BeLocal

Privacy Policy

Last updated: 16 August 2026

BeLocal ("we", "us") is a map-first social network for sharing real-world places and experiences. This policy explains what we collect, why, and your rights. It is written to meet Apple App Store requirements and the EU GDPR (BeLocal serves users in Italy and the EU).

Data controller: ASSE SRLS — Via Antonio de Viti de Marco 44, 00191 Roma (RM), Italy.
Contact / privacy requests: info@be-local.org

1. Data we collect

You provide:

• Account: email, name, last name, username, bio, profile photo, home location/city, and onboarding preferences (age range, budget, frequency, time slots, social context, venue types).
• Content you create: posts (text, photos, videos, audio notes, ratings), the location/coordinates and address of places you post about, tagged friends, comments, direct messages, saved places, and custom maps.

Collected automatically:

• Location: precise device location (with your permission) to show your position on the map and tag posts.
• Usage analytics: in-app events (posts viewed, profiles viewed, searches, category/venue browsing) used to personalize your feed.
• Device data: device model/OS (for diagnostics) and a push-notification token.

From third parties (only if you connect them):

• Sign-in providers: if you sign in with Google or Apple, we receive your basic profile (name, email).

2. How we use it

To provide the service (accounts, posting, maps, messaging, notifications); to personalize your feed and recommendations; to keep the service safe (moderation, abuse prevention); and to meet legal obligations. Legal bases (GDPR): performance of contract (core features), consent (precise location, optional integrations, marketing), and legitimate interests (security, product improvement).

3. Sharing

• Other users: content you post is shared according to its visibility setting (Everyone / Friends / Only me). Profile basics are visible to other users.
• Service providers (processors): Convex (database/backend), Backblaze B2 + Cloudflare (media hosting/delivery), Firebase Authentication (Google) for login, Google Maps/Places (geocoding/search), Expo (push notifications). Each processes data only to provide their service.
• Business/analytics partners: we do not share data with any external business or analytics partner. Aggregated, de-identified trend data (e.g. popular places/categories by area) is used internally only, by BeLocal's own team. We do not sell your personal data.
• Legal: where required by law.

4. International transfers

Some providers process data outside the EU/EEA (e.g. the US). Where they do, transfers rely on Standard Contractual Clauses or equivalent safeguards.

5. Retention & deletion

We keep your data while your account is active. You can delete your account at any time in the app (Settings → Delete account). Deletion removes your profile and associated user-generated content (posts, comments, messages, photos/videos, follows, maps, saved places). Some records may persist briefly in backups or where retention is legally required.

6. Your rights (GDPR)

Access, rectification, erasure, restriction, portability, and objection; withdraw consent at any time; and lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali). To exercise these, contact info@be-local.org.

7. Children

BeLocal is not for users under 16. We confirm age at registration and do not knowingly collect data from children under 16. If you believe a child has provided data, contact us for removal.

8. Security

Media is uploaded via short-lived, server-signed URLs (credentials never reach the app); traffic is encrypted in transit (HTTPS); access to your data is authorization-checked server-side. No system is perfectly secure, but we work to protect your information.

9. Changes

We'll update this policy as needed and notify you of material changes in-app or by email.