Privacy Policy

Last updated: April 15, 2026

Who we are

BuddyPact is an accountability buddy app available at buddypact.app and on iOS and Android. It is operated by Pawel Soderski as an independent developer. For any privacy questions, email support@buddypact.app.

What data we collect

When you use BuddyPact, we collect:

• Email address (for authentication)
• Display name, username, and avatar photo (your profile)
• Check-in photos (1-4 per check-in) and text notes
• Project names, descriptions, and categories you create
• Buddy relationships (who you're paired with)

If you sign in with Google, we receive your name and email from Google. We don't access your Google contacts, calendar, or any other data.

Why we collect it

We use your data to:

• Create and maintain your account
• Show your check-ins to your accountability buddy
• Display your profile to other users
• Send you magic link sign-in emails

That's it. We don't use your data for advertising, profiling, or any purpose beyond running the app. Our legal basis under GDPR is contract performance: we process your data to provide the service you signed up for.

Who can see your data

Your profile (display name, username, avatar) is visible to other BuddyPact users. Your projects and check-ins may appear in the app's feed and browse sections depending on visibility settings.

When you add a buddy to a project, they can see your check-ins (photos, notes, and streak) on that project, and you can see theirs. This is the core feature of the app.

How we store your data

Your data is stored on Supabase, which runs on Amazon Web Services (AWS) infrastructure. Photos are stored in Supabase Storage. All data is encrypted in transit (HTTPS) and at rest. Your data may be processed in the United States. Supabase maintains Standard Contractual Clauses for international data transfers.

On the web, your authentication session is stored in your browser's localStorage. On iOS and Android, it's stored in the device's secure storage (Keychain / Keystore). We don't use cookies.

Who we share data with

We share data with these service providers to run the app:

• Supabase (database and file storage)
• Google (if you use Google sign-in)

If you report content or block a user, we store that action to enforce it and review reports.

We do not sell, rent, or trade your personal data to anyone. We do not share data with advertisers or data brokers.

Your rights

You can:

• Access your data — your profile, projects, and check-ins are visible in the app
• Correct your data — edit your profile anytime
• Delete your data — delete your account and we will remove your data, including photos, within 30 days
• Export your data — email us and we'll respond with a copy within 30 days

These rights apply regardless of where you live. If you're in the EU, these support your GDPR rights (access, rectification, erasure, portability, restriction, objection). If you're in California, we do not sell or share your personal information as defined by the CCPA. To exercise any of these rights, email support@buddypact.app.

Data retention

We keep your data as long as your account is active. When you delete your account, it is deactivated immediately and hidden from other users. Your data is permanently deleted after 30 days. Backups that may contain your data are automatically purged within 90 days.

Children

BuddyPact is not intended for children under 13. We don't knowingly collect data from children under 13. If you believe a child under 13 is using the app, please contact us and we will delete their account.

Changes to this policy

If we make significant changes to this policy, we'll notify you through the app or by email. Minor wording changes won't trigger a notification. The "last updated" date at the top always reflects the current version.

Third-party content

Default profile illustrations are adapted from Personas by Draftbit, licensed under CC BY 4.0. Avatar generation is provided by DiceBear, MIT licensed.

Contact

Questions about privacy? Email support@buddypact.app.