Last updated: October 5, 2026
BUFFALY ("we," "our," or "us") is operated by Q2 Trade Ltd. This Privacy Policy explains how information may be collected, used, stored, and protected when you use the BUFFALY mobile application and related services.
Depending on how you use BUFFALY, we may process information such as:
We only collect information reasonably necessary to provide, maintain, secure, and improve BUFFALY.
We may use your information to:
We do not sell your personal information.
BUFFALY is designed around shared experiences between partners.
Information or content you intentionally share through a connected relationship may be visible to your connected partner.
If you or your partner add a shared couple photo, it is stored securely and is visible only to the two connected partners. It is not public, and it is deleted when you delete your account.
Memories. Photos you add to an activity are stored privately and are visible only to you and, while you are connected, to your partner. They are never public. Only the person who added a photo can delete it, and deleting it removes it from our storage. If the relationship ends, each person keeps their own photos and can no longer see the other person's. Before you connect with a new partner, you save your old photos to your phone or delete them. Photos from the activity "Get Naughty" can additionally be locked with a secret code and Face ID: the code is stored only on your device (as a salted hash in the iOS keychain), never on our servers, and Face ID is handled by iOS alone.
Hearts you tap on the main screen's heart are shown live on your connected partner's screen while their app is open. They are relayed in real time (only the tap position) and are not stored.
Please only share information you are comfortable sharing.
We may use trusted third-party service providers to operate BUFFALY, including providers for hosting, databases, authentication, analytics, notifications, crash reporting, and other infrastructure.
These providers may process information on our behalf only as necessary to provide their services.
Subscriptions and paywalls. Purchases are processed by Apple. We use RevenueCat to manage subscription status and Superwall to display and test paywalls (the screen that offers the subscription). These providers receive a random identifier for your relationship (never your name or email), your purchase and subscription status, technical app and device information (such as app and system version, device model, language and region) and how you interact with the paywall, so they can show the right paywall and evaluate which one works best. We forward paywall and purchase events, without your name or email, to our product analytics tool (PostHog). We rely on the performance of our subscription contract (Art. 6(1)(b) GDPR) and our legitimate interest in improving our offer (Art. 6(1)(f) GDPR).
Request Activity and Request Goal. If you send an activity or goal suggestion through "Request Activity" or "Request Goal" in the app, we store the text you typed together with your account identifier in our database (hosted by Supabase) so we can review it and limit abuse, and we forward the text, without any account information, by email to our support inbox through our email delivery provider Resend. We process this text on the basis of our legitimate interest in improving BUFFALY (Art. 6(1)(f) GDPR). Please do not include personal information about yourself or other people in your suggestion. Suggestions are kept until we have reviewed them and are deleted at the latest when you delete your account.
Chat Assistant (Funny Reply). If you use the Chat Assistant, the screenshot or screenshots you choose are sent through our server to an AI service provider (Anthropic), which reads the chat and writes the replies. We do not store the screenshots, and we do not keep the chat or the replies unless you rate the answers. If you rate the answers and press "Send", we store your rating (stars), your optional comment, the two rated answers and the text of the chat (written down from the screenshots, so it can contain messages written by other people, such as your partner), together with your account identifier, so we can review them and improve BUFFALY. The screenshots themselves are discarded on our side. If sending a rating does not work right away (for example without a connection), the rating and the screenshots stay temporarily in the app's cache on your own device until the rating has been sent, and are deleted after sending or after 30 days at the latest. We process this on the basis of our legitimate interest in improving BUFFALY (Art. 6(1)(f) GDPR). The text of a chat can contain personal information about you and about others: please only rate chats you are comfortable sharing. Ratings are deleted when you delete your account, or earlier on request at hello@getbuffaly.com.
Memories and challenges (photo check by an AI). Before your first photo, the app asks for your consent. After that, each photo you add is stored privately with our hosting provider (Supabase) and sent through our server to an AI service provider (Anthropic). The AI looks at the photo, checks whether it matches one of the challenges you can still unlock for that activity, and writes one short neutral sentence about what it sees. We store this sentence and the result together with the photo. Photos from the activity "Get Naughty" are never sent to the AI. The provider processes a photo only to answer this request. Without your consent, no photo is attached, uploaded or checked. We rely on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by not adding further photos or by deleting your photos, and on our legitimate interest in running this feature (Art. 6(1)(f) GDPR). Photos can show other people: please only add photos of people who are fine with it. Photos are deleted when you delete them, when you choose to delete them before connecting with a new partner, and when you delete your account.
We use reasonable technical and organizational measures designed to protect your information.
However, no online service or electronic storage system can guarantee absolute security.
We retain personal information only for as long as reasonably necessary to provide BUFFALY, fulfill the purposes described in this policy, comply with legal requirements, resolve disputes, and enforce agreements.
Depending on where you live, you may have rights regarding your personal information, including the right to:
To exercise these rights, contact us at hello@getbuffaly.com.
You may request deletion of your BUFFALY account and associated personal information by contacting hello@getbuffaly.com.
Certain information may be retained where required by law or where reasonably necessary for security, fraud prevention, dispute resolution, or other legitimate legal purposes.
BUFFALY is not intended for children under the minimum age required to use the service in their jurisdiction.
We do not knowingly collect personal information from children where doing so would violate applicable law.
Your information may be processed in countries other than the country where you live.
Where required, we use appropriate safeguards for international transfers of personal information.
We may update this Privacy Policy when BUFFALY or applicable legal requirements change.
The latest version will display its effective date at the top of this page.
For privacy questions, requests, or concerns:
Q2 Trade Ltd.Email: hello@getbuffaly.com