BeMyF Help center
Back to help center Privacy

BeMyF Privacy Policy

Information about what data we process, why we process it, how long we store it and what rights users have.

1. Data controller

  1. The controller of personal data of users of the BeMyF app is IC SOFTWORKS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Krakow, at ul. Adama Vetulaniego 5A / 148, 31-226 Krakow, entered in the register of entrepreneurs of the National Court Register under KRS number 0001238658, NIP: 9452331059, REGON: 544882763.
  2. The controller can be contacted by e-mail at: kontakt@icsoftworks.pl.
  3. This Privacy Policy explains what data we process, why we process it, how long we store it and what rights users have.

2. Scope

  1. This Privacy Policy applies to the BeMyF app, user accounts, community features, chat, photos, coins, reports, blocks and other features available in the app.
  2. BeMyF is an app intended only for adults who are at least 18 years old.
  3. Minors may not use the app.

3. What data we may process

Depending on how the app is used, we may process the following categories of data:

  1. Account data:
  • e-mail address,
  • user identifier,
  • first name,
  • last name,
  • username,
  • information about adulthood confirmation,
  • account status,
  • e-mail verification status,
  • information whether the account is a Creator/F'ka account.
  1. Profile data:
  • profile picture,
  • profile description,
  • short description,
  • social media provided by the user or Creator,
  • Creator photo gallery,
  • access price set in coins.
  1. Communication data:
  • text messages,
  • photos sent in chat,
  • information about conversation participants,
  • message sending time,
  • message read status,
  • history of access to Creator profiles and chats.
  1. Coin and payment data:
  • coin balance,
  • coin purchase history,
  • history of coin use in the app,
  • information about purchased packages,
  • transaction identifiers,
  • information necessary to verify purchases through Apple App Store or Google Play,
  • information about voluntary support for Creators,
  • identifier of the user sending support,
  • Creator identifier,
  • number of coins used,
  • event time,
  • information necessary to settle the Creator program.
  1. Data concerning access to Creator profiles:
  • user identifier,
  • Creator identifier,
  • access status,
  • start date,
  • end date,
  • number of months of access,
  • number of coins used for access or extension.
  1. Report and moderation data:
  • reporting user,
  • reported user,
  • reported message or conversation,
  • report reason,
  • report description,
  • report status,
  • moderation actions,
  • information about blocks.
  1. Technical and safety data:
  • push notification token,
  • device and platform information,
  • technical logs,
  • data necessary for Firebase, App Check and notifications to work,
  • information about errors and technical events, if processed.
  1. Account deletion data:
  • deletion request date,
  • account e-mail address,
  • information needed to confirm the user's identity,
  • request status.

4. Passwords and login

  1. Login and authentication in the app are handled by Firebase Authentication.
  2. The Controller does not store the user's password in plain text.
  3. The user is responsible for keeping their password and access to the device used with the app confidential.

5. Purposes of data processing

We process user data for the following purposes:

  1. creating and maintaining the account,
  2. enabling login,
  3. verifying the e-mail address,
  4. confirming adulthood,
  5. displaying the user's or Creator's profile,
  6. enabling communication between users,
  7. handling photos, galleries and messages,
  8. handling coins and in-app purchases,
  9. verifying transactions made through Apple App Store or Google Play,
  10. handling access to Creator profiles,
  11. handling voluntary support for Creators, recording coin use and calculating Creators' revenue share in accordance with the Creator program rules,
  12. sending push notifications,
  13. handling reports, blocks and moderation,
  14. counteracting abuse, scams, spam and safety violations,
  15. enforcing the Terms and Community Standards,
  16. fulfilling account and data deletion requests,
  17. contacting the user,
  18. performing legal obligations,
  19. pursuing claims or defending against claims,
  20. ensuring stability, security and operation of the app.

6. Legal bases for processing

Depending on the purpose of processing, data may be processed on the basis of:

  1. performance of a contract or taking steps before entering into a contract,
  2. legal obligations imposed on the Controller,
  3. the Controller's legitimate interest, such as safety, moderation, prevention of abuse, pursuing claims and ensuring operation of the app,
  4. the user's consent, if required in a given case, for example for certain notifications or system permissions.

7. Push notifications

  1. The app may send push notifications, for example about new messages or events in the app.
  2. Push notifications may require the user's system consent.
  3. The user may disable notifications in the device settings.
  4. An FCM token linked to the user's device may be used to handle notifications.

8. Private messages and reports

  1. Private messages are part of the app's communication feature.
  2. The Controller does not treat messages as public.
  3. Messages may, however, be technically processed, stored, delivered to recipients and analyzed in the event of a report of a violation, safety threat, suspected scam, abuse, violation of law, violation of the Terms or Community Standards.
  4. If a user reports a message, the Controller may process the content of the reported message, the context of the report and data of users connected with the matter.

9. Photos and media

  1. Users may send photos in chat, and Creators may add profile pictures and galleries.
  2. Photos are processed to operate app features, display profiles, support communication and moderation.
  3. The user should publish only photos to which they have rights and which do not violate privacy, law or app rules.
  4. Photos violating the Terms, Community Standards or law may be removed.

10. Coins and payment data

  1. Coin purchases are handled by Apple App Store or Google Play.
  2. The Controller may process information necessary to confirm a purchase, add coins to the account, prevent abuse and handle complaints.
  3. The Controller does not store the user's full payment card data.
  4. Payment data may be processed by Apple or Google in accordance with their own rules.
  5. Coins are a digital unit used only in the BeMyF app.
  6. When the voluntary support feature is used, the Creator may receive information in the app about the name or username of the supporter and the number of coins used for support. The Creator does not receive payment card data or access to the user's payment account.

11. External services and technology providers

To operate the app, we may use external services, in particular:

  1. Firebase Authentication — user login and accounts,
  2. Cloud Firestore — app database,
  3. Firebase Storage — storage of photos and attachments,
  4. Firebase Cloud Messaging — push notifications,
  5. Firebase App Check — app protection,
  6. Firebase Cloud Functions — backend logic,
  7. Apple App Store — handling purchases on iOS,
  8. Google Play — handling purchases on Android,
  9. providers of BeMyF website hosting,
  10. e-mail providers used to contact users.

If in the future the app starts using additional tools such as analytics, crash reporting, advertisements or advertising SDKs, the Privacy Policy should be updated.

12. Who we may share data with

Data may be shared with:

  1. technical service providers necessary for the app to operate,
  2. app store operators for payment handling,
  3. entities providing hosting, mail, infrastructure or security services,
  4. persons authorized by the Controller,
  5. public authorities, if required by law,
  6. entities supporting the Controller in pursuing claims or defending against claims.

13. Transfers of data outside the European Economic Area

  1. Some technology services used by the app may involve processing data outside the European Economic Area.
  2. In such cases, the Controller applies appropriate safeguards required by data protection law, in particular mechanisms offered by service providers, standard contractual clauses or other legally permitted bases for data transfer.

14. Data retention period

  1. Account data is stored for the duration of the account's existence.
  2. Data concerning transactions, payments, complaints, settlements or legal obligations may be stored for the period required by law or the period needed to pursue claims and defend against claims.
  3. Messages, photos and other User Content are stored for the period needed for the app to operate, unless they are deleted earlier or there is a basis for further storage.
  4. Reports, blocks, violations and moderation data may be stored for the period needed to ensure safety, prevent abuse and defend against claims.
  5. After account deletion, data is deleted or anonymized unless law or justified safety, accounting or legal purposes require further storage.

15. Account and data deletion

  1. The user may request deletion of the account and data.
  2. The request may be submitted through the feature available in the app or by contacting the Controller at: kontakt@icsoftworks.pl.
  3. The Controller may require confirmation of the user's identity, for example by sending a message from the e-mail address linked to the account.
  4. We fulfill account deletion requests without undue delay, usually within up to 30 days, unless law or special circumstances require a longer period.
  5. Some data may be retained in anonymized or restricted form if necessary for legal, accounting, safety, abuse prevention or claims-related reasons.

16. User rights

The user has rights resulting from personal data protection law, in particular:

  1. the right of access to data,
  2. the right to rectification of data,
  3. the right to deletion of data,
  4. the right to restriction of processing,
  5. the right to data portability,
  6. the right to object to processing,
  7. the right to withdraw consent if processing is based on consent,
  8. the right to lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office.

17. Data security

  1. The Controller applies organizational and technical measures intended to protect user data against unauthorized access, loss, change or disclosure.
  2. Access to data is limited to people and services that need it to perform specific purposes.
  3. The user should also take care of the security of their account, password and device.

18. Data of minors

  1. The BeMyF app is intended only for adults.
  2. We do not knowingly collect data of people under 18 years of age.
  3. If we have a justified suspicion that an account belongs to a minor, we may verify, limit, block or delete it.
  4. Reports concerning the potential involvement of minors are treated as a priority.

19. No advertising or advertising analytics

  1. As of the publication date of this version of the Privacy Policy, the app does not use advertisements or external advertising SDKs.
  2. If advertisements, advertising analytics, tracking tools or similar technologies are added in the future, the Privacy Policy will be updated.

20. No external artificial intelligence services

As of the effective date of this version of the Privacy Policy, the BeMyF app does not use external artificial intelligence services to process messages, photos, profile data or other users' personal data.

The onboarding conversation with Oliwka visible in the app is a static, previously prepared tutorial. Replies are stored in the app and are not generated by an external AI model.

Messages, photos, profile data or other users' personal data are not sent to an AI service provider.

If BeMyF starts using external AI services in the future, users will receive the required information, the Privacy Policy will be updated, and consent will be obtained to the extent required by law and platform rules.

21. Changes to the Privacy Policy

  1. The Privacy Policy may be updated, in particular in the event of changes to app features, technology providers, law or Apple App Store and Google Play requirements.
  2. The user may be informed about material changes in the app or electronically.
  3. The current version of the Privacy Policy is available in the app and in the BeMyF Help Center.

22. Contact

For matters concerning privacy, personal data, account deletion or safety, the Controller may be contacted at: kontakt@icsoftworks.pl.