Privacy
Privacy Policy
We collect what the product needs to introduce you to people, keep members safe, and bill through Apple. Nothing is sold. Nothing is shown to advertisers. Your exact location is never shown.
In plain words
- Your profile, evidence, passions and places are shown to members you are introduced to. Your email, birthday and face-check data never are.
- We do not sell or share your information for advertising, and we have never done so.
- Our systems screen evidence and notes automatically. Staff read messages only for reports, safety, fraud or legal process.
- Delete your account and your data is erased 30 days later, except the small set we must keep for safety and legal reasons listed in Section 6.
- You can ask for a copy of your data, correct it, or delete it: [email protected].
Contents
1. Who we are and what this covers
This Privacy Policy explains how Dopin LLC, a Delaware limited liability company registered to do business in California and doing business as Belavo ("Belavo", "we", "us"), collects, uses, shares and protects personal information when you use the Belavo iOS app, the belavo.app website, our waitlist, and our support channels (together, the "Service"). It applies to members, people on a waitlist, visitors to the website, and anyone who contacts us. It does not cover Apple, Google or any other third party's own services; their policies govern what they collect.
2. What we collect
| Category | What it includes | Source |
|---|---|---|
| Account | Email address, sign-in provider (Apple, Google or email), one-time sign-in codes, display name, birthday, gender, height (optional) | You |
| Profile | Up to 3 passions; evidence photos and videos (up to 30 seconds) with captions; up to 3 profile photos; up to 3 public places; neighborhoods; how long you have lived in your city; "open to" choice (friends, relationship, either way); biography, job, languages, education, drinking, and other optional fields; whether height is shown | You |
| Face check | A short video selfie, one reference frame, a liveness score, a match score, and the result (verified or not) with its date. See the Biometric Data Policy | You, processed by Amazon Web Services |
| Preferences | Who you want to see (open to, gender, age range), notification settings, pause status | You |
| Activity | Introductions you received, passes, notes sent and received, replies, connections, chats and group chats you are in, gifts sent and received, reports you make or receive, blocks, pauses and deletion requests, and the times of these events | Your use of the Service |
| Messages | Notes, chat messages, group messages and voice messages you send and receive, and gift messages | You and the members you talk with |
| Payments | Apple transaction identifiers, original transaction ID, subscription status, trial, renewal and expiry dates, gift purchases and credits. We never receive your card number or billing address | Apple |
| Device and usage | Device model, iOS version, app version, language, time zone, IP address, push notification token, crash and performance logs, and how the app is used (screens opened, features used, timestamps) | Your device |
| Location | The city and neighborhoods you choose. We do not collect GPS or precise location and we never ask for the Location permission | You |
| Support | Emails and messages you send to support, safety or privacy addresses, and our replies | You |
| Waitlist | Email, chosen city and neighborhoods for cities not yet open; who invited you, if you joined through an invitation link | You |
| Website | Pages viewed on belavo.app, referrer, browser type, and the essential cookies described in the Cookie Policy | Your browser |
| Inferences | Which passions, places and members are likely to fit you, derived from the categories above to pick your five | Our systems |
Other people in your photos. Friends may appear in your second and third photos or in your evidence. By posting them you confirm they agreed. We use their image only to show your profile; we do not identify them, run the face check on them, or build any record about them. Anyone who appears in a member's photo without consent can ask us to remove it at [email protected].
Sign in with Apple "Hide My Email". If you use it, we receive and store only the relay address Apple gives us, and we send account email through it.
Contacts. We never ask for the Contacts permission and never read your address book.
Sensitive personal information
Under California law, two categories we collect are "sensitive personal information": (1) biometric information processed during the face check, and (2) information that may reveal sexual orientation, inferred from your "open to", gender and "show me" choices. We use both only for the purposes the law treats as permitted: to run the face check and to decide which members to introduce you to. We do not use sensitive personal information to infer characteristics about you for any other purpose, and we do not sell or share it. Because of this, we are not required to offer a "Limit the Use of My Sensitive Personal Information" link.
3. Why we use your information
- To run Belavo. Create your account, build your profile, pick your five people twice a day, deliver notes, chats, groups and gifts, show you who is verified, and send the notifications you choose.
- To keep members safe. Run the face check, screen evidence and photos for stock, AI-generated and screenshot images, check notes and gift messages for tone before they are sent, review reports, enforce the Community Guidelines, detect and prevent fraud, scams, spam and duplicate accounts, and remove members who appear to be under 18.
- To bill you. Confirm your Apple subscription, trial, renewal and gift status, and apply the founding price.
- To support you. Answer your messages and resolve problems with your account.
- To improve Belavo. Understand which features are used, fix crashes and bugs, and test changes. We use aggregated or de-identified data for this wherever we can.
- To communicate. Send service messages about your account, membership, safety and changes to our policies, and, with your consent, updates about Belavo in your city. You can turn off non-essential notifications in Settings and unsubscribe from emails at any time.
- To comply with law and protect rights. Respond to lawful requests, enforce our Terms, defend legal claims, and protect the rights, property and safety of members, Belavo and others.
We do not use your information for advertising, we do not show ads, and we do not use your Content to train artificial-intelligence models.
4. Automated systems and review of content
Choosing your five. Our systems choose which members to introduce you to using your passions, evidence captions, places, neighborhoods, tenure in the city, "open to" and "show me" preferences, age range, and your activity (notes, replies, passes and connections). No decision with legal or similarly significant effect is made solely by automated means. If you believe the introductions you receive are wrong, you can change your preferences in the app or contact us.
Screening. Evidence, photos, notes and gift messages are checked automatically before or shortly after they are posted or sent. The checks look for stock, AI-generated or screenshot images, faces that do not match the member, and language that breaks the Community Guidelines. Content that fails may be blocked or removed and a member may be asked to replace it.
Human review. Members of our Trust & Safety team read notes, messages, group messages or profile content only when a member reports them, when our automated systems flag a safety, fraud or under-18 concern, when a legal request requires it, or when needed to investigate a security incident. We do not read chats for any other reason, and we do not use message content for advertising or for training models.
5. Who sees your information
- Other members. Members who are introduced to you see your display name, age, neighborhoods, tenure, "open to" choice, passions, evidence, places, photos, height (if you show it), biography and the other profile fields you fill in, whether you are verified, and whether you have been active recently. Members you connect with see your messages. Members in a group you are in see your name and what you post there. A named gift shows your name to the recipient; an anonymous gift does not. Your email, birthday, exact location, face-check data and preferences are never shown to members.
- Service providers. Companies that process information for us under contract, only to provide their service: Amazon Web Services (hosting, storage, face check), Apple (sign-in, payments, push notifications), Google (sign-in), our transactional email provider, our crash-reporting and product-analytics providers, and map and places data providers. Our contracts prohibit them from using your information for their own purposes.
- Law enforcement and others when the law requires. To comply with a subpoena, court order, warrant or other legal process; to respond to a lawful request from a government authority; to protect the safety of any person, including in an emergency; or to investigate fraud, security incidents or violations of our Terms. See our Law Enforcement Guidelines.
- Business transfers. If Belavo or Dopin LLC is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction. This policy continues to apply, and we will notify you before your information becomes subject to a different policy.
- With your consent. For any other purpose we tell you about at the time and that you agree to.
No sale, no sharing for ads. We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 18.
6. How long we keep it
| Data | Kept |
|---|---|
| Face-check video and reference frame | Not kept; deleted when the check completes (see the Biometric Data Policy) |
| Face-check result, scores and date | While your account exists, then 30 days |
| Profile, evidence, photos, places, preferences | While your account exists, then 30 days |
| Notes, chat and group messages, voice messages | While your account exists, then 30 days. Messages tied to an open report, a legal hold or a safety ban are kept as long as that purpose requires |
| Reports, blocks and enforcement records (including a hash of the email and device identifiers of banned accounts) | Up to 5 years after the event, to keep banned people from returning and to respond to legal claims |
| Apple transaction records and gift credits | 7 years, for tax and accounting |
| Support, privacy and safety correspondence | 3 years after the last message |
| Waitlist entries | Until the city opens or you leave the list, then 30 days |
| Device and usage logs, crash reports | 90 days, then aggregated |
| Website server logs | 30 days |
When you delete your account, your profile is hidden at once. If you do not sign in within 30 days, deletion becomes final and the data above is erased on the schedule shown. Backups are overwritten within a further 30 days. Messages you sent to other members remain visible to them, shown as from a deleted member, until their own accounts are deleted, because those messages are also part of their records.
7. Your rights
If you live in California, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Iowa, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with consumer privacy laws have similar rights, and we honor them the same way.
- Know and access. Ask what personal information we have collected about you, the categories of sources, our purposes, the categories of third parties we disclose it to, and the specific pieces of information, and receive a copy in a portable format.
- Correct. Ask us to correct inaccurate personal information. Most profile fields can be corrected in the app.
- Delete. Ask us to delete your personal information. You can do this in the app (Settings › Account status › Delete my account) or by email. We may keep information where the law allows, for example to complete a transaction, detect security incidents, protect against fraud, comply with a legal obligation, or exercise or defend legal claims; the retention table above lists what that is.
- Opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We honor the Global Privacy Control signal on belavo.app as an opt-out for any future sale or sharing.
- Limit sensitive information. We use sensitive personal information only for permitted purposes, so no limit request is needed.
- Non-discrimination. We will not deny you the Service, charge a different price, or provide a different level of service because you exercised a privacy right.
- Appeal. If we decline a request, you may appeal by replying to our decision; we will respond within 45 days and tell you how to contact your state attorney general if you are still unsatisfied.
How to make a request. Email [email protected] from the email on your account, or use Settings › Help & feedback in the app. We verify requests by confirming control of the account email and, for access and deletion requests, by asking you to confirm in the app. An authorized agent may act for you with your signed written permission; we may also ask you to confirm the request directly. We respond within 45 days and may extend once by 45 days with notice. You may make a free request twice in any 12-month period; we may decline manifestly unfounded or excessive requests or charge a reasonable fee.
Metrics. We will publish annual statistics on privacy requests received when we reach the threshold at which California requires it.
8. Children
Belavo is for adults. We do not knowingly collect personal information from anyone under 18, and we do not direct the Service to minors. If you believe a member is under 18, report them in the app or email [email protected]; we will remove the account and delete its data. From January 1, 2027, we will request the age bracket signal that California's Digital Age Assurance Act makes available from iOS and will not knowingly disregard it.
9. Security
Information is encrypted in transit (TLS) and at rest. Face-check reference frames are encrypted with keys we control. Access to personal information inside Belavo is limited to staff and contractors who need it for their role and is logged. We review our service providers' security practices. No system is perfectly secure; if a breach affects your personal information we will notify you and the relevant authorities as the law requires, including under California Civil Code §1798.82.
10. Where data is processed
Belavo is operated from the United States. Your information is stored and processed on servers in the United States operated by Amazon Web Services. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your country.
11. Notice at collection for California residents
At or before the point of collection we tell you: the categories of personal information we collect are those in Section 2; our purposes are those in Section 3; we do not sell or share personal information; and the retention period for each category is in Section 6. The categories, as defined in Civil Code §1798.140, are: identifiers (email, name, device identifiers, IP address); personal information under Civil Code §1798.80 (name, contact details); characteristics of protected classifications (age, gender); commercial information (subscription and gift records); biometric information (face check); internet or network activity (usage data); geolocation data (city and neighborhoods only); audio and visual information (photos, videos, voice messages, the selfie); inferences (who to introduce you to); and sensitive personal information (biometric information; information revealing sexual orientation). This Privacy Policy is the full notice.
12. Changes to this policy
If we materially change this policy we will notify you in the app or by email at least 14 days before the change takes effect, and we will list the change on the All policies page. We will not use previously collected information in a materially different way without your consent.
13. Contact
Dopin LLC d/b/a Belavo
254 Chapman Rd, Ste 208 #25323, Newark, DE 19702
Privacy requests: [email protected] · Safety: [email protected] · General: [email protected]