Privacy policy

1. Data controller

The data controller is Adplico LTD, a private limited company registered at Companies House under number 17289732, whose registered office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. It publishes Bushiline.

For any question about your data: support@bushiline.com or +33 7 43 51 38 01.

2. The data we process

We only collect what Bushiline needs to work:

• Account: email address, password (stored only as an irreversible hash), Apple identifier if you use “Sign in with Apple”, passkeys, two-factor settings, language, versions of the terms you accepted.
• Profile: name, @handle, photo, bio, job, country and city, and any information you choose to add.
• Content: posts (and the hashtags they contain), comments, listings, messages, photos, videos and voice notes. Photos are re-encoded by our servers, which removes their metadata, including GPS coordinates.
• Connections: follows, blocks, message requests.
• Groups: the groups you create or join (name, photo, description, public or private), your role (admin or member), when you join and leave, the invitations you send or receive and your answers, and the messages, photos, videos and voice notes exchanged in the group.
• Certification: if our team certifies your account, the date of certification, a category (public figure, business, association, media or content creator) and a reason noted by the team. Only the “certified” badge is visible to others; the category and reason stay internal to the team.
• Lives: the lives you start (title, start and end times, number of viewers and hearts), the comments and hearts you send during a live, and your date of birth, which is only used to check the age required to broadcast and is never shown to others.
• Activity: posts you watch, likes, comments, saves, shares and the days you use the app (see “Your activity”).
• Globe (only if you turn it on): an approximate location, rounded to about 1 km by the app then reduced to the precision you chose, and the matching place name. Your exact location is never sent or stored.
• Marketplace: your listings and their pickup place, rounded to about 1 km by the app. To show how far listings are, the app also sends an approximate location (about 1 km) that is not stored: the server's technical logs do not keep the full address of requests.
• Invitations: your email address if you asked to be invited (see “Email invitations”).
• Technical data: signed-in devices (model, last activity), sessions, IP address and approximate city of sign-ins, notification tokens, security logs, server technical logs. App crash reports: what the app was doing when it stopped (for example compressing a video, with the file's size and length), the device model and system, the app version.
• Your exchanges with us: reports, appeals, messages to support.

3. Why, and on what legal basis

• Providing the service (account, profile, posts, Marketplace, messaging, groups): performance of our contract, i.e. the terms of use.
• Certifying some accounts to help members recognise authentic accounts: our legitimate interest.
• Personalising “For you”, suggesting accounts to follow and computing statistics from your activity: our legitimate interest in offering a useful feed and useful accounts and measuring how the service is used.
• Showing your location on the Globe and sending you notifications: your consent, which you can withdraw at any time in the app or your device's settings.
• Sending you an invitation you asked for: your consent.
• Protecting members and the service (fighting fraud, bots and abuse, account security, moderation, including the automatic check of published texts and messages against a list of banned words): our legitimate interest.
• Complying with our legal obligations (retention of connection data, responding to authorities, handling illegal content).

4. What others can see

Your profile, posts and listings are public in the app and can be viewed through a share link on bushiline.com. If your account is certified, the “certified” badge appears next to your name there. Your email address is never shown to other members. Your messages are only visible to the people in the conversation. Your location only appears on the Globe if you turned it on, to the people you chose and at the precision you chose. Search in Messages only looks through the conversations you are part of.

The hashtags (“#word”) in your posts make them appear on each hashtag's page, in the app and on bushiline.com. The app also suggests “Accounts to follow”: your profile (name, photo, @handle, job, city, country and “certified” badge) may be suggested to other members, in particular those in your city or country and those you follow, with the reason (“Follows you”, your city, “Popular”, “Just joined”…). It is never suggested to a member you blocked or who blocked you, nor while your account is suspended.

A public group is visible to everyone: its name, photo, description, number of members and the names and photos of some of its members appear in the app and on its bushiline.com page, which anyone can view, even without an account. If you join a public group, your name and photo may therefore appear there. A private group is only visible to its members and the people invited, and only its members can see who belongs to it. A group's messages are visible to its members, each from the time they joined.

We do not sell your data and do not show targeted advertising.

5. Your activity

To run “For you” and statistics, we record your activity in the app: the posts you watch, your likes, comments, saves and shares, the accounts you follow and the days you use the app.

“For you” mixes posts from the accounts you follow with posts the community enjoyed that you haven't seen yet. Your statistics show the views, likes, comments and new followers of your posts; views are counted without saying who watched. Accounts to follow are ranked using city, country, number of followers and posts, and the days of use over the last 7 days. The days you use the app are also used to send you a reminder when you haven't been around for a few days, if you allowed notifications; you can turn these reminders off in Settings › Notifications.

This processing is based on our legitimate interest and happens entirely on our side: no third-party analytics or advertising tool receives this data.

6. Email invitations

If you asked to join Bushiline, our team may send you an invitation by email. We record your email address, the language of the invitation, any note added by the team and the dates it was sent. This processing is based on your consent: you asked for the invitation.

The same address receives at most 3 invitation emails over 30 days and 5 in total. Each email says where your address came from and contains a “Stop receiving invitations” link: the invitation is then deleted and we only keep an irreversible hash of your address, to respect your refusal.

7. Our processors

We use service providers that process some data on our behalf, on our instructions:

• Cloudflare (United States): hosting of the app and website, database, storage of media and backups, sending emails, protection against attacks, server technical logs.
• Apple (United States): “Sign in with Apple” and delivery of notifications on iPhone and iPad (Apple Push Notification service).
• Google (United States): delivery of notifications on Android (Firebase Cloud Messaging) and distribution of the app on Google Play.
• Expo (650 Industries, United States): app updates, for which the app sends its system, its version and a random installation identifier, and relaying notifications to Apple and Google (notification token and notification content).
• Mapbox (United States): displaying the Globe map, searching for the places you type in the Globe and turning an approximate location into a place name (country, city, neighbourhood). Mapbox telemetry is turned off in the app.
• Namecheap (United States): receiving and forwarding emails sent to support@bushiline.com and hello@bushiline.com.

Each of these providers is bound by contract to provide the same or equal protection of data as described here.

When you choose a password, our servers check that it does not appear in a known data breach using the Have I Been Pwned service: only the first 5 characters of its hash (SHA-1) are sent, which reveals neither the password nor your identity. No other third party receives your data.

8. Transfers outside the European Union

Adplico LTD is established in the United Kingdom, which the European Commission recognises as providing adequate data protection. Some of our providers process data in the United States. These transfers are covered by safeguards recognised by the GDPR: an adequacy decision (Data Privacy Framework) or the European Commission's standard contractual clauses.

9. Retention periods

• Account, profile and content: as long as your account is active. Content you delete is removed immediately.
• After an account deletion request: 30 days of deactivation (so you can change your mind), then permanent erasure. You then leave your groups and your messages there are replaced by “Message deleted”; the group photos you added and your group invitations, sent or received, are erased.
• Proof that you accepted the terms (version, date, IP address): as long as your account exists.
• Globe location: replaced at each update, no longer shown after 30 days without an update and erased after 90 days; erased immediately if you turn off sharing or delete your account.
• Posts you have seen: the same day and the day before, so they are not shown to you again. Statistics (views counted per post, days of use): 400 days.
• Groups: a group and its messages remain as long as it has at least one member. If you leave a group, your messages remain visible to its members. When its last member leaves or the moderation team deletes it, its messages, photos, videos, voice notes and invitations are erased.
• Group invitations: until you answer. A declined invitation stays on record, so that the same group does not invite you again straight away, until the group or your account is deleted.
• Certification (date, category, reason): as long as your account stays certified; erased if you change your @handle or delete your account.
• Notifications: 90 days.
• View-once photos and videos in chat: erased 15 minutes after being opened, or 14 days after being sent if never opened.
• Codes sent by email: valid for 15 minutes, erased no later than 2 days after they expire. Media uploaded but never published: 24 hours.
• Email invitations: 1 year after the last email that led to no sign-up; erased immediately if you refuse invitations. Sending history: 90 days. Hash of an address that refused: as long as the refusal stands.
• Connection data (IP address, date and time): 1 year, as required by law, including after the account is deleted.
• Server technical logs: 7 days.
• App crash reports: 30 days.
• Reports, sanctions and appeals: as long as the account concerned exists, to prevent repeat abuse; erased with it. The log of the team's decisions is kept so that we can account for them.
• Backups: encrypted, erased 90 days after creation. The database also keeps a 30-day restore history.
• Lives: the video is deleted within 24 hours after the live ends; a live's comments are kept 30 days after it ends, to handle reports, then deleted; the live's information (title, times, counters) stays as long as your account exists.

10. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, the right to withdraw your consent at any time, and the right to set instructions for what happens to your data after your death.

Most of these rights can be exercised directly in the app: edit your profile, export your data (archive sent by email), turn off the Globe or notifications, delete your account. You can also delete your account at bushiline.com/supprimer-mon-compte, or write to us at support@bushiline.com; we reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, with the authority of your country or, in the United Kingdom, with the ICO (ico.org.uk).

11. Security

Exchanges are encrypted (HTTPS). Passwords are protected by strong hashing and never stored in plain text. You can turn on passkeys and two-factor authentication. Chat media is stored in a private space, readable only by the people in the conversation. Our team's access to data is limited to what is necessary and logged.

12. Minors

Bushiline is for people aged 16 and over. If you think a younger child is using Bushiline, write to us: we will delete their account.

13. Cookies

The bushiline.com website uses no analytics and no advertising. It only sets two strictly necessary cookies: one remembers the language you chose, the other protects the site's forms (account deletion, appeals, account lock, refusing invitations). The app uses no advertising trackers.

14. Changes

We may update this policy. For important changes, we will tell you in the app. Each version is dated and numbered.