Privacy Policy (bogo.chat)

Effective date: January 1, 2026
Data Controller / Operator: bogo.chat (operated from Israel)
Contact: support@bogo.chat
Hosting region: Railway.com — EU West (Amsterdam)

  1. Scope

    This Privacy Policy describes how we collect, use, share, and retain personal data when you use bogo.chat.

  2. Data we collect

    A. Content you provide

    • Chat messages
    • Private/direct messages (if you use private messaging features)
    • Photos you upload
    • Voice messages you record and send
    • Emails you send to support

    B. Technical/usage data

    • IP address, device type, browser, OS, language
    • Timestamps, session/matching logs, error logs
    • Approximate location inferred from IP

    C. Cookies / local storage

    We use essential cookies or local storage only for functionality and security, including to keep you logged in if you create an account. We do not use advertising cookies.

    D. Account information (optional)

    • Identifiers such as email address, username, or similar, if you choose to create an account.
    • Profile information you choose to provide (for example, a profile photo).
    • Authentication-related data (for example, a hashed password or tokens), if applicable.
    • Account-level preferences and settings.

    E. Coins / virtual items (if offered)

    • Your coin balance and coin-related activity (for example, earning, spending, and adjustments).

    F. Shop / redemptions (if offered)

    • Redemption orders and related activity (for example, the item requested, coins spent, order status, timestamps, and fulfillment notes).
    • Delivery/contact details used to fulfill redemptions (typically your account email address).
  3. Why we process data

    1. Provide random matching and real-time chat
    2. Provide account features such as private messaging and showing usernames in features like Daily Picks
    3. Deliver and temporarily store photos and voice messages
    4. Operate coins/virtual item and Shop/redemption features (including eligibility checks, fraud prevention, fulfillment, denying/canceling redemptions, and dispute handling)
    5. Detect/prevent abuse, fraud, or harmful behavior
    6. Moderate content and enforce Terms
    7. Maintain, debug, and improve the Service
    8. Comply with legal obligations and lawful requests
  4. Legal bases

    Where GDPR (or similar laws) applies, our legal bases are:

    • Contract / service delivery: to provide chat, matching, account features, and media delivery.
    • Consent: when you choose to upload photos or share optional information. You can withdraw by stopping uploads/use.
    • Legitimate interests: safety, moderation, fraud prevention, protecting the Service and accounts, and improving Service reliability.
    • Legal obligation: if we must retain or disclose data under law.
  5. Sharing & access

    Your data may be seen by:

    • Your chat partner (everything you send to them).
    • Your private message recipient(s) (everything you send to them).
    • Other users (for example, if your username and/or profile photo is shown in Daily Picks or similar public/featured areas).
    • Moderators who review content for safety enforcement.
    • Service providers/processors, including Railway (hosting/storage/security).
    • Fulfillment providers (if any) used to deliver Shop redemptions (they may receive limited information such as your account email and the redemption item details).

    Railway acts as a data processor on our behalf for hosting and storage. We rely on Railway’s Data Processing Addendum to ensure appropriate processing.

    We do not sell personal data and do not run ads.

  6. Retention

    • Photos and voice messages: up to 48 hours, then deleted or anonymized unless needed longer for safety/legal reasons.
    • Chats: up to 30 days, then deleted or anonymized unless needed longer for enforcement/legal reasons.
    • Private/direct messages (if offered): up to 30 days, then deleted or anonymized unless needed longer for enforcement/legal reasons.
    • Account information (for registered users): kept while your account is active and for as long as we have a legal obligation or legitimate business need (for example, to enforce these Terms, maintain security records, or resolve disputes).
    • Coins and Shop/redemption records (if offered): retained as long as reasonably necessary for operating these features, fraud prevention, dispute handling, and legal/accounting obligations.
    • Security logs: retained only as long as reasonably necessary to protect the Service.
  7. International transfers

    Data is stored in the EU (Amsterdam). The operator/moderators are based in Israel, so limited access may involve transfer to Israel. We rely on legally recognized transfer mechanisms where required.

  8. Your rights

    Depending on your location, you may have rights to:

    • access your data,
    • correct it,
    • request deletion,
    • object or restrict processing,
    • data portability,
    • withdraw consent,
    • lodge a complaint with a regulator.

    You have the right to lodge a complaint with your local data protection authority in the EEA/UK, or with the Israeli Privacy Protection Authority, if you believe our processing violates applicable law.

    To exercise rights, contact support@bogo.chat. Because many users access the Service as guests and we often cannot identify you directly, we may need reasonable proof that your request relates to a particular session, device, or account.

  9. Automated matching

    Matching is performed automatically and randomly based on availability. We do not use profiling or automated decision-making that produces legal or similarly significant effects on you.

  10. Is providing data required?

    Providing chat content, photos, and voice messages is voluntary, but if you choose not to provide them you may not be able to use some or all parts of the Service. Creating an account and providing account information is optional, but some features may not be available without an account.

  11. Children

    bogo.chat is 18+ only. We do not knowingly collect data from minors. If we learn a minor used the Service, we will delete associated data.

  12. Security

    We use reasonable technical and organizational measures to protect data (encryption in transit, access controls, monitoring). No system is perfectly secure; please be careful about what you share.

  13. Updates

    We may update this Privacy Policy. We will post the new version and update the effective date. Continued use means acceptance.

  14. Contact

    Privacy questions/requests: support@bogo.chat