Privacy Policy

Effective date: 12 May 2026

2. Information We Collect

• Profile data: age, gender, country, nickname/display name, avatar
• Group data: name, description, images (uploaded via Cloudinary)
• Chat content: messages, photos, reactions, comments
• Push notification token
• Administrative roles (owner, admin, moderator)

• IP address
• Device information (operating system, model, version, unique device identifiers)
• Usage data and app interactions
• Crash reports and performance data
• Local Device Storage (Expo SecureStore/AsyncStorage): We store authentication tokens and local preference data directly on your device to keep you logged in.

The Application does not collect precise geolocation data. Country is provided manually by the user.

3. Purposes and Legal Basis of Processing (GDPR)

We process your personal data based on:

• Performance of contract (Art. 6(1)(b) GDPR) – providing chat and group services
• Legitimate interest (Art. 6(1)(f) GDPR) – improving the app, security, manual moderation, analytics
• Consent (Art. 6(1)(a) GDPR) – push notifications, AI bot interactions, and personalized advertising

Main purposes:

• Creating and managing user groups and chat functionality
• Generating automated AI bot responses
• Sending push notifications
• Displaying personalized advertisements (including profiling and behavioral advertising via Google AdMob)
• App analytics, crash detection and continuous improvement
• Ensuring community safety and content moderation

4. Use of Artificial Intelligence & Moderation

AI Features: The Application uses Groq (groq.com) as an AI inference provider to power conversational bots in selected groups. Parts of the conversation context may be sent to Groq to generate relevant bot replies. We do not use your conversations to train any AI models. Data transmitted to Groq is processed temporarily and is not retained permanently by the provider.

Human Moderation: To ensure safety, content moderation is performed manually by human administrators and moderators. There is no automated decision-making or automated account suspension/banning without human review.

5. Third Party Services (Sub-processors)

The Application uses the following third-party services to process data outside or inside the EEA:

• Firebase (Google LLC, USA) – authentication, database, push notifications, analytics, crashlytics (Data hosted in Google Cloud European Data Regions)
• Cloudinary Ltd. (USA/Israel) – image upload and hosting
• Groq Inc. (USA) – AI inference for chat bots
• Google AdMob (Google LLC, USA) – personalized advertising and profiling
• Expo (650 Industries Inc., USA) – application development framework and updates

6. Data Sharing, Profiling & Targeted Ads

We do not sell your personal data. Your data may be shared with the service providers listed above.

Google AdMob uses personal identifiers and cookies to serve personalized advertisements. You can withdraw your consent to profiling and targeted advertising at any time by changing your device settings (Google Advertising ID settings / Apple IDFA settings) or via the app settings.

7. US State Privacy Rights (CCPA / CPRA)

If you are a resident of California or other US states with active privacy legislation:

• Right to Know and Access: You have the right to request a disclosure of what personal information we collect and share.
• Right to Deletion: You have the right to request deletion of your information.
• Do Not Sell or Share My Personal Information: We do not sell your data for money. However, using Google AdMob for targeted advertising may be classified as "sharing" under CCPA. You can opt-out of behavioral tracking through your device's built-in operating system privacy settings.

8. International Data Transfers

Your data may be transferred to countries outside the European Economic Area (including the USA). We ensure appropriate safeguards, primarily through Standard Contractual Clauses (SCC) approved by the European Commission, combined with strict data encryption.

9. Data Retention & Account Deletion

We retain your data for as long as your account is active or as long as necessary to provide the services.

In-App Account Deletion: You can delete your account and all associated personal data immediately at any time directly through the App Settings -> Delete Account screen. Alternatively, you can request manual data deletion by contacting us via email.

10. Your Rights (GDPR)

You have the right to access, rectify, or erase your data (“right to be forgotten”), restrict processing, object to processing (including profiling for ads), data portability, and to withdraw consent at any time.

To exercise these rights, contact us at: bosocial.help@gmail.com

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych – uodo.gov.pl).

11. Children

The Application is not intended for children under the age of 13 (or under 16 in certain EEA jurisdictions). We do not knowingly collect personal data from children. If we discover a child under these age limits has created an account, it will be deleted immediately by human moderators.

12. Security

We implement reasonable technical and organizational security measures to protect your data. However, no method of electronic transmission or storage is 100% secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy. Material changes will be notified to you through a prominent notice inside the Application before the change becomes effective.

14. Contact Us

If you have any questions regarding this Privacy Policy, please contact us at: bosocial.help@gmail.com