The policy states that all users globally are granted rights to access, rectify, erase, restrict, object to, and port their personal data, as well as to withdraw consent, with some rights (rectification, deletion, consent withdrawal) exercisable directly in the app and all rights exercisable by contacting dpo@bere.al. French users are additionally granted a post-mortem data instruction right.
This analysis describes what BeReal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that BeReal extends GDPR-equivalent data subject rights to all users globally, not only those in jurisdictions where such rights are legally mandated. The policy identifies dpo@bere.al as the contact for rights requests and states a 45-day response window for access, deletion, correction, and portability requests under U.S. law, with California opt-out requests processed within 15 business days.
The updated policy now requires email address in addition to phone number, full name, and date of birth to create an account. BeReal discloses that it derives likely gender from your username, first name, and biography using AI, and uses this classification for internal targeting purposes. The policy also reveals that a randomized sample of 0.001% of users will have their interface interactions (touches and swipes) recorded through an analytics partner for up to 90 days to understand how users navigate the app; this practice does not apply in all geographic regions. You can review your app settings or contact BeReal to inquire about your data collection status.
View change record →Under this provision, all BeReal users may submit requests to access, correct, delete, or port their personal data, or to object to or restrict processing, regardless of their jurisdiction, by contacting dpo@bere.al or using in-app controls in the settings section. The agreement states that BeReal will respond to access, deletion, correction, and portability requests within 45 days, with extensions permitted where applicable law allows.
Cross-platform context
See how other platforms handle User Data Rights (Global and U.S.-Specific) and similar clauses.
Compare across platforms →"Privacy is a fundamental human right. That means every person that uses our App, irrespective of where they reside, can expect the same things from us. Whether you are in Europe, one of the 50 U.S. States, Latin America, the Middle East, Africa, Japan, Asia Pacific, or anywhere in between, you can: Right to access and obtain a copy of your data... Right of rectification... Right to erasure/deletion... Right to restrict processing... Right to withdraw your consent... Right to object... Right to portability... Right to set instructions for how your data is processed post-mortem...Excerpt from BeReal's Privacy Policy
REGULATORY LANDSCAPE: This provision reflects commitments under GDPR (Articles 15-21), CCPA/CPRA, and analogous U.S.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that BeReal extends GDPR-equivalent data subject rights to all users globally, not only those in jurisdictions where such rights are legally mandated. The policy identifies dpo@bere.al as the contact for rights requests and states a 45-day response window for access, deletion, correction, and portability requests under U.S. law, with California opt-out requests processed within 15 business days.
Under this provision, all BeReal users may submit requests to access, correct, delete, or port their personal data, or to object to or restrict processing, regardless of their jurisdiction, by contacting dpo@bere.al or using in-app controls in the settings section. The agreement states that BeReal will respond to access, deletion, correction, and portability requests within 45 days, with extensions permitted …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by BeReal.