Privacy Policy

1. Who is the data controller

Beyanka Network LTD, a company registered in England and Wales (“Beyanka”), the operator of beyanka.com, is the controller of your personal data. Contact: privacy@beyanka.com.

2. What we collect

• Account data — email, password hash, sign-in metadata.
• Profile data — name, age, photos, tagline, location, occupation, pronouns, interests and questionnaire answers you choose to provide.
• Content — posts, messages, comments, gifts and sparks you send or receive.
• Payment metadata — when you buy credits, our processor (Stripe) handles your card details; we only store the transaction reference and amount.
• Technical data — device, browser, IP address (for security and abuse prevention), and minimal error logs.
• Verification data (only if you opt into ID verification) — documents you upload, processed by us and our verification sub-processor.

3. Why we use it (legal bases — GDPR Art. 6)

• Performance of a contract — to provide the Service to you.
• Legitimate interest — security, fraud and abuse prevention, product analytics in aggregate form.
• Consent — optional features such as ID verification, marketing emails (if/when offered).
• Legal obligation — tax records, responding to lawful requests from authorities.

4. What we do NOT do

• We do not sell or rent your personal data.
• We do not share your data with advertisers or data brokers.
• We do not use your private messages or photos to train third-party AI models.
• We do not run third-party advertising or behavioural tracking pixels.
• We do not process the personal data of anyone under 18.

Because we do not “sell” or “share” personal information as defined by the California CCPA/CPRA, no “Do Not Sell or Share My Personal Information” opt-out is required; you may still exercise the rights described below.

5. Sub-processors

We rely on a small set of vetted providers to operate Beyanka:

• Cloud hosting and database — for storing accounts, profiles, posts and messages.
• Stripe — for processing credit purchases. Card details never reach our servers.
• Email delivery — for transactional messages (password reset, security alerts).

Each sub-processor is bound by a data-processing agreement. International transfers from the EU/EEA rely on the European Commission’s Standard Contractual Clauses.

6. Retention

• Account and profile data: until you delete your account.
• Messages: kept until you or your conversation partner delete them, or 24 months after account deletion, whichever is earlier.
• Payment records: 10 years for tax-law compliance.
• Security and abuse logs: up to 12 months.

7. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting prior lawful processing;
• (EU/EEA) lodge a complaint with your local supervisory authority;
• (California) request information about categories collected and request deletion.

To exercise any of these rights, email privacy@beyanka.com. We respond within 30 days.

You can also submit a request through our in-app form: Data Rights Requests.

8. Security

We use encryption in transit (TLS), encrypted storage at rest, row-level access controls and the principle of least privilege. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR Art. 33–34.

9. Children

Beyanka is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

10. Changes to this policy

We will notify you of material changes by email or in-app at least 30 days before they take effect.