Privacy, screenshots and statistics revision. Viewing this page does not record a new acceptance or replace earlier consents. View previous version
Privacy Policy
BNaked processes highly sensitive data, including inferred sexual orientation, location and intimate photos, only for requested features and with explicit consent where required.
1. Controller
Bears Naturistas SL, tax ID B67801795, Avenida Tortuga Boba, 176 - Vera, Almería, España. Privacy: bn@bnakedapp.com.
2. Data and purposes
We process account and age data; profile and preferences; sensitive sexual-life data and photos; precise location used internally for approximate ranges; likes, blocks, album permissions, messages, reports and moderation; IP, logs, device and push token; support and versioned consent evidence.
3. Legal bases
Contract (GDPR 6(1)(b)) for requested services; explicit consent (6(1)(a), 9(2)(a)) for location and sensitive data; legitimate interests (6(1)(f)) for proportionate security, fraud prevention, moderation and claims; legal obligation (6(1)(c)). Consent is separate and may be withdrawn, though dependent features may stop.
Sensitive-data consent is distinct from accepting the service terms. Contact bn@bnakedapp.com to withdraw it or exercise your rights.
4. Sharing and transfers
We do not sell data or use third-party advertising. Processors cover hosting, backups, mail, security and Firebase push. Authorities receive data where legally required. Non-EEA transfers use adequacy, Standard Contractual Clauses or another valid safeguard.
5. Retention and rights
Data remains while necessary for the account and requested features. Requesting account deletion hides the profile and revokes access; it is not instant erasure of all records or backups. The request requires processing the erasure of data no longer needed. Remaining retention must be necessary for legal obligations or legal claims, for the applicable periods and with restricted access. Backups follow a separate rotation cycle; removal from the live service does not instantly remove data from earlier backups. Contact bn@bnakedapp.com for retention information applicable to your case. No unverified technical backup-erasure deadline is promised here.
Exercise access, correction, deletion, restriction, portability, objection and withdrawal at bn@bnakedapp.com. Identity checks, if necessary, will be proportionate. We will respond within one month; any legally permitted extension due to complexity or the number of requests will be explained within that first month. Complaints may go to the Spanish Data Protection Agency.
5.1. Internal statistics and confidentiality
Statistics and CSV exports are web-only and restricted to accounts with the administrator role. They contain counts of members, registrations, last-seen activity, declared countries and cities, service activity, moderation and push delivery status. They do not contain names, email addresses, message contents, photos, tokens or exact coordinates.
These summaries support operating and assessing BNaked, not data sales, public profiles or third-party campaigns. Small groups are not automatically anonymous simply because they are counts: the dashboard and CSV files must remain confidential. Administrative access does not permit personal use or disclosure. Aggregation does not replace the legal basis required for processing the source data.
6. Security and minors
HTTPS/TLS protects data in transit. Passwords are protected with non-reversible hashing. Photos use private storage and access controls. This is not end-to-end encryption: BNaked does not currently provide end-to-end encryption for chats or albums. We do not claim encryption at rest for all disks, databases and backups without verifying their configuration.
The public Android application applies screenshot restrictions to non-administrator sessions where the device honours them. Administrator sessions and test builds may allow screenshots. The web cannot guarantee screenshot blocking; photographing a screen with another device cannot be prevented. Confidentiality rules apply even where capture is technically possible.
Under-18s are excluded. No current decision with legal effect is based solely on automation. The web uses necessary session/security cookies, not advertising cookies.