Privacy Policy

Last updated: September 7, 2026

1. Introduction

Welcome to Buddzy! We value your trust and are committed to protecting your privacy. This Privacy Policy explains how Buddzy ("we", "our", or "us") collects, uses, stores, and shares your personal data when you use our mobile app and website.

By using Buddzy, you acknowledge the practices described in this Policy. If you do not agree, please do not use our services.

2. Who We Are

Buddzy is operated by Buddzy SAS, a société par actions simplifiée registered in France (the "Data Controller").

3. What Data We Collect

4. How We Use Your Data

4.1 App Permissions on Android

To provide core features of the Buddzy app, we request certain Android permissions. Each is used only for its intended purpose and never for unrelated data collection.

We never use these permissions for hidden tracking. All processing is limited to providing Buddzy features, and sensitive data (photos, audio, contacts) is stored securely or only used locally on your device.

5. Legal Bases for Processing

Children: Buddzy is intended for users aged 13+ only. We do not process personal data of children under 13. If we learn that a user is under 13, we will delete the account and data.

6. Data Sharing & Third Parties

We do not sell your data. We may share data with trusted providers acting under our instructions:

For the current list, see our Subprocessors page.

6.1 Advertising

Buddzy shows rewarded video ads only. They are never forced on you: you choose to watch one in exchange for Orbs, and they are capped at five per day. There are no banners, no interstitials, and no ads inside the core social moments of the app.

Rewarded ads are served by Google AdMob. When an ad is requested, Google receives your device's advertising identifier, your IP address and technical ad-request data, and acts as an independent controller for the ads it serves — meaning it processes that data under its own privacy terms, not merely on our instructions. Google may use this data to select and measure ads, including personalized ads where your region allows it and where you have given the required consent through the consent prompt shown in the app. Buddzy does not send Google your profile, phone number, contacts, friend list, Stars, or any other gameplay data, and we do not receive advertising profiles about you in return.

You can reset your advertising identifier or turn off ad personalization at any time in your device settings — on Android under Settings › Privacy › Ads, and on iOS under Settings › Privacy & Security › Tracking. Doing so does not prevent you from watching rewarded ads or earning Orbs; it only makes the ads you see less personalized.

7. Data Retention

8. Your Rights

8.1 Under GDPR (EEA/UK Users)

You may:

We will respond to all data subject requests within 30 days. If we need more time (up to 60 additional days), we will inform you of the extension and the reasons.

8.2 Under CCPA (California Residents)

If you are a California resident, you have the following additional rights:

We do not sell personal information — we have never exchanged user data for money or other valuable consideration, and we do not operate any data-broker or audience-selling arrangement. Apart from the advertising identifier described above, we do not share personal information for cross-context behavioral advertising.

To exercise any of these rights, email: privacy@buddzy.app

9. Children's Privacy

Buddzy is not intended for children under 13. We do not knowingly collect data from children under 13, and we do not provide a parental-consent flow. If you believe a child under 13 has used Buddzy, please contact us at support@buddzy.app and we will delete the account and data.

10. Data Security

11. International Transfers

Buddzy SAS is established in the European Union and your data is primarily processed within the EEA. Some of the providers listed in Section 6 process data in the United States (for example AWS, OpenAI, Google and our SMS verification provider). Those transfers rely on the European Commission's Standard Contractual Clauses (SCCs) with supplementary measures, or on the provider's certification under the EU-US Data Privacy Framework where applicable. You can request a copy of the safeguards in place by contacting privacy@buddzy.app.

12. Automated Decision-Making

Buddzy uses algorithms to calculate rankings, Aura levels, and leaderboard positions based on your in-app activity (e.g., Stars given and received). These features are part of the core game experience and do not produce legal effects or similarly significant effects on you. You can always contact us at privacy@buddzy.app if you have questions about how these systems work.

Separately, when you verify your phone number, we rely on an automated anti-fraud system operated by our verification provider, Prelude. It scores each verification attempt using signals such as your phone number, IP address, device identifier and device characteristics, and it may block an attempt that it assesses as fraudulent — which means that, in that instance, you would not be able to complete sign-up or sign-in. No decision of this kind is based on special categories of personal data, and the system is not used to profile you for any other purpose. If your verification is blocked and you believe this is an error, you may contact us at privacy@buddzy.app: you have the right to obtain a review of the decision by a member of our team, to explain your situation, and to contest the outcome.

13. Data Protection Officer

Given the current scale of our operations, Buddzy has not appointed a Data Protection Officer. For all privacy-related inquiries, you may contact our Privacy Office at privacy@buddzy.app. We will reassess the need for a DPO as our user base grows.

14. Changes to This Policy

We may update this Privacy Policy. If we do, you'll be notified via app or website. Continued use means acceptance.

15. Contact

Buddzy SAS — Privacy Office

Thank you for trusting Buddzy. Your privacy matters to us.