Privacy Policy

Last updated: [DATE]

Your data stays in the EU. All videos, reactions and account data are stored and processed on servers located in the European Union.

1. What we collect

BlurDrop is built around one exchange: a hidden piece of content and a recorded reaction to it. To make that work we collect:

Content you create — text, photos and videos you hide behind a challenge.
Reaction recordings — video of your face captured while a challenge plays, only after you explicitly tap "Enable camera & react". We never record before that tap.
Account data — username, sign-in identifier (Apple or Google), date of birth (for age verification only).
Device data — device model, OS version, app version, crash logs, and a pseudonymous analytics identifier.

[Placeholder — replace with the full inventory from your data-mapping exercise.]

2. How we use it

Delivering challenges and reactions between you and the person you shared with.
Rendering the split-screen composite reel on your device.
Age verification and safety (moderation of reported content).
Product analytics and crash diagnostics.

We do not sell personal data. We do not use your videos or reactions to train advertising profiles.

3. Who sees your reaction

Your reaction video is visible to exactly one person: the author of the challenge you reacted to. It is not public, not searchable, and not shown to anyone else unless the author exports and shares it themselves.

4. Where data is stored

All user content and personal data are stored in data centres located in the European Union. [Placeholder — name providers and regions, e.g. Google Cloud europe-west.]

5. How long we keep it

Challenges — until you delete them or they expire. [Placeholder — retention period.]
Reactions — until the challenge author or the reactor deletes them.
Account data — until you delete your account.
Crash and analytics logs — [Placeholder — e.g. 14 months].

6. Deleting your data

You can delete individual challenges and reactions in the app, or delete your entire account under Settings → Account → Delete account. You can also request deletion without the app on our data deletion page. Deletion is permanent.

7. Processors

[Placeholder — list sub-processors: cloud hosting, push notifications, subscription management, analytics, deep linking — with links to their DPAs.]

8. Your rights (GDPR)

If you are in the EU/EEA or UK you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to lodge a complaint with your supervisory authority. To exercise any right, contact us at privacy@blurdrop.app.

9. Children

BlurDrop is not available to users under the minimum age in their country (13 in the US and UK, up to 16 in parts of the EU). We verify age at sign-up and do not knowingly process data of underage users.

10. Contact

[Placeholder — legal entity name, address.] Data protection enquiries: privacy@blurdrop.app.