Privacy Policy

App: BestieClub  |  Last updated: September 13, 2026

BestieClub ("we", "our", or "us") is a social mobile application for users aged 18 and older that helps women connect, communicate, organize and join real-life events and activities.

This Privacy Policy explains what personal data we collect and process, why we process it, the service providers we use, how long information may be retained, and the rights available to users.

1. Information We Collect

Depending on the features you use, BestieClub may collect or process:

• Account and authentication information: phone number and SMS authentication information, or information provided through Google Sign-In such as email address, display name and profile photo.
• Profile information: name, age, gender, biography, profile photo, city and information related to your connections with other users, including follows and blocks.
• Verification selfie: BestieClub may require a private selfie during account setup for verification and safety purposes. Automated face detection may be performed on the device.
• Identity verification information: for features requiring identity verification, BestieClub uses Didit. Didit may process an identity document, selfie/liveness information and information contained in the identity document, such as date of birth. BestieClub may receive and store verification results and limited verification attributes, such as verification status, verification date/method and verified birth year.
• Legacy verification information: where the legacy BestieClub verification process is used, an identity document image and verification video may be securely uploaded for administrative review.
• Location information: with your permission, BestieClub may access precise device location for map functionality and event creation. Event locations and coordinates may be stored as part of event information.
• Event and participation information: events you create or join, participant information, invitations, attendance and check-in information.
• Communications: messages sent in event group chats, direct messages between users, and messages sent to the official BestieClub assistant/chat.
• Safety and moderation information: reports submitted about users or content and information needed to investigate abuse, spam, safety issues or violations of our Terms.
• Push notification information: device notification tokens used to deliver notifications when permission has been granted.
• Subscription information: subscription status and identifiers necessary to provide BestieClub Pro. BestieClub does not receive your full payment-card details from Apple.
• Event payment information: for paid real-world event reservations, BestieClub uses Stripe to process payments, refunds and related transaction activity. Stripe may process payment information such as card details, billing information, transaction identifiers and fraud-prevention signals. BestieClub does not receive or store full payment-card numbers or card security codes.
• Device, diagnostics and analytics information: technical information such as device/operating-system information, crash diagnostics, application integrity signals and limited analytics information used to maintain, secure and improve the service.

2. How We Use Information

We process information as necessary to:

• create, authenticate and manage accounts;
• provide profiles, social connections and communication features;
• display relevant events and map functionality;
• allow users to create, join and participate in events;
• perform identity and age-related verification where required;
• provide and manage BestieClub Pro subscriptions;
• process paid event reservations, payments, refunds and related transaction records;
• send requested service and push notifications;
• prevent fraud, duplicate identity use, abuse and spam;
• investigate reports and enforce our Terms and safety rules;
• maintain the security, reliability and performance of BestieClub;
• comply with applicable legal obligations.

Where required by applicable law, processing is based on performance of our agreement with you, your consent, our legitimate interests in operating and securing BestieClub, or compliance with legal obligations.

3. Service Providers and Data Sharing

We do not sell personal data.

Information may be processed by service providers necessary to operate BestieClub, including:

• Google Firebase — authentication, database, storage, cloud functions, analytics, crash reporting, push notifications and application integrity/security services.
• Google Sign-In — account authentication.
• Google Maps Platform — maps and location-related functionality.
• Didit — identity document, selfie/liveness and identity verification processing.
• RevenueCat — management and validation of subscription status and entitlements.
• Apple App Store — processing of iOS in-app subscription transactions.
• Stripe — processing of payments, refunds, connected organizer accounts and related transaction/fraud-prevention information for paid real-world events.
• OpenAI — processing of messages sent to the BestieClub AI/official assistant in order to generate responses.

We may also disclose information where required by law, to protect users or the service, to investigate fraud or abuse, or to establish, exercise or defend legal claims.

4. Data Retention and Account Deletion

Users may request deletion of their BestieClub account through the functionality provided in the app.

When an account is deleted, account and profile information, private contact and verification records, stored verification evidence and associated profile media are deleted or removed in accordance with the application's deletion process.

Some information may need to remain after account deletion where deletion would affect other users or where retention is necessary for safety, fraud prevention, dispute resolution or legal obligations.

In particular:

• past events and certain events involving other participants may remain, but the deleted organizer's identity may be removed or anonymized;
• messages already sent in shared conversations or direct-message conversations may remain as part of the conversation history available to other participants;
• safety and moderation reports may be retained where necessary to protect users, investigate abuse and enforce our rules;
• limited security information may be retained where reasonably necessary to prevent fraud or misuse of the service.

Information is retained only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

5. Age Requirement

BestieClub is available only to persons aged 18 or older. Users are required to confirm that they are at least 18 years old before proceeding with the service.

Identity verification features may also provide age-related information from verified identity documents. If we determine that an account belongs to a person under 18, we may restrict or terminate the account and delete associated personal information as appropriate.

6. Security

BestieClub uses technical and organizational safeguards designed to protect personal information, including encrypted network communication, access controls, Firebase security mechanisms and application/device integrity protections.

No internet-based service can guarantee absolute security. Users should also protect their account credentials and report suspected unauthorized access.

7. Your Rights

Subject to applicable law, including the EU General Data Protection Regulation (GDPR), users may have the right to:

• request access to their personal data;
• request correction of inaccurate data;
• request deletion of personal data;
• request restriction of certain processing;
• object to certain processing;
• request data portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the competent data-protection supervisory authority.

Users in Bulgaria may contact the Bulgarian Commission for Personal Data Protection (CPDP) regarding their data-protection rights.

Requests concerning personal data may be sent to: miragrandcollection@gmail.com

8. Permissions and User Choices

Location, notifications and other device permissions are requested only where needed for relevant functionality. Permissions may be changed through device settings.

Users may manage or delete their BestieClub account through the options available in the application.

9. Changes to This Privacy Policy

We may update this Privacy Policy when BestieClub, our service providers or applicable legal requirements change. The current version will be published at this URL with an updated "Last updated" date.

Material changes may also be communicated through the application where appropriate.

10. Contact

For questions, privacy requests or concerns regarding this Privacy Policy, contact:

miragrandcollection@gmail.com