BeReal Privacy Policy

This document is BeReal's privacy policy, governing the collection, use, and disclosure of personal data by Vibe (the company operating BeReal) from users of its social media application, with its legal basis rooted in consent, contractual necessity, and legitimate interests as applicable under GDPR and comparable frameworks. The policy states that BeReal collects a broad range of personal data including device identifiers, location data, camera and microphone access, usage patterns, and user-generated content (dual-camera photos), and the terms authorize sharing this data with third-party service providers, advertising partners, and in connection with corporate transactions such as mergers or acquisitions. Notably, BeReal's core product mechanism requires simultaneous front and back camera capture, meaning the policy governs a structurally unique dual-image capture flow that inherently produces biometric-adjacent facial imagery at unpredictable intervals, a feature that is operationally distinct from most social platforms and may create heightened exposure under state biometric privacy laws such as the Illinois Biometric Information Privacy Act. The policy engages GDPR for EU/EEA users, the UK GDPR post-Brexit, CCPA/CPRA for California residents, and potentially COPPA given the platform's youth-skewing demographic, with BeReal's French operational base (Vibe SAS, Paris) placing primary regulatory oversight under the CNIL and Article 27 GDPR representational requirements. Material compliance considerations include the adequacy of consent mechanisms for minors, the lawfulness of location data processing, and whether advertising data flows satisfy GDPR's legitimate interests or consent requirements under applicable ePrivacy rules.