Privacy policy

Controller

Christian Baracchi
Email: badi.buddy.app@gmail.com

No advertising, no tracking

The app contains no advertising and no analytics or tracking tools. We don’t sell data.

What data we process

• Google account: when you sign in, Google gives us your email address, your name, the link to your profile picture and an identifier. We never show the name from your Google account. Only if you choose “Real name” for your name do we offer you your first name to pick.
• Apple account (iPhone only): if you sign in with Apple, we receive an identifier and an email address – if you wish, an anonymous relay address from Apple. We don’t ask for your name.
• Signing up in the app: date of birth (only to check that you are at least 18) and invitation code.
• Profile: chosen name, profile picture (an emoji), private or public, the app language and a fixed ID for support (duck species_number); the app only shows the ID to you, in the settings.
• Swims: water, date (with time for “on site”), travel, water temperature, points and the buddies you add as having been there.
• Location, only with your permission: the map starts where you are; for this it stays on the device. For “Nearby” suggestions the app sends it to our server, which doesn’t store it. If you log a swim “on site”, we store the exact point, the GPS accuracy and the distance to the water as proof.
• Social: your buddies, Quak!, blocks, reports and your activity notifications.
• Buddy codes: for each code we only store a check value (hash), who showed it and who scanned it. Codes are valid for 2 minutes and are deleted at the latest two days after they expire.
• Camera, only with your permission: to scan the buddy code. No pictures are stored or transmitted.
• Contact profile, only if you switch it on: gender, municipality (centre, rounded), interests, wishes (gender, age groups), a confirmed contact email as well as contact requests and contacts. We calculate the age group from your date of birth. Your wishes may allow conclusions about personal preferences; we only use them for matching and show them to nobody.
• Usage statistics: the last day you opened the app, the app version and Android or iOS with the operating system version. From this we count how many people use the app per day, week and month – only as a number, without storing who. No analytics or tracking tool.
• Crash reports: if the app crashes or an error occurs, it sends a technical report (error message, place in the code, app version, device type and operating system) to Sentry – without name, email address or location.
• Technical data: every connection involves IP address, time and information about the app. The services below store these briefly in their logs.
• Beta sign-up on badi-buddy.app, only if you sign up there: first name, email address, phone type (Android or iPhone) and language. We only use them to send you the link to the test version and an invitation code; for this we add Android addresses as testers on Google Play.
• Reports about waters, only if you make one: reason and note; for a missing water the name, type, the position of the pin and note. We use them to improve the list of waters and send you a notification when they are done.

Who sees what

• Your buddies see your swims (water, day, water temperature and travel, never the exact location), your rank and your stats – swims right after you log them.
• If you add buddies to a swim, they immediately get a notification with the water and the day. In the feed your buddies see who you swam with – the names only if they are buddies with those people themselves, otherwise only the number.
• Only your buddies see your individual swims (water, day, points, water temperature, travel). Everyone else sees your name and the number of your buddies; with a public profile also your profile picture, your points for the year and your waters with the number of swims (not your rank) – swims only count for this from midnight after the day of the swim – as well as your points in the public leaderboards and water leaderboards. With a private profile none of this appears. The app shows nobody but you whether your profile is private or public. New accounts are private.
• With the contact profile switched on, others with a contact profile whose wishes you match (and vice versa) see: name, profile picture, age group, gender, municipality with rounded distance, interests, swims this year and “Badi Buddy since” – in the search and in your profile. Your email address is only visible to people whose request you accepted or who accepted yours – until one of you ends the contact or you become Badi Buddies. Your contacts always see your contact profile. Communication and meetings take place outside the app.
• Water statistics count people and swims anonymously, including those of private profiles; other people’s swims only count there from midnight, as in the public lists.
• Never visible to others: email address, Google name, date of birth and GPS points.

Services we use

• Supabase (Supabase Inc., USA): database and sign-in. The data is stored in a data centre in Zurich.
• Google (Google LLC, USA): sign-in with your Google account.
• Google Play (Google LLC, USA): distributes the app for Android. For the closed test we add the Google addresses of Android testers there.
• Apple (Apple Inc., USA): sign-in with the Apple account (iPhone only) and distribution of the test version via TestFlight.
• Expo (650 Industries Inc., USA): distributes app updates. At startup the app checks there for updates; this involves technical data (IP address, app version, device type).
• swisstopo (Federal Office of Topography): the app loads the map images directly from federal servers; this involves your IP address and the map section. If you search for a place on the map, the search term goes to swisstopo’s search service.
• FOEN and Alplakes (Eawag): our server retrieves the water temperatures itself. No data about you is transmitted.
• Brevo (France): sends the confirmation code to your contact email. The address and the code are transmitted.
• Sentry (Functional Software Inc., USA): collects the crash reports. The data is stored in a data centre in Frankfurt (EU).

Disclosure abroad

Supabase, Google, Apple, Expo and Sentry are based in the USA and may access data for operations and support. The privacy terms and contracts of these providers apply.

How long we keep data

• Account, profile and swims: until you delete your account (⚙️ Settings → Delete account). We then delete all your data.
• Exact GPS points of “on site” swims: 30 days. The swim itself remains.
• Activity notifications: 90 days.
• Last active day, app and operating system version: until you delete your account. The counts per day, week and month contain no personal data.
• Contact profile, contact email, open requests and contacts: until you switch off the contact profile. Declined and expired requests (without personal data): 90 days. Confirmation codes: 15 minutes, deleted after two days at the latest.
• Crash reports: at most 90 days.
• Beta sign-up: until the end of the beta or until you ask for deletion.
• Reports about waters: they improve the list of waters and are therefore kept – if you delete your account, without any link to you.
• Service logs: according to their retention periods, usually a few days.

Security

All connections are encrypted. Access rules in the database make sure everyone only sees what they are allowed to see.

Your rights

You can request information about your data, have incorrect data corrected, have it deleted or receive it in a common format. To do so, write to badi.buddy.app@gmail.com. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC).

Minimum age

Badi Buddy is for ages 18 and up.

Changes

If the app changes, for example with partner ads, we will update this policy. The version in the app applies.