Privacy Policy
Last updated: 06.02.2026
1. Introduction
This Privacy Policy explains how Buddify App d.o.o. ("we", "us", "our"), located at Dunajska cesta 27, 1000 Ljubljana, Slovenia, collects, uses, shares, and protects your personal data when you use the Buddify mobile application ("App") and the Buddify website at buddify.life ("Website").
We comply with the General Data Protection Regulation (GDPR) and applicable privacy laws in the EU and globally. By using Buddify, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
When creating and using your Buddify account, you provide:
- Phone number — used for authentication via one-time passcode (OTP)
- Full name — displayed on your profile
- Date of birth — used for age verification (18+) and age bracket filtering
- Gender — used for gender-based activity filtering
- Bio/biography (100-500 characters) — displayed on your profile
- Email address — provided via Google or Apple sign-in for account recovery and notifications
- Profile photo (optional) — displayed on your profile
- Interests — selected from categories, used for activity matching
- Preferred language (optional) — used for language-based activity filtering
2.2 Information from Activities and Interactions
When you create or participate in activities, we collect:
- Activity details — title, description, category, date, time, and duration
- Activity location — latitude/longitude coordinates, place name, and address
- Activity restrictions — age, gender, and language preferences set by the host
- Participation status — whether you joined, attended, were a no-show, or cancelled
- Swipe decisions — your right/left swipe choices on activity participants, used for matching
- Match records — timestamps and details of mutual matches
- Chat messages — messages exchanged between matched users
- Reviews and ratings — 1-5 star ratings, written comments, tags, and no-show flags left after activities
- Trust score — a score from 0 to 100+ computed from reviews you receive
2.3 Information Collected Automatically
When you use the App, we automatically collect:
- Precise GPS location (latitude/longitude) — collected via foreground location permission only while the App is open, used to show nearby activities
- Device push token — used for push notification delivery
- Device identifier — used for push token management
- Platform (iOS/Android) — used for push notification routing
- Notification preferences — your 7 notification toggle settings
- Notification read status — used for unread count tracking
- Signup method — whether you registered via phone, Google, or Apple
2.4 Information from Third Parties
If you sign in using Google or Apple, we receive:
- Apple Sign-In — your Apple ID, email address, and name (first sign-in only)
- Google Sign-In — your Google account email address
2.5 Information We Do NOT Collect
The Buddify App does not collect:
- Background or continuous location data — we only access location while the App is in the foreground
- Analytics or telemetry data — no analytics SDK is installed in the App
- Advertising identifiers (IDFA/GAID)
- Contacts or address book data
- Health or fitness data
- Financial or payment information — all payments are handled by Apple App Store or Google Play Store
- Browsing history
- Persistent search history
3. How We Use Your Information
We use your information to:
- Provide the service — create your account, display your profile, and enable activity discovery
- Match users — use your interests, location, swipe decisions, and preferences to connect you with compatible activity partners
- Enable communication — facilitate messaging between matched users
- Ensure safety — maintain trust scores, process reports, and enforce community guidelines
- Send notifications — deliver push notifications about matches, messages, activities, and reviews
- Verify age — confirm you meet the 18+ age requirement
- Process subscriptions — manage premium features via Apple/Google store payment processors
- Send transactional emails — deliver account-related notifications via email
- Improve the service — understand usage patterns and enhance features
4. How We Share Your Information
We never sell your personal data. We share data only with the following service providers who process it on our behalf:
- Supabase (supabase.co) — backend infrastructure, authentication, and database storage
- Expo / EAS (expo.dev) — push notification delivery and app builds
- Resend (resend.com) — transactional email delivery
- Apple (apple.com) — Sign in with Apple authentication
- Google (google.com) — Google Sign-In authentication and Google Places location autocomplete
- Apple App Store / Google Play Store — in-app purchase and subscription processing
- Vercel (vercel.com) — hosting shareable activity link pages
Each third-party service processes data according to their own privacy policies. We may also share data when required by law or to protect the safety of our users.
5. Your Visibility to Other Users
Other Buddify users can see the following information about you:
- Your name and profile photo
- Your bio and interests
- Your trust score and reviews from other users
- Activities you have created or joined
- Your age bracket (not your exact date of birth)
Your phone number, email address, exact date of birth, and device information are never visible to other users.
6. Data Retention
We retain your personal data for as long as your account is active and as needed to provide you with our services. When you delete your account, all personal data is removed from our systems promptly, including your profile, photos, messages, matches, activities, reviews, and authentication records.
We may retain anonymized or aggregated data that cannot be used to identify you for analytical purposes. We may also retain data as required by law (e.g., for legal compliance or dispute resolution).
7. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal data ("right to be forgotten")
- Restriction — request restriction of processing in certain circumstances
- Data portability — request your data in a structured, machine-readable format
- Withdraw consent — withdraw consent at any time where processing is based on consent
- Object — object to processing based on legitimate interests
To exercise any of these rights, you can use the in-app settings or contact us at info@buddify.life.
8. Account Deletion
You can delete your account directly within the App via Settings > Delete Account. Upon deletion, all personal data is removed from our systems, including your profile, photos, messages, matches, activities, reviews, and authentication records. Data deletion is completed promptly.
You may also request deletion by emailing info@buddify.life.
9. Children's Privacy
Buddify is intended solely for individuals 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it immediately.
If you believe a minor has provided us with personal data, please contact us at info@buddify.life.
10. Location Data
The Buddify App requests access to your device's precise GPS location to show you activities happening near you. Location data is collected only while the App is in the foreground (active use). We do not track your location in the background or continuously.
You can revoke location permissions at any time through your device settings. Without location access, the App will not be able to show nearby activities, but all other features will continue to work.
11. Push Notifications
To deliver push notifications, we collect your device push token and device identifier. These are used solely for routing notifications about matches, messages, activity updates, and reviews.
You can manage notification preferences within the App under Settings > Notifications, where you can toggle individual notification types. You can also disable push notifications entirely through your device settings.
12. Third-Party Services
The App uses the following third-party services. Each processes data according to their own privacy policies:
- Supabase — Privacy Policy
- Expo / EAS — Privacy Policy
- Resend — Privacy Policy
- Apple — Privacy Policy
- Google — Privacy Policy
- Vercel — Privacy Policy
Note: The Buddify website (buddify.life) uses Google Analytics and Meta Pixel for website analytics and marketing. These tools are not present in the mobile App. See our Cookie Policy for details.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- All data transmitted between your device and our servers is encrypted using HTTPS/TLS
- Database access is protected by Row Level Security (RLS) policies
- Authentication tokens are securely managed
- Access to personal data is restricted to authorized personnel only
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
14. International Data Transfers
Your data may be stored and processed outside the European Economic Area (EEA), including on servers operated by our third-party service providers. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
15. Cookies
The Buddify website (buddify.life) uses cookies for analytics and marketing purposes. The Buddify mobile App does not use cookies.
For full details on how we use cookies on the website, please see our Cookie Policy.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updated versions will be posted on the Website and in the App with the "Last Updated" date. We encourage you to review this policy periodically.
For significant changes, we will notify you through the App or via email.
17. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: info@buddify.life
- Company: Buddify App d.o.o.
- Address: Dunajska cesta 27, 1000 Ljubljana, Slovenia