72 Total
18 High severity
40 Medium severity
14 Low severity

Key Facts

How does BeReal infer users' likely gender?
BeReal infers users' likely gender via AI from their username, first name, and biography, and uses this inference exclusively as internal targeting criteria.
What does BeReal use the inference of users' likely gender exclusively as?
BeReal infers users' likely gender via AI from their username, first name, and biography, and uses this inference exclusively as internal targeting criteria.
When may BeReal delete a user's account if the user is located in the United States?
BeReal may delete a user's account after three years of continuous inactivity if the user is located in the United States.
When may BeReal delete a user's account if the user is located in Europe or any other jurisdiction outside of the United States?
BeReal may delete a user's account after two years of continuous inactivity if the user is located in Europe or any other jurisdiction outside of the United States.
Does BeReal disclose BeReal users' phone numbers or matched audience lists back to advertisers?
BeReal does not disclose BeReal users' phone numbers or matched audience lists back to advertisers.
What does BeReal match advertiser-provided hashed phone number lists against?
BeReal matches advertiser-provided hashed phone number lists against hashed phone numbers associated with BeReal user accounts.
Does BeReal knowingly or willingly collect personal data concerning children under 13 years of age?
BeReal states it never knowingly or willingly collects personal data concerning children under 13 years of age.
How does BeReal use inferences about users' likely interests and likely gender?
BeReal uses inferences about users' likely interests derived from their pictures and likely gender derived from their username, first name, and biography as criteria to select relevant ads for users on the App.
How does BeReal derive users' likely interests?
BeReal derives users' likely interests from the visual elements of their photos and uses this exclusively as internal targeting criteria.
Does BeReal use visual elements of users' photos exclusively as internal targeting criteria?
BeReal derives users' likely interests from the visual elements of their photos and uses this exclusively as internal targeting criteria.
Stay ahead of the changes
Track BeReal and get the diff the day its terms change.
Summary

BeReal's privacy policy explains how BeReal collects and uses your information, including analyzing your photos and profile text to infer your interests and likely gender in order to show you targeted ads. If your account is inactive long enough — three years in the US, two years elsewhere — BeReal may permanently delete it. You can opt out of targeted advertising and data sharing through the Privacy settings in the App or by emailing dpo@bere.al.

Analysis

This privacy policy establishes BeReal's data collection, processing, and sharing practices for its App users. BeReal uses AI to infer users' likely gender from profile data (username, first name, biography) and likely interests from photo content, applying both inferences exclusively as internal ad-targeting criteria. User account data is used for advertiser audience matching via hashed phone number comparison, ad display, and performance measurement, with the explicit limit that BeReal does not return phone numbers or matched audience lists to advertisers. The policy defines inactivity-based account deletion thresholds (three years for US users; two years for users in Europe and other jurisdictions) and provides users with opt-out mechanisms over sale, sharing, and targeted advertising via App Privacy settings or email contact at dpo@bere.al.

What this means for you

BeReal analyzes the content of your photos and your profile text (username, first name, biography) to infer your interests and likely gender, then uses those inferences to select ads shown to you in the App. Your phone number associated with your account may be used in a hashed matching process against advertiser customer lists, though BeReal does not return your phone number or the matched list to advertisers. If you are in the US, your account may be deleted after three years of continuous inactivity; outside the US, the threshold is two years. Minors' approximate location is shared only if the minor actively chooses to share it. You can opt out of sale, sharing, and targeted advertising by going to Privacy settings in the App or by contacting BeReal at dpo@bere.al.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

4 important changes detected

8 versions captured · Last updated: August 2026

What changed BeReal's privacy policy footer was updated to add a navigation link to 'Child Safety' resources. This appears in the header and footer navigation alongside existing links to Legal, Privacy Policy, Terms, and other policies. The change does not modify any substantive privacy policy language, terms, data handling practices, or consumer rights.
Why this matters This change is a navigation update only. No changes to privacy policy language, data collection practices, user rights, or consumer obligations occur. The addition of a Child Safety link does not modify any substantive policy terms.
View full change record →
What changed In an update detected on August 1, 2026, BeReal added navigation links and footer references to a 'DSA Privacy Policy' across multiple pages of its privacy policy document. The previous version contained only references to the standard Privacy Policy; the updated version now includes 'DSA' as a separate linked policy option in the header, footer, and navigation menus. This change appears to introduce a distinct privacy policy framework, likely in response to Digital Services Act (DSA) compliance requirements for EU markets.
Why this matters The updated privacy policy pages now include navigation links to a separate 'DSA Privacy Policy' in the header, footer, and menu areas. This appears to be a structural change to make DSA-specific privacy disclosures more accessible to EU users. No substantive changes to data collection, processing, or consumer rights are apparent from this update alone.
View full change record →

July 8, 2026 medium

BeReal updated its privacy policy on July 8, 2026, adding email address as a required account creation field, introducing collection of inferred gender via AI analysis, and disclosing a new …

View change record →
May 29, 2026 low

BeReal restructured its privacy policy on May 29, 2026 to present data collection practices in a tabular format with more explicit categorization. The updated policy adds a new 'Transaction Data' …

View change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

72 provisions
12 featured
14 clause types
18 high severity
Liability Limitation 1 1 high
Restricted or Prohibited Content/Industries 1 1 high
Targeting and Audience Restrictions 1 1 high
Stay ahead of the changes

Monitoring

BeReal has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Account deleted after three years inactivity US and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured August 8, 2026 00:36 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000250
Version ID CA-V-005611
SHA-256 c7f67b335643057a19cf83232205180c2798bb539bf988e0dc3b56a4008cec84
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans