Badjo
EN UA
Download

Privacy Policy

Last updated: April 26, 2026

This Privacy Policy describes how Badjo ("we", "us", "our") collects, uses and protects information when you use the Badjo mobile application and the website at badjo.app (together, the "Service").

We built Badjo to be fun, simple, and respectful of your data. We collect the minimum we need to run the game and we never sell your information.

1. Who We Are

Badjo is a party-game application operated by an independent developer based in Ukraine. You can reach us at support@badjo.app.

2. Information We Collect

2.1 Device and usage data

When you launch the app, we generate and store on your device a random installation identifier ("installation nonce") and a stable user ID. We send these to our servers so we can authenticate your device and link your subscription. We do not link them to your name, email, or any other real-world identity unless you contact us directly.

We also process:

  • Device platform (iOS or Android) and OS version
  • App version
  • Preferred language
  • IP address (in server access logs only — used to detect abuse and resolve technical issues; see retention below)

2.2 Subscription data

If you purchase a Badjo Premium subscription, the purchase is processed by Apple App Store or Google Play — we never receive or store your payment card details. We use RevenueCat, Inc. as our subscription processor; RevenueCat receives the purchase event from the app store and tells us whether your subscription is active, when it expires, and which product (weekly / monthly / yearly) you bought. See RevenueCat's Privacy Policy.

2.3 Game data

Inside the app you may enter player names and choose game modes. Player names are stored only on your device and never sent to our servers. We do record anonymous gameplay session metadata (which mode was played, how long, how many tasks completed) so we can improve content and balance — this is linked to your stable user ID until you delete your account.

2.4 Communication data

If you email us at support@badjo.app or hello@badjo.app, we store your email address and the contents of your message so we can reply. We retain support correspondence for as long as needed to resolve the issue.

2.5 What we do NOT collect

  • We do not collect your real name, phone number or address.
  • We do not access your contacts, photos, microphone or camera.
  • We do not use third-party advertising trackers in the app.
  • We do not collect biometric data.
  • We do not require sign-up with email or social-network logins.

3. How We Use Your Information

  • To run the Service — authenticate your device, deliver content, validate your subscription, sync settings.
  • To improve the game — analyse aggregate gameplay patterns and crash reports.
  • To communicate with you — respond to support emails.
  • To prevent abuse — detect fraudulent purchases, brute-force attempts and similar.
  • To comply with the law — when required by a valid legal process.

4. How We Share Your Information

We share data only with the service providers we need to run Badjo:

  • Apple App Store / Google Play — payment processing and app distribution.
  • RevenueCat, Inc. (USA) — subscription management.
  • DigitalOcean, LLC (USA) — server hosting for the BadjoServer API and PostgreSQL database.
  • Microsoft 365 / Outlook — for incoming support email.

We may also disclose information to comply with a valid legal request or to protect our rights, property or safety. In the event of a merger, acquisition or sale of assets, your information may be transferred — we will notify you via the app or website.

We do not sell your personal information to anyone.

5. Data Retention

  • Access tokens — 1 hour from issuance.
  • Refresh tokens — 90 days from last use.
  • Server access logs (incl. IP) — 90 days, then IP fields are automatically scrubbed.
  • Gameplay session history — kept while your account exists; on account deletion the user link is removed and only anonymous aggregates remain.
  • Subscription history — retained for financial and tax-audit purposes; on account deletion the user link is removed.
  • Account-deletion audit row — when you delete your account we keep one row containing only a SHA-256 hash of your user ID, the deletion date, and the reason (if you provided one). This is the minimum we need to prove the deletion happened — it does not allow us to identify you.

6. International Data Transfers

Our backend servers are operated by DigitalOcean and located in the United States (New York region). RevenueCat is also based in the United States. By using the Service you consent to your data being transferred to and processed in the United States, with the safeguards described in this Policy.

For users in the EEA, UK and Switzerland: transfers to processors in the United States are made under appropriate safeguards including Standard Contractual Clauses or equivalent mechanisms approved under the EU-US Data Privacy Framework.

7. Your Rights

7.1 Everyone

You can delete your account and associated data at any time:

  • From inside the app: Settings → Delete my account.
  • If you already uninstalled: visit badjo.app/delete-account and submit your User ID.

7.2 EEA, UK and Switzerland (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict or object to certain processing
  • Receive a copy of your data in a portable format
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, email support@badjo.app.

7.3 California residents (CCPA / CPRA)

If you live in California, you have the right to know what personal information we collect about you, request deletion, and not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.

8. Children's Privacy

Badjo is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has used the Service, please contact us at support@badjo.app and we will delete the data promptly.

The "Spicy" and "Hardcore" game modes contain adult content and are intended only for users aged 18 and older.

9. Security

We use HTTPS for all communications between the app and our servers, store passwords for the support mailbox using industry-standard encryption, and limit administrative access to our backend. No method of internet transmission is 100% secure, but we do our best to protect your data and notify you in case of a breach affecting your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via the app or this page. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact Us

Questions about privacy? Want to exercise a right? Email us at support@badjo.app — we typically respond within 24 hours.

← Back to Badjo