If you live in the EU, UK, or California, you have specific legal rights over your personal data, including the ability to ask BeReal to show you, correct, delete, or transfer your data, or to stop certain uses of it.
This analysis describes what BeReal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights give users in covered jurisdictions meaningful control over their personal data, but they are only valuable if users know they exist and how to exercise them.
Interpretive note: The specific operational procedures for submitting and fulfilling rights requests (including identity verification steps and response timelines) are not fully detailed in the available policy text.
This provision grants EU, UK, and California users enforceable rights to access and delete their data, which means you can ask BeReal to remove your dual-camera photos, location history, and usage data from their systems.
How other platforms handle this
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.
This Privacy Notice contains the following sections: ... 8. Additional Information for California Residents ... 9. Additional U.S. State Privacy Disclosures
Monitoring
BeReal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data. EU and UK users may also have the right to object to or restrict certain processing. California residents may have the right to know, delete, correct, and opt out of the sale or sharing of their personal information.— Excerpt from BeReal's BeReal Privacy Policy
(1) REGULATORY LANDSCAPE: GDPR Articles 15 through 22 establish the data subject rights referenced (access, rectification, erasure, restriction, portability, and objection). UK GDPR contains equivalent rights. CCPA/CPRA establishes the right to know, delete, correct, and opt out of sale or sharing for California residents. BeReal as a French-headquartered entity (Vibe SAS) is primarily supervised by the CNIL for EU matters, and by the UK ICO for UK matters. California enforcement sits with the California Privacy Protection Agency and the California Attorney General. (2) GOVERNANCE EXPOSURE: Medium. The policy discloses these rights at a general level, which is a positive compliance indicator. However, the operational adequacy of the rights fulfillment process (response times, identity verification procedures, and completeness of data returned) is not fully detailed in the available policy text, and represents a standard area of regulatory examination. (3) JURISDICTION FLAGS: EU/EEA (GDPR, one-month response deadline with possible two-month extension), UK (UK GDPR, equivalent timeline), California (CCPA/CPRA, 45-day response deadline with possible 45-day extension). Users in other US states with enacted privacy laws (Virginia, Colorado, Connecticut, Texas, Oregon, Montana) may also have similar rights that are not explicitly addressed. (4) CONTRACT AND VENDOR IMPLICATIONS: BeReal's data processing agreements with all sub-processors must include provisions requiring sub-processors to assist BeReal in fulfilling data subject rights requests, particularly deletion requests affecting distributed data sets such as cloud-stored imagery. (5) COMPLIANCE CONSIDERATIONS: Legal teams should audit the current rights request fulfillment workflow to confirm it meets GDPR's one-month response requirement and CCPA's 45-day deadline. The identity verification process should be reviewed to ensure it does not create excessive barriers to exercising rights. Records of rights requests and responses should be maintained as evidence of compliance.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights give users in covered jurisdictions meaningful control over their personal data, but they are only valuable if users know they exist and how to exercise them.
This provision grants EU, UK, and California users enforceable rights to access and delete their data, which means you can ask BeReal to remove your dual-camera photos, location history, and usage data from their systems.
ConductAtlas has identified this type of provision across 4 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by BeReal.