Buzly
Privacy Policy
Buzly lets you send a live moment to someone, somewhere in the world, and get one back. It's built so that strangers only ever see a photo, a city and a distance. This policy explains what we collect, why, who can see it, and how to delete it.
Who we are
Buzly is operated by Buzly Labs Ltd, 3 Tsar Boris III Blvd, Hipodruma, 1612 Sofia, Bulgaria (UIC BG201170349) ("Buzly", "we", "us"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). You can reach us at ask@buzlylabs.com.
What we collect
Account
- Sign-in details. When you sign in with Apple, Google or email, we receive an account identifier and an email address (with Apple this may be a private relay address). Your email is used only for your account, sign-in and support. It is never shown to other people.
- Profile. Your first name, username and, if you add one, a profile photo.
- Age confirmation, and optionally your date of birth and gender. At sign-up you confirm you're 18 or older. You can add your date of birth and gender in Buz Settings; they're used only to match Buz with the people you choose to Buz with (Buz preferences), and a date of birth under 18 blocks the account. They are not shown on your profile.
- Buz preferences. Who you'd like to exchange moments with (for example Everyone, 18–80).
What you share
- Moments. The live photos you take in Buzly (Buz, Buz Back and Buz sent to a connection), with the time they were taken. Buzly only uses the in-app camera: no photo library, no filters.
- Chat messages you exchange with your connections.
- Reactions, connections, reports and blocks.
Collected automatically
- Approximate location. See Location.
- Device and app data. A push notification token, app version, device model and operating system, and an app integrity check (Firebase App Check) that helps us block fake or modified apps.
- Usage and diagnostics. Basic usage events (for example that a Buz was sent or a screen opened) and crash reports, through Google Analytics for Firebase and Firebase Crashlytics. They don't include your photos or messages.
We don't collect your contacts, your photo library, or your precise address, and we don't use advertising identifiers.
Who sees what
| People you Buz | Your connections | |
|---|---|---|
| Your moment (photo) | Yes | Yes |
| City, country, distance, approximate area (2–5 km) | Yes | Yes |
| When the moment was taken | Yes | Yes |
| First name, username, profile photo | No | Yes |
| Chat messages | No | Only with that connection |
| Email, date of birth, gender, exact location | Never | Never |
A connection exists only when both people choose it: someone sends you a Buz Back and you tap Connect. Anyone you block can no longer Buz you, see your moments or message you, and you won't see theirs.
Location
Every Buz shows roughly where it came from, so Buzly needs your location to Buz. We ask iOS only for your approximate location, accurate to a few kilometres.
- The coordinate your phone reports is stored on our servers where no other user can read it. It's used to calculate rounded distances and the area shown on a moment.
- Your profile keeps only your city, country and time zone.
- The area shown on a moment is the centre of a fixed 2–5 km grid square around you (larger in bigger cities), never the point where you were. A fixed grid means many moments from the same place don't reveal more than one square.
- Distances are rounded.
You can turn location off at any time in iOS Settings. You won't be able to send new Buz while it's off.
Why we use your data (legal bases)
- To provide Buzly (performance of our contract with you): creating your account, delivering moments, matching Buz to people within your preferences, connections, chat, push notifications and account deletion.
- To keep Buzly safe (our legitimate interests, and legal obligations where they apply): checking every moment automatically before it's delivered, handling reports and blocks, preventing spam and abuse with rate limits, app integrity checks, and enforcing our Terms.
- To improve Buzly (our legitimate interests): aggregated usage statistics and crash reports.
- Location and notifications: only after you allow them in iOS. You can withdraw that permission at any time in iOS Settings.
Automated checks. Every photo is checked automatically for nudity and violence (Google Cloud Vision SafeSearch) before it's sent; photos that fail aren't delivered. Matching who receives a moment is also automatic, based on Buz preferences and, if you added them, your age and gender. None of this has legal or similarly significant effects on you, and you can contact us if you think a photo was rejected by mistake.
We don't sell your personal data, and we don't use it for advertising.
Service providers
We use a small number of providers who process data only on our instructions:
- Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, App Check, Analytics, Crashlytics, and Cloud Vision for photo safety). Our database and servers are in the European Union (Belgium, europe-west1). Some Firebase services, such as Authentication, Analytics, Crashlytics and Cloud Messaging, may process data outside the EU, including in the United States, under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
- Apple (Sign in with Apple and Apple Push Notification service).
- Google Sign-In, if you choose to sign in with Google.
We may also disclose data if the law requires it, or to protect the safety of people using Buzly.
How long we keep it
- Your account data and moments are kept while your account exists. Moments that haven't reached anyone leave the matching queue after 48 hours.
- When you delete your account (Profile → Settings → Delete Account), we delete your profile, profile photo, private location, username, the images of every moment you took, your pending Buz, your connections with their chat messages, your devices and your sign-in account. Moments you already sent to others become unavailable to them.
- Reports are kept for as long as needed to review them and keep Buzly safe.
- Some data can remain for a short period in server logs and diagnostics before being deleted automatically.
Your rights and choices
Under the GDPR you can ask to access, correct, delete or export your data, and to restrict or object to how we use it. You can do most of this in the app (edit your profile, change your Buz preferences, turn permissions off, delete your account), or by emailing ask@buzlylabs.com. We'll reply within one month.
You can also complain to your data protection authority. In Bulgaria that's the Commission for Personal Data Protection (cpdp.bg).
Age
Buzly is only for people aged 18 and over. You confirm you're 18 or older when you sign up, and we block accounts under 18 (including when a date of birth you add shows you're under 18). If you believe a minor is using Buzly, report them in the app or email us and we'll act quickly.
Changes
If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you in the app before it takes effect.
Contact
Buzly Labs Ltd, 3 Tsar Boris III Blvd, Hipodruma, 1612 Sofia, Bulgaria (UIC BG201170349)
ask@buzlylabs.com