any time. These cookies allow personalized navigation and are also used for analytical purposes (audience measurement).
The existence of cookies and their purpose(s) will be indicated to you when you connect to the Platform, by the presence of an information banner placed at the bottom or top of the home page.
In case of refusal of cookies, objection to those stored by default, or deletion of the cookies, the User is informed that he can no longer benefit from a number of features that are nevertheless necessary to navigate in some areas of the Platform. Where appropriate, BeReal disclaims any responsibility for the consequences related to the degraded operation of its Services resulting from the inability of BeReal to record or view the cookies necessary for the proper functioning of the Platform and that you have refused or deleted.
BeReal uses the following cookies and trackers:
5. Conditions of use of Personal Data
BeReal undertakes to keep the Personal Data of the Users only for as long as is strictly necessary for the declared processing of the data for the above-mentioned purposes or for the exercise and establishment of its legal rights, and in any case within the limits imposed by the law.
BeReal undertakes to delete the Personal Data from its databases at the end of these various periods. In case of request for deletion of your account, it will be effective within 30 (thirty) days. All of our backups are automatically deleted after 90 (ninety) days.
However, BeReal may retain certain information for a period of time after the closure of the User's personal account in order to meet legal, accounting and tax obligations and, in particular, to prevent possible unlawful behavior after the deletion of a User Account (reuse of an old account by a third party). In this case, the Personal Data will be deactivated and will no longer be accessible online.
6. Sharing of Information with Third Parties
a) No disclosure of Personal Information to third parties
b) Communication of Personal Data for external processing purposes
Your information and Personal Data may, where appropriate, be transmitted to third party contractors involved in the provision of the Services (technical and hosting providers, sending notifications, publishing and sharing content, user tracking and satisfaction surveys, management of security incidents or fraudulent activity, etc.).
c) Disclosure of Personal Data outside the European Union
Where applicable, we use standard contractual clauses and/or other mechanisms approved by the European Commission to maintain a level of protection for your Personal Data equivalent to that guaranteed by the GDPR.
d) Disclosure for Legal and Statutory Purposes
Information and Personal Data may also be disclosed to a third party if BeReal is required to do so by law, regulation, or court order, or if such disclosure is necessary for the purposes of an investigation, court order or legal proceeding, either domestically or abroad.
In addition, BeReal may share information and Personal Data with third party companies, consultants or individuals in order to:
7. Security of Personal Data
8. Respect of the rights of the Platform Users
You have certain rights regarding your Personal Data, as follows:
Before we can respond to a request to exercise one or more of your rights, we may ask you to confirm some of your Account information to verify your identity. In case of reasonable doubt, we may ask you for identification.
9. Information Regarding Children
BeReal is not intended for children under the age of 13. If you believe that we have Personal Information about a child or that it has been collected from a child under the required age, you may report your concerns to us by reporting the content or the User Account.
10. Information About Users Located In the USA
This clause is only valid and legally binding if you are a party to the BeReal Terms of Service. This clause regarding U.S. users, including California and Virginia residents, applies to Personal Information (as defined in applicable regulations) provided to BeReal by the User.
In light of the California Consumer Privacy Protection Act of 2018 (“CCPA”), we are providing this information to you as a service provider required to process your Personal Information (as defined in the applicable law), to confirm that we have adequate contractual terms in place. The term “applicable law” refers to all laws, regulations, standards, regulatory guidance and self-regulatory guidelines that may apply in relation to the management of your Data. Applicable laws include, but are not limited to, the California Consumer Privacy Protection Act (Cal. Civ. Code §1798.100 - 1798.199), or the Virginia Consumer Data Protection Act (SB 1392).
As a service provider, we will collect, hold, use, disclose and process your personal information only to fulfill our obligations to you under our agreement, for operational purposes previously stated in this Policy, to the exclusion of any other purpose.
We will not sell your personal information or disclose your personal information for commercial purposes.
If you have any questions about the CCPA or other U.S. regulations at BeReal or to exercise your rights under them, you may contact us as set forth in Section 11.
You can exercise these rights at any time in one of two ways: