Globugg Privacy Policy

Operator / data controller: Bavity LLC ("Bavity," "Globugg," "we," "us")
Last revised: 22 October 2026 · Effective: 17 October 2026
Website: https://globugg.com · Privacy: [email protected] · Postal address: 5301 Alpha Road, Suite 80-709, Dallas, TX 75240, United States

1. Scope and responsible organization

This Privacy Policy describes how Bavity LLC handles personal information when you visit Globugg, create an account, watch or submit a Bugg (a short video pinned to a real place), interact with other users, view past Buggs, receive notifications or nearby alerts, buy a boost, contact support, or use our website and mobile apps (together, the Services). It applies to users worldwide, subject to the country-specific rights in Section 13. Bavity LLC is the controller ("business") for the data it decides how to use; some partners act as independent controllers for their own services (Section 6).

Public posting warning: Buggs, profile information, captions, comments and the places Buggs are pinned to can be seen by others (by everyone, or only your approved followers if your account is private), and others can screen-record or share them. A Bugg's location shows where you were. Don't reveal someone else's private address or sensitive information. A "live" label doesn't guarantee a video is accurate, safe or verified.

2. Data we obtain

Payments: we never see or store full card numbers. For boosts bought in the iOS app, Apple processes the payment and we receive a signed transaction record; Google Play does the same on Android. On the website, Stripe collects your card details; we receive the payment status, amount, Stripe's reference IDs and the email you used.

We don't ask for sensitive information, but a video or its location can reveal it (for example, health, religion, political views or children). Please don't post sensitive information about other people.

3. Sign in with Apple or Google, and Google Limited Use

If you sign in with Google, we receive your Google account's unique ID, your email address and whether it's verified. Google's basic sign-in also shares your name and profile picture; we don't store or show them (your Globugg name is the username we generate, unless you change it). If you sign in with Apple, we receive your Apple ID's unique ID and an email address (your own, or a private relay address if you choose Hide My Email); Apple may share your name the first time, which we don't store. We never receive your Google or Apple password, and Google Sign-In gives us no access to your Gmail, Drive, contacts or other Google data. Removing Globugg's access in your Google or Apple settings doesn't delete your Globugg account; delete it in Settings (Section 12).

Google API Services User Data Policy / Limited Use: Globugg's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to sign you in and provide the Services; we don't use it for advertising, sell it, or transfer it except as needed to run the Services or as the law requires, and people at Bavity can access it only where needed for security, support or legal reasons.

4. Why we use personal data, and our legal bases (EEA/UK)

Where we rely on legitimate interests, we weigh them against your rights, taking particular care with young people. Where we rely on consent, you can withdraw it at any time (it doesn't affect earlier use). Allowing location or notifications isn't consent to marketing. Accepting the Terms isn't treated as consent for optional uses.

5. Who can see content

Buggs and comments from public accounts can be seen worldwide, with your username, the time, the place, counts and interactions. If your account is private, only you and the followers you approve can see your Buggs, past Buggs and their comments; your username, display name, profile photo and follower counts stay visible so people can find you. A Bugg leaves the map when it expires (at most 3 hours, longer if boosted or sponsored) and then stays on your profile as a past Bugg for up to one year, after which the video is deleted. Deleting a Bugg removes it from the map, your profile and our storage. Others may already have screen-recorded or shared it, which we can't undo.

6. Service providers and other recipients

We also share information: (a) with people, according to who can see the content; (b) with professional advisers under confidentiality; (c) to comply with the law or valid legal process, or to protect people from harm; and (d) in a merger, acquisition or restructuring, with appropriate safeguards. We don't add trackers or advertising partners without updating this policy and asking for any consent required.

7. No sale of personal information; no targeted advertising

We don't sell personal information, and we don't share it for cross-context behavioral (targeted) advertising. Globugg has no advertising pixels or ad SDKs. Google Analytics runs only on our website, only after you accept analytics cookies, with advertising features turned off. If this ever changes, we'll update this policy, give any required notice and opt-out (including a "Do Not Sell or Share My Personal Information" link), and honor recognized opt-out signals where the law requires.

8. Push notifications and email updates

If you turn on notifications, your phone (through Apple or Google) or your browser gives us a push token: an address for delivering notifications, not payment information. We store it with your account until you turn notifications off, sign out on that device, it stops working, or you delete your account. We use it for the notifications you've enabled: likes, follows, follow requests, comments and replies, new Buggs from people you follow, and nearby alerts. Turn them off in Profile → Settings → Notifications or in your phone or browser settings.

Email updates (newsletter). We send marketing emails (news, new features and highlights, about once a month) only if you say yes: in the prompt after you sign up, or in Profile → Settings → Notifications → Email updates. Nothing is pre-selected and saying no doesn't affect your account. We record your choice and when you made it. Every email has a one-click Unsubscribe link, and you can turn updates off in Settings at any time; we stop within a few days at most. We use only your email address for this (our legal basis is your consent), send through Mailgun, and never sell or share the list.

9. Nearby alerts and your rough area

When Nearby drops is on, the app rounds your location to about 1 km before sending it, and our servers keep only the grid square of about 5 km × 5 km that contains it. When someone posts a Bugg within about 8 km of that square, you may get an alert (at most one every 30 minutes). The rough area is updated only while you use the app (no background location), is stored with your notification settings until you turn alerts off or delete your account, and isn't sent to Mapbox. Turn alerts off in Profile → Settings → Notifications → Nearby drops, or revoke location permission in your device settings; everything else keeps working. We never show anyone your location because you turned on alerts. A Bugg you post is pinned to the place you choose, and that place is visible to the Bugg's audience.

10. Cookies, analytics and preferences

We use strictly necessary cookies and device storage to keep you signed in, protect sign-in, count each view once and remember your settings. On our website, Google Analytics runs only after you choose Accept in the cookie banner; Decline is just as easy, and you can change your choice in Profile → Settings → Privacy & safety → Analytics cookies. The iOS and Android apps don't use Google Analytics. Details are in our Cookie Policy.

11. International processing and transfers

Globugg's data is stored and processed in the United States (Microsoft Azure Central US; Cloudflare R2 for videos and images; Cloudflare's network delivers content worldwide). Our providers may access it from other countries. Where we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on a valid transfer mechanism, such as the European Commission's Standard Contractual Clauses (with the UK Addendum) or a recognized certification, in our providers' data processing terms.

12. Retention, deletion and requests

Delete your account any time in Profile → Settings → Delete account, or email [email protected]. That permanently deletes your profile, sign-in links, Buggs and their videos, comments, likes, follows, saved Buggs, activity and notification settings, and signs you out everywhere. We keep purchase records (as required by law) and reports about content (to keep the community safe), without your profile; your username stays reserved so nobody can pretend to be you. Download your data any time in Profile → Settings → Download your data (one file with your profile, Buggs, comments, likes, follows, saves and activity).

13. Your rights by region

EEA, UK and Switzerland: you can ask to access, correct, erase, restrict or port your data, object to processing based on legitimate interests, withdraw consent, and challenge decisions made solely by automated means that significantly affect you. You can complain to your local data protection authority (in the UK, the ICO). We reply within one month (extendable where the law allows).

California and other U.S. states with privacy laws: you can ask to know and access your data, get a portable copy, correct it, delete it, and opt out of sale, sharing, targeted advertising or significant profiling (we don't do these), and appeal our decision. We won't discriminate against you for using your rights, and we honor recognized opt-out preference signals where required. Send requests to [email protected]; you can appeal a decision by replying to our answer. Authorized agents can make requests where the law allows; we may verify your identity and their authority.

Everywhere else: you may have further rights under local law. Contact us and we'll handle your request under the law that applies.

14. Young people

Globugg is for adults: you must be at least 18 (or the age of majority where you live, if higher) to use it. We don't knowingly collect personal information from anyone under 18. If we learn that someone under 18 is using Globugg, we close the account and delete their data as the law requires. If you believe someone under 18 is using Globugg, email [email protected].

15. Security

We protect your data with encryption in transit (HTTPS) and at rest, access limited to the people who need it, short-lived sign-in tokens, monitoring and backups. Globugg has no passwords to steal: you sign in with Apple, Google or a one-time email code. No system is perfectly secure; we'll notify you and regulators of a data breach when the law requires.

16. Automated content review

Before a Bugg goes live, frames from its video are checked by Azure AI Content Safety; profile photos, captions, names, bios and comments are checked the same way before they appear. When you change or remove your profile photo, we delete the old one. Content that clearly breaks our rules is blocked automatically, and reported content is reviewed by people on our team. Automated checks can make mistakes; you can appeal (see our Content and Safety Reporting Policy). We don't use your content to train AI models.

17. Changes and contact

We may update this Policy and will publish the new effective date. For material changes we'll tell you in the app before they take effect, or ask for your consent where required. Questions or requests about your data: [email protected], or write to Bavity LLC, 5301 Alpha Road, Suite 80-709, Dallas, TX 75240, United States. Copyright, safety and removal requests have their own channels in our Content and Safety Reporting Policy.