Privacy Policy

This Privacy Policy explains how BBL Technology Limited ("Company", "we", "us", "our"), registered at Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong, collects, uses, and protects information when you use our mobile applications and services (collectively, the "Services").

By downloading, installing, or using any of our apps, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: If you create an account, we collect your email address, username, and password (stored encrypted).
• Profile information: Optional profile photo, display name, and preferences you set.
• Communications: Messages you send to our support team via email or in-app chat.
• Purchases: When you make in-app purchases, transaction details are processed by Apple App Store or Google Play. We do not store your payment card information.

1.2 Information Collected Automatically

• Device information: Device type, operating system version, unique device identifiers (IDFV, Android ID), and hardware model.
• Usage data: Features used, session duration, screens viewed, button taps, and in-app events.
• Log data: IP address, timestamps, crash reports, and diagnostic information.
• Location: Approximate location based on IP address only. We do not collect precise GPS location unless explicitly requested by a specific feature with your consent.

1.3 Information from Third Parties

• Authentication information if you sign in using Apple Sign-In or Google Sign-In.
• Analytics and attribution data from our analytics partners.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services and apps.
• Process transactions and send related notifications (receipts, subscription renewals).
• Send service-related communications (security alerts, policy updates).
• Analyze usage patterns to improve features and fix bugs.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations under applicable Hong Kong law.
• Personalize your experience and show relevant in-app content.
• Conduct research and develop new products and features.

We do not sell your personal information to third parties. We do not use your data for targeted advertising without your explicit opt-in consent.

3. Sharing Your Information

We may share your information with:

• Service Providers: Trusted third-party vendors who help us operate our Services (e.g., cloud hosting, analytics, crash reporting, customer support). These providers are contractually required to protect your data.
• Apple / Google: When you make purchases or sign in via their platforms, your information is also governed by their respective privacy policies.
• Legal Authorities: When required by law, court order, or governmental authority under applicable Hong Kong or international law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We do not share your personal data with unaffiliated third parties for their own marketing purposes.

4. Data Retention

We retain your personal data for as long as necessary to provide the Services and for legitimate business purposes, including:

• Account data: Retained until you delete your account or request deletion.
• Usage and analytics data: Retained for up to 24 months in aggregated or de-identified form.
• Transaction records: Retained for 7 years as required by Hong Kong accounting regulations.
• Communication records: Retained for up to 2 years.

When you delete your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal compliance.

5. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Opt-out: Opt out of marketing communications at any time via in-app settings or by contacting us.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To delete your account and associated data, please visit our Delete Account page or email contact@bblvn.store.

6. Children's Privacy

Our Services are not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these age thresholds.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@bblvn.store. We will promptly delete such information from our systems.

7. Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2/1.3) and at rest (AES-256).
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments.
• Secure, encrypted storage of passwords using bcrypt hashing.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

8. Third-Party Services

Our apps may integrate with or contain links to third-party services. These third parties have their own privacy policies, and we are not responsible for their practices. Key third-party services we use may include:

• Firebase (Google): Analytics, crash reporting, and push notifications. Firebase Privacy
• Apple App Store / Google Play: Payment processing and app distribution.
• OpenAI (ChatGPT API): AI features. OpenAI Privacy
• RevenueCat: Subscription management.

9. International Data Transfers

BBL Technology Limited is headquartered in Hong Kong. Your information may be transferred to and processed in countries other than your country of residence, including Hong Kong, the United States, and other countries where our service providers operate.

Where applicable, we ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws, including Standard Contractual Clauses where required by the EU GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy and by sending an in-app notification or email for material changes.

Your continued use of our Services after the updated Privacy Policy takes effect constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: