Privacy Policy

Controller and scope

BERACE is published by Apex Development, 60 rue François Ier, 75008 Paris, France, SIRET 941 693 194 00016. This policy covers the iOS and Android apps, berace.app and associated services. Privacy requests may be sent to contact@berace.app.

Data we process

Depending on the features used, BERACE processes the following categories of data.

• Account and profile data: internal ID, username, display name, email, hashed password, language, country, preferences and Apple or Google sign-in data.
• Product activity: predictions, rankings, private teams, chat messages, quizzes, games, badges, subscriptions and feature usage.
• Technical data: IP address in server logs, device and app information, installation or advertising identifiers when permitted, push token and security events.
• Campaign and conversion data: acquisition source, campaign, installation, app launch, registration, first prediction, checkout and purchase events.
• Optional permissions: location, calendar, camera, photo library and notifications when enabled on the device.

Purposes and legal bases

Data is used to provide and secure the service, calculate predictions and rankings, operate social features, manage BERACE Pro, prevent fraud, diagnose errors and improve the product. Depending on the processing, BERACE relies on performance of the service or contract, legal obligations, legitimate interests, or consent for advertising, marketing attribution, advertising identifiers, Session Replay and optional device permissions where required.

Amplitude and Session Replay

Amplitude receives account and device identifiers, product events and profile properties such as username, email, language and premium status to measure journeys and improve BERACE. Analytics is routed to Amplitude’s EU region and IP collection is disabled in our configuration. On iOS, up to 10% of eligible sessions may be reconstructed through Session Replay to identify usability issues. Replay can reproduce parts of screens and interactions and is not intended to collect passwords or payment details.

Advertising and attribution partners

The data available to each partner depends on device settings and consent choices. AppsFlyer is BERACE’s preferred attribution source; selected events may also be sent directly to TikTok or Meta for campaign measurement and optimization.

• AppsFlyer: device and advertising identifiers, BERACE user ID, campaign source, installs, launches and in-app conversion events for attribution, campaign measurement and fraud prevention.
• TikTok for Business: app, device and matching data, including account ID and email, plus install, launch, registration, first-prediction and purchase events for attribution, optimization and permitted audiences.
• Meta: BERACE user ID, Meta anonymous ID, permitted advertising identifier, installs and content, registration, prediction, checkout and purchase events for measurement and optimization.
• Google AdMob: device and app information, IP address, permitted advertising identifiers, consent choices and ad interactions to serve personalized or non-personalized ads and measure performance.

Subscriptions and other providers

Apple App Store or Google Play bills purchases. RevenueCat receives the BERACE user ID, email, store transaction and subscription status, premium entitlements and selected AppsFlyer or Meta attribution identifiers to manage BERACE Pro and measure revenue. BERACE does not receive full payment-card details. Firebase and Apple or Google notification services process a technical push token. The contact form uses Google reCAPTCHA to prevent spam.

Consent and controls

Where applicable, Google’s consent platform records advertising choices before ads are loaded. On iOS, App Tracking Transparency controls access to the advertising identifier. Refusing may limit personalization and attribution without necessarily preventing aggregated or strictly necessary measurement permitted by law. Location, calendar, camera, photos, notifications and tracking permissions can be changed in device settings.

Retention, security and transfers

Account and product data is retained for the life of the account, then deleted or anonymized subject to backups, disputes and legal duties. Technical, support, analytics and advertising data is retained for a period proportionate to its purpose and provider settings. AppsFlyer generally limits end-user data to 24 months unless otherwise instructed or required; Amplitude replay retention depends on the account plan and is generally 30 days, with documented extensions possible. Providers may process data outside the EEA, including in the United States or Israel, using applicable adequacy decisions, standard contractual clauses, data-processing agreements or equivalent safeguards. BERACE uses encrypted communications, hashed passwords, access controls, logging and protected infrastructure.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Delete the account in the app or contact contact@berace.app. You may also complain to the CNIL or your local data-protection authority. BERACE does not sell personal data for monetary compensation; some advertising transfers may nevertheless qualify as sharing under certain laws.