BeReal collects personal data including photos, location information, device data, and usage information as part of providing the service, and this data may be shared with third parties including analytics providers and advertising partners.
This analysis describes what BeReal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
BeReal's core product involves capturing dual-camera photos at random moments, which means the app regularly collects images of your face and surroundings, and the terms govern how that sensitive data is used and shared.
Interpretive note: The specific data collection disclosures are contained in BeReal's Privacy Policy rather than the Terms of Service; the exact terms text is not available in the truncated HTML, and this analysis reflects publicly known BeReal data practices and applicable regulatory requirements.
By using BeReal, you consent to the collection of photos, location data, and other personal information; EU users have rights to access, correct, and delete this data under GDPR, while California users have similar rights under CCPA.
How other platforms handle this
Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the collection, use, and disclosure of your information as described in our Privacy Policy.
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
Monitoring
BeReal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
(1) REGULATORY LANDSCAPE: Data collection practices engage GDPR for EU and EEA users (with the CNIL as lead supervisory authority), CCPA and CPRA for California residents, COPPA for users under 13 in the US, and potentially Illinois BIPA if facial images are processed as biometric identifiers. The collection of precise location data and front-camera images raises particular sensitivity under these frameworks. (2) GOVERNANCE EXPOSURE: High. The dual-camera photo feature is central to BeReal's product and inherently involves collection of facial images and environmental context at unpredictable times. If these images are processed using facial recognition or similar biometric techniques, exposure under BIPA and GDPR's special categories of personal data provisions is significant. Location data collection raises additional exposure under CCPA and GDPR. (3) JURISDICTION FLAGS: Illinois BIPA creates heightened exposure for facial image collection and processing. GDPR imposes strict requirements on processing of biometric data as a special category. California CPRA grants additional rights regarding sensitive personal information including precise geolocation and biometric data. France's CNIL has historically been active in enforcement against consumer platforms. (4) CONTRACT AND VENDOR IMPLICATIONS: All third-party analytics, advertising, and data processing vendors must have appropriate data processing agreements in place under GDPR Article 28. Any cross-border data transfers to non-EEA countries must rely on an adequate transfer mechanism such as Standard Contractual Clauses. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should conduct a data mapping exercise to identify all categories of personal data collected through BeReal, audit consent mechanisms at account creation and ongoing, verify data retention schedules, and assess whether the privacy notice adequately describes data sharing with third parties at the level of specificity required by GDPR and CCPA. A data protection impact assessment may be warranted given the scale and sensitivity of photo and location data collection.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
BeReal's core product involves capturing dual-camera photos at random moments, which means the app regularly collects images of your face and surroundings, and the terms govern how that sensitive data is used and shared.
By using BeReal, you consent to the collection of photos, location data, and other personal information; EU users have rights to access, correct, and delete this data under GDPR, while California users have similar rights under CCPA.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by BeReal.