Privacy Policy — B7R

Last updated: October 2026 · Privacy Policy · Terms of Service · Refunds · About · Child Safety Standards · Account deletion

This policy describes what B7R collects about you, why, where it is stored, and when it is erased. It matches, point for point, the Data safety declaration published on the app's Google Play listing.

1) What we collect directly from you

• At sign-up (required): your email address, a password stored only as a one-way hash (we never see it and cannot recover it), and the username you choose.

• Signing in with your Google, Facebook or X account (an optional alternative to a password): we never see your password at the provider. After you approve on its screen, the provider sends us your account identifier there, your name, your email address and the link to your profile picture there; X also sends your X username, the website link written in your X profile (if any) and the date your X account was created. These are kept in your account record at our authentication service (Supabase). Your in-app profile takes only two things from them, both of which you can change: an initial username (the name the provider sent, or the part of your email before "@" if it sent no name) and an initial profile picture, which is the link to your picture at the provider — so the image stays on the provider's server, and the device of anyone who views it loads it from there. We do not read your contacts, friends, followers or posts at the provider, we never post anything in your name, and we neither use nor store in our database the sign-in token the provider issues. Deleting your account erases all of this.

• What you write or upload (optional): profile photo and cover, post images and text, your bio, and the names and covers of rooms, families and events you create.

• Your messages: private messages, room / group / family / game-table chat, and reactions to them — including images and voice notes you send in private messages.

• Your date of birth — required, not optional. We ask once, on first use, and the app cannot be used until you answer. There is one reason and no other: the app is for adults aged 18 and over, and this is what verifies that. It is not shown to anyone but you, it is written once, and you cannot change it yourself afterwards; if it is wrong, contact support.
• Optional profile details: gender, nationality, occupation.

2) What is recorded automatically while you use the app

• A device identifier: a random string generated inside the app and kept in your browser storage — it is not an advertising ID: we do not read IMEI, the advertising ID, or any operating-system identifier. Its only purpose is to prevent ban evasion and duplicate accounts. We use it to link accounts used on the same device: if an account is banned, the ban or a review may extend to other accounts that appeared on that device.

• A notification token (if you allow notifications): when you agree to notifications, your phone's system (through Google Firebase Cloud Messaging) or your browser issues a token for that device, and we keep it linked to your account so that we send your notifications to that device only, together with your notification preferences: sound, vibration, "do not disturb" hours and your time zone. No one but our server reads this token; it is removed when you sign out of your account on that device, and erased when you delete your account. A notification's text is short and says who did what ("sent you a new message", "visited your profile") — we never put the text of your private messages in a notification, because it may appear on the lock screen.

• A money record: top-up requests, coins spent, gifts sent and received, transfers, game and casino rounds, and in-app items purchased.

• In-app activity: rooms you enter, who you follow, likes, profile visits, daily tasks, level and experience points, game results and leaderboards.

3) Identity verification data (entirely optional — collected only if you apply)

We ask for it from anyone who applies to verify their identity: a broadcaster applying for approval, an agency owner, and a top-up agent. It is: your legal name as printed on a government ID, date of birth, a photo of the ID, a selfie, and a phone number.

The images are kept in a private bucket that no public link can open, and only authorized staff holding a dedicated permission can view the application and its documents when reviewing it — and every view is logged: who opened which document, and when. This application asks for no banking data: no account holder name, no account number, no IBAN, no card number. The payout account number is asked elsewhere and later — when requesting a withdrawal of earnings, where the applicant types it themselves.

Top-up agents on our website: a person applying to work as an agent is asked for a photo of their ID so that we can verify them, and an agent buying coins from us uploads the bank-transfer receipt so that we can approve the payment. All of these documents and receipts are kept in private storage; on our side only authorized staff can view them, and every such view is logged. An agent's WhatsApp number is shown to the public only if the agent agrees to it.

4) What we do NOT collect — stated plainly

• No geographic location at all. The app never requests location permission, never reads GPS, and never derives your location from your IP address. The "show which room I am in" setting refers to a room inside the app, not a place on Earth.

• No contacts, no calendar, no SMS, no web browsing history, no list of installed apps.

• No advertising and no trackers: the app contains no third-party advertising or analytics SDK of any kind.

• No crash reports are transmitted: the in-app diagnostic log stays on your device and is never sent to any server.

• No videos you upload: no storage bucket in the app accepts a video file from users.

• Face filters analyze the face in the camera image on your device only, to place the filter. No data about your face is sent, stored or shared.

5) Why we collect what we collect

• App functionality: account, messages, rooms, games, gifts, balances.
• Account management: sign-in, password recovery, verification.
• Fraud prevention, security and compliance: content filtering, handling reports, preventing ban evasion and duplicate accounts, integrity of the money record.
• Personalization: suggestions shown to you and leaderboard ordering.

We do not use your data for advertising and we do not sell it to anyone.

6) Content moderation

Messages and posts pass through an automatic filter that hides violating content. If content is reported, the admin team can view it in order to decide the report. This is a safety requirement, not an option, and it is stated here so you know it before you write.

Staff may be present in public rooms without being shown, for safety and moderation.

7) Where your data is stored, and who processes it on our behalf

On Supabase servers (authentication, database and files), Cloudflare (application hosting), and Agora (real-time voice and video transport inside rooms). These are service providers processing data on our instructions, not third parties using it for their own purposes. All connections to them are encrypted in transit.

Live voice and video in rooms passes through Agora in real time and is never recorded or stored by us.

Phone notifications pass through Google Firebase Cloud Messaging, which receives a notification's text and your device's token in order to deliver it, on our instructions and on our behalf. Browser notifications pass through your browser's push service (from Google, Mozilla or Apple, depending on the browser) encrypted, so that service cannot read their text.

In the "watch together" feature a YouTube player is shown inside the room; when it plays, your device connects to YouTube servers directly and Google's privacy policy applies to that connection.

Buying coins inside the app goes through Google Play: you pay Google, we ask Google to confirm that the receipt is genuine, and then we add the coins to your balance. We never see your card number and never store it — the card stays with Google. We keep only the purchase receipt, so that it can be recorded against your account and so that the same receipt cannot be used twice.

We take a daily backup of the database, so that people's accounts and balances are not lost if something breaks. It contains what the database contains — including your messages, your email address and your money record — and it is kept in cloud storage at Google and GitHub, with a copy sent to the operating team's mailbox. Nobody but the operating team opens it, it is not given to anyone, and it is used only to restore the service after a failure.

We do not share your data with any third party for their own purposes, we do not sell it, and we do not use it for advertising.

Public and private files: profile photo and cover, post images, and room / family / event covers live in publicly readable buckets — anyone holding the image URL can open it. Private-message media and identity photos live in private buckets that no public link can open.

8) Your right to deletion

You can delete your account and your data yourself from inside the app at any time, and deletion is immediate: Profile → Settings → Privacy & Security → "Delete account". Full detail is in the "Account deletion" section, published at /delete-account.html.

Your images are erased from storage itself, not merely unlinked: whatever the app is permitted to erase is erased at that moment, and whatever it is not — including the identity photo and selfie — is captured in a closed queue and erased from storage by a server-side job running with an administrative key, which then measures that the file is no longer there.

9) What we keep after deletion, and why

These alone remain, and they remain detached from your name, email and photo, because those are erased:

• Messages you sent to other people stay in the inboxes of those who received them, shown as "Deleted account" — so that someone who has harmed another cannot erase the evidence from their victim's inbox by deleting their own account.
• The record of real-money top-ups, balance changes, and refunds — an accounting obligation.
• The gift record, because a gift you sent is another person's income and that person still exists.
• Content reports as a safety record, with your name and the reporter's name removed.
• If an active ban was in force on your account at the time of deletion: your device fingerprint alone (with no name, no email, and no information about you) is added to the banned-device list.
• A code derived from your device identifier — a one-way fingerprint that cannot be turned back into the identifier, with no name, no email and no information about you — remains as a marker that an account was registered from that device, so a new account from the same device is not counted as a newly invited friend.

10) Children

The app is for adults aged 18 and over, and we do not knowingly collect children's data. It contains open chat between adults, in-app purchases, and games of chance played with a virtual currency that cannot be cashed out. If we learn that an account belongs to someone under 18, we close it and erase its data.

11) Contact

For any question about your privacy, to request a copy of your data, or to request its deletion: privacy@4usparty.com — or through the "Support" section inside the app.

12) On the website only: top-up, agents and identity verification

What this section describes is collected on our website 4usparty.com only; the Android app collects none of it.

Topping up coins from the top-up page. You type the account ID you want to top up, and we show that account's name and picture so you can confirm it; then you choose a package and a payment method. The payment itself happens on the payment provider's page: the provider receives and processes your card or payment-method details, and we send it neither your name, nor your email, nor your account — only the order number, its amount and a description of the package. We keep: the ID you typed and the account that receives the coins, the package with its price and coins, the payment provider and method, our order number and the provider's transaction number, the amount and currency paid, and the order's status and times. From the provider's notification, whose authenticity we verify, we keep a one-way fingerprint of the payment method or contact detail it reports (a masked card number, a saved payment-method token, an email or a phone number) and a masked description of it, such as a card's last four digits — to detect fraud and alert our admins. We never receive or store your full card number. We also keep a one-way fingerprint of the internet address a lookup came from (not the address itself) to limit how many lookups can be made: it is erased from the lookup log after one day, and stays with the payment order if you continue to payment.

Agents. An agent application is made from the "My account" page and collects: your full name as on your ID, your country and city, a WhatsApp number, a photo of the front of your ID (and the back if you attach it), and your consent with its time. ID photos are kept in a private storage bucket; the full WhatsApp number and the ID photos are revealed only to our authorised admin team, and every reveal is recorded. The public "Approved agents" page shows the agent's name as written in their application, their country and city, and a verification mark — the WhatsApp number is shown only if its owner agreed to it in their application. When an agent buys coins by bank transfer we keep: the amount, the platform account transferred to, the transfer reference number, and the receipt image or file in private storage with its digital fingerprint; our authorised crediting team views it and every view is recorded, and the receipt is a financial record that is kept after the account is deleted. A complaint about an agent is kept with its text and the account that filed it; our admin team reads it, and the agent complained about cannot see it.

Gem sales between hosts and agents. When a host or an agency owner sells gems to an agent from the "My account" page, we keep: both parties, the number of gems and their value, the price in rials, the coins the agent receives, the order's status and times, and the reason for a cancellation or a dispute if one was written. Payment between the two parties happens outside the app; for it we neither ask for nor store either party's bank details. Our admin team reviews a dispute to decide it.

Identity verification for agency owners and top-up agents. It is made from the "My account" page and collects exactly what broadcaster verification in section 3 collects — your name as on your ID, date of birth, a photo of the ID, a selfie and a phone number — under the same rules. Verification does not turn your account into a broadcaster account. The ID photo, the selfie and the phone number are erased thirty days after the request is decided, or once a request has waited thirty days without a decision, or when you withdraw it yourself; the request record stays without the photos or the number.