BeFrie
Privacy Policy
How BeFrie handles account, profile, safety, and app data.
Updated September 28, 2026
Data we collect
We collect the account details you provide, including email address, name, age, profile text, interests, area, photos, group and activity memberships, messages, reports, blocks, notification settings, and identity verification status.
How we use data
We use this data to create your profile, show local groups and activities you can join, run group chats and direct messages between members of the same group, support safety tools, investigate reports, prevent abuse, and improve reliability.
Photos, verification, and messages
Profile photos, messages, and video notes are stored to operate the service and are reviewed when required for safety. Identity verification is required before you can host or join a group or activity. Didit processes government identity documents, Active 3D liveness, and face comparisons on our behalf. To reduce impersonation, BeFrie sends the primary profile-photo candidate and a short-lived portrait from an approved Didit session to Didit for a face comparison. BeFrie stores only the resulting status, score, request identifier, and warning codes; it does not retain the ID image, liveness media, or Didit portrait.
Safety reports
When a report is submitted, BeFrie stores an unredacted evidence snapshot (the reporter's and the reported person's profiles and, depending on what was reported, the group's details, the reported message, and recent or surrounding messages from the same chat) so moderation can still review the issue even if content is later edited or deleted. Reports are reviewed by people, not by an AI service.
Location and service providers
BeFrie's database, file storage, and server functions are hosted by Supabase in the European Union (Ireland region). The app uses Apple Maps for maps, place search, and finding the area of a meeting point, so the related locations and search terms are sent to Apple. BeFrie does not store your own location. For each group or activity, BeFrie stores the exact meeting point the host sets and any venue name or address; only the host and people who have joined can see them, while other users see only the area and an approximate location within about 500 m of the exact point. Supabase hosts the service, Apple and Google provide sign-in, Apple delivers push notifications and provides maps and places, and Didit provides identity verification. These providers process data under their own privacy terms.
Retention and deletion
Account and chat data is kept until you delete your account. Deleting your account removes your profile, photos, videos, messages, the groups and activities you host, and your Didit verification sessions. Photos that are not approved stay private and are deleted when you remove them or delete your account. Safety reports and their evidence can be kept after an account is deleted, for as long as they are needed to keep BeFrie safe. Service logs kept by our hosting provider are kept for no more than 90 days. Deleted data may remain in encrypted backups for up to 30 days.
Contact
For privacy questions or data requests, contact [email protected].