Your privacy, plainly explained.

This Privacy Policy describes how ByTech Solutions Sàrl ("we", "us", "our") collects, uses, and shares information in connection with Blaboo (the "App"), a chat, discovery, and AI-companion application available on Android and iOS. By creating an account or otherwise using Blaboo, you agree to the collection and use of information as described here.

Blaboo requires users to be 18 years of age or older. If any term here conflicts with a mandatory law in your country, the local law controls for you.

When you create and use a Blaboo account, you provide us with:

• Account details email address and a password (we store only a salted cryptographic hash of your password, never the plain text).
• Profile details display name, birth date (used solely to verify you're 18+ and to show your age), gender, the gender(s) you're interested in matching with, country and city, spoken languages, a short bio, and interests/tags.
• Photos a profile avatar and up to 6 additional gallery photos, each automatically screened by an image-moderation system before it becomes visible to others (see Section 7).
• Personal AI assistant settings the name, personality traits, and interests you choose for your private assistant persona.
• Support requests anything you send us directly, e.g. by emailing support@bytech-solutions.com.

To provide core messaging, video, and social features, Blaboo requests permission to access certain hardware and device capabilities. You can grant or revoke these permissions in your OS settings at any time:

• Camera Permission: Required to take avatar photos, capture photo stories, attach photos in chats, and transmit real-time video during video calls.
• Microphone Permission: Required to record voice notes and transmit real-time audio during voice and video calls.
• Photos / Media / Storage Permission: Required to select and upload existing photos from your device gallery to your profile or chat messages.
• Notifications Permission: Required to deliver push alerts for new incoming messages, matches, calls, and account security updates.

If you choose "Continue with Google," Google shares your name, email address, and profile picture with us to create or match your account nothing else from your Google account is accessed. Accounts created this way have no password stored with us at all.

Using Blaboo means creating content that, by its nature, is shared with other people or processed to generate a reply:

• Private messages (text, photos, and voice notes) sent to other people you match or chat with, and to AI companion personas.
• Public posts and stories text posts and 48-hour disappearing "stories" (text or photo) that any user of the app can see, unless you've blocked or been blocked by them.
• Personal assistant conversations messages exchanged with your own private AI assistant, visible only to you.

All public text (posts and stories) and all uploaded public photos (avatar, gallery, photo stories) are automatically screened by an AI moderation system before publishing. Content flagged as violating our guidelines is rejected and never made public. Private one-to-one chat messages and media are not moderated or screened by us.

• Device & session data device identifier, platform (Android/iOS/Web), app version, IP address, and browser/device user-agent string, recorded when you sign in used to secure your account and detect suspicious logins.
• Location data we collect approximate location based on your IP address or manual profile entry. We do not request, access, or store precise GPS location data.
• Push notification token a Firebase Cloud Messaging token tied to your device, used only to deliver notifications to you.
• Usage & gem activity your gem balance and transaction history (what feature a charge or credit came from), used for billing accuracy and support.
• Profile visit log we record when your profile is viewed by another user, so we can show you who's viewed you.

Blaboo's AI companions and personal assistant are powered by third-party large language and image models. We believe in being specific here rather than vague:

• Chat replies when you message an AI persona or your personal assistant, the recent conversation text (and any attached photo, for personas that support image understanding) is sent to a third-party AI processing platform (Replicate, Inc.), which routes it to the underlying model provider for that conversation currently one of Google, OpenAI, Anthropic, or Moonshot AI solely to generate a reply. It is not used by us to build advertising profiles.
• AI-generated photos when a persona sends you a generated photo, the image is produced via image-generation models (Black Forest Labs / PrunaAI) accessed through the same Replicate platform.
• Automated content moderation public posts, stories, and uploaded public photos are automatically analyzed by AI moderation models (also via Replicate) to detect content that violates our guidelines before it's published. Private chat is not run through this system.

We have entered into Data Processing Agreements (DPAs) or enterprise terms with these providers ensuring they process your data securely and strictly for generating responses. They are contractually prohibited from using your API-submitted content for training their general-purpose models.

Random matching and direct voice/video calls connect two users' devices directly to each other using WebRTC your call audio and video streams never pass through or are stored on our servers. To establish that direct peer-to-peer connection, your device briefly communicates with Google's public STUN server, which can see your IP address for connectivity purposes only, under Google's own privacy policy. We do separately keep a basic call metadata record (participants, call type, start/end time, and how it ended) for safety, dispute-handling, and abuse-prevention purposes never the audio or video content itself.

• Operate discovery, matching, chat, and voice/video calling
• Generate AI companion & assistant replies
• Screen public content for policy violations
• Process gem purchases and maintain your balance
• Send push notifications you'd expect (messages, matches)
• Detect fraud, spam, and abusive behavior
• Respond to support requests and safety reports
• Comply with legal obligations

We do not sell your personal information to data brokers or third-party advertisers.

• Other users the profile fields, photos, public posts, and stories you choose to make visible; and, naturally, whatever you personally send in a chat or call.
• AI & moderation processors described in Section 7.
• Infrastructure providers our hosting/server provider and email-delivery provider (used solely to send account-verification codes), who process data on our instructions.
• App stores & SDK providers Google/Apple, as described in Section 11.
• Legal & safety if required by law, or to investigate a safety report, protect our rights, or prevent harm.

The Blaboo app includes the following third-party software development kits (SDKs). Each operates under its own provider's privacy policy, linked below:

You can reset your advertising ID or opt out of personalized ads in your device's OS settings at any time.

"Gems" are Blaboo's in-app currency, spent on chat messages, AI-generated photos, and other premium features. Gem purchases are processed entirely by the Google Play Store or Apple App Store, depending on your device we never receive or store your payment card, bank, or Google/Apple account details. We only receive confirmation that a purchase succeeded and the number of gems to credit. Refunds are handled per Google's/Apple's own purchase policies.

• Stories automatically expire and stop being shown 48 hours after posting.
• Chat messages are kept as long as your account (or the conversation) exists, so both sides retain a readable history.
• Pausing your profile hides it from discovery/matching immediately; nothing is deleted, and resuming restores full visibility instantly.
• Inactive accounts if your account is completely inactive for 2 years, we may automatically delete it and its associated data to minimize retained personal information.
• Deleting your account immediately scrubs your profile (name replaced, bio/avatar/photos removed) and permanently disables sign-in your email is freed up and your password is irreversibly overwritten. Message history is retained in already-existing conversations so the other participant's history isn't broken, but it is disassociated from any recoverable identity of yours beyond what's already visible to them.

Directly inside the app, at any time, you can:

• View and edit your profile information
• Add, reorder, or delete your photos
• Delete any post, story, or conversation you own
• Block or report another user
• Switch who can message you (everyone vs. requests-only)
• Pause or permanently delete your account

Out-of-App Data Deletion: If you no longer have the app installed or prefer to delete your account via the web, you can request full account and data deletion at any time by visiting our Data Deletion Request Page.

If you are located in Switzerland, the European Economic Area, or the UK, you additionally have the right under Swiss FADP and GDPR, subject to legal exceptions, to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to certain processing
• Port your data to another service
• Lodge a complaint with your local data protection authority (e.g. FADP in Switzerland)

Our lawful bases for processing are: performance of our contract with you (running the app), our legitimate interests (safety, fraud prevention, service improvement), your consent (e.g. optional AI features, marketing if any), and legal obligation where applicable. To exercise any of these rights, contact us at support@bytech-solutions.com.

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the "sale" or "sharing" of personal information
• Non-discrimination for exercising these rights

We do not sell personal information for money. Advertising SDKs (Section 11) may constitute "sharing" for cross-context behavioral advertising under CPRA; you can opt out of this via your device's ad-personalization settings or by emailing us to request an opt-out.

Blaboo does not currently respond to Do Not Track (DNT) browser signals.

Blocking someone immediately prevents new chats or messages between you and them, both ways. Reports you file (with an optional message as evidence) are reviewed by our safety team and are never shared with, or visible to, the person you reported.

Blaboo is strictly for users 18 years of age or older; we verify age at signup and do not knowingly allow anyone under 18 to register. If we learn that we've collected information from someone under 18, we will delete the account and associated data promptly. If you believe a minor is using Blaboo, contact us immediately.

ByTech Solutions Sàrl is based in Switzerland, and our servers and third-party processors named above may be located in different countries (including the EU and US). Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses, Swiss-US Data Privacy Framework, or equivalent legal mechanisms) when transferring personal data internationally.

Passwords are stored only as salted cryptographic hashes, never in plain text. Sessions use short-lived access tokens paired with rotating, single-use refresh tokens a stolen refresh token is usable at most once before it's automatically invalidated. All traffic between the app and our servers is encrypted in transit. No system is 100% secure, and we encourage using a strong, unique password.

In the event of a data breach that compromises your personal information, we will notify you and relevant regulatory authorities as required by applicable law.

We may update this policy as Blaboo's features evolve. We'll update the "Last updated" date above and, for material changes, notify you in-app or by email before they take effect.

Questions, requests, or reports regarding this Privacy Policy or your data:

Except where superseded by mandatory local consumer protection laws, this Privacy Policy is governed by and construed in accordance with the laws of Switzerland. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of the Canton of Geneva, Switzerland.