Privacy Policy

bipo is a quick way to talk by voice with a small group of people. Some data is needed to make that work. This policy explains what data exists, why it exists, how long it is kept and what you can ask us to do at any time. We wrote it as plainly as possible.

Who is responsible for your data

bipo is an independent project run by one person, with no company behind it. Brazil's LGPD allows the data controller to be a natural person, which is the case here. This does not change your rights or our obligations.

For any personal data matter, contact privacy@bipo.chat. For support and reports, contact support@bipo.chat.

Minimum age

When bipo first opens, it asks you to confirm that you are old enough, but it does not store your date of birth. You must be at least 13 years old to use the app. If you are under 18, ask a parent or guardian to read this policy with you. If we learn that an account belongs to someone below the minimum age, the account is deleted.

Where your data comes from

• From you: when you create an account, add friends, talk to them or contact support.
• From Apple: if you use Sign in with Apple, we receive the account identifier and email address, which may be the private relay address Apple creates for you.
• From your device: device model, system version, battery level and time zone, used to operate the app and show the right information on a friend's card.

What we process and for how long

• Account creation

  Display name, email, profile photo if provided and six digit PIN

  PurposeCreate and identify your account and let friends find you by PINLegal basisPerformance of a contract under article 7, V of the LGPDRetentionWhile the account exists

• Signing in

  Access code sent by email or Sign in with Apple identifier

  PurposeConfirm that it is you signing inLegal basisPerformance of a contractRetentionThe code expires within minutes. The account link lasts while the account exists

• Messages

  Voice message audio

  PurposeDeliver your voice to the person you choseLegal basisPerformance of a contractRetentionOnly until it is delivered or deleted. It does not remain stored

• Live conversations

  Live voice streams and, when you enable the camera, real time video

  PurposeCarry the conversation between the devices you selectedLegal basisPerformance of a contractRetentionNot recorded or stored

• Bipo Translate

  Voice samples you voluntarily record and the voice clone created from them

  PurposeDub your speech into another language with a voice similar to yoursLegal basisConsent under article 7, I of the LGPDRetentionUntil you delete your voice in the app or withdraw consent

• Presence and friendships

  App presence, battery level, time zone, friends and groups

  PurposeShow who is available before you speak and warn you when a message would arrive silentlyLegal basisPerformance of a contractRetentionWhile the account exists. Presence is overwritten whenever it changes

• Notifications

  Device notification identifier

  PurposeMake a message arrive on your phoneLegal basisPerformance of a contractRetentionWhile the app is installed

• Operation and failures

  App usage events, device model, system version and error reports

  PurposeFind what broke and fix itLegal basisLegitimate interest under article 7, IX of the LGPDRetentionUp to 7 days for usage events and up to 90 days for error reports

• Support

  What you write to us and the contact address used

  PurposeReply and solve the issueLegal basisLegitimate interestRetentionUp to 2 years after the support request

• Website language

  Approximate country, browser languages, time zone and manual language preference

  PurposeOpen the landing page in the most likely language and remember your choiceLegal basisLegitimate interest under article 7, IX of the LGPDRetentionThe country code stays in your browser for up to 30 days. Your manual choice remains until you change it

We do not sell any of this or show advertising inside the app. A Bipo Translate clone is created only with express consent, can be deleted in the app and is not used to train general models. Voice samples and the clone comparison stay private. Only authorized administrators may access them for quality review, every access is logged, and the files are deleted when you delete your voice.

Who we share data with

To operate bipo, some providers process data on our behalf and under our instructions:

• Google Firebase: authentication, database, voice message storage, notifications and error reports.
• LiveKit: live voice transport between devices.
• Fish Audio: voice clone creation and synthesis only when you enable Bipo Translate.
• Apple: Sign in with Apple and notification delivery.
• Resend: delivery of access codes by email.
• country.is: approximate country detection to select the landing page language.

We may also share data when required by law, ordered by a competent authority or needed to investigate abuse and protect people who use the app.

International transfers

These providers operate servers in other countries, so your data may be processed outside Brazil. When that happens, we require contractual safeguards equivalent to those required by the LGPD.

Your rights

• Confirm and access: find out whether we process your data and receive a copy.
• Correct: ask us to correct incomplete, outdated or incorrect data.
• Delete: delete your account in Settings or ask us to delete it.
• Port: take your data to another service in a readable format.
• Object and withdraw: object to processing based on legitimate interest or withdraw consent you have given.
• Be informed: know who receives your data and what happens if you refuse a request.

To exercise any of these rights, write to privacy@bipo.chat. We reply within 15 days. If you are not satisfied, you may submit a complaint to Brazil's National Data Protection Authority at gov.br/anpd.

Security

Conversations travel encrypted between your device and our servers. Internal access to data is limited to the people who need it to operate the service. No system is infallible. If an incident creates a relevant risk to you, we will notify you and Brazil's National Data Protection Authority as required by law.

If this policy changes

We review this text from time to time. If a change is significant, such as processing new data or using it for a different purpose, we will notify you by email or in the app before it takes effect.