Privacy Policy

Privacy at a glance

Bromio processes account information, Profiles, Content, Encounters, messages and device information to provide and secure the Bromio service.

We use selected service providers for push notifications, crash reporting, analytics, app infrastructure and purchases. We do not receive your complete payment-card or banking credentials from Apple or Google.

You can request access to, correction of or deletion of your personal data. You can also manage your account and request account deletion from within the Bromio app.

Bromio does not sell personal data.

Who is responsible for your data

Bromio GmbH is responsible for the processing described here.

Email: usama.khan@bromio.com

Data we collect

Account and authentication data

• first name and optional last name
• email address
• date of birth
• optional pronouns, country and current position
• Profile name and optional Profile headline
• Bromio user ID
• authentication and session information
• password-reset information

Your password is transmitted for authentication but is not persistently stored by the Flutter app.

Device and installation information

• a randomly generated installation identifier
• device type, model and operating-system information
• app version
• notification permission status
• Firebase installation and session identifiers

Profiles and Content

• Profile names, headlines, images and visibility settings
• Profile order and associations
• Content labels, descriptions, text and dates
• email addresses, phone numbers and links entered as Content
• manually entered locations
• uploaded images
• Bromicon references
• collection and Profile associations

Encounters and social activity

• Encounter identifiers and connection relationships
• shared Profiles and Content
• timestamps and unread status
• collection membership
• pinned and muted settings
• last-message previews and related metadata

Chat and communications

• message text
• image messages and captions
• sender and recipient identifiers
• Encounter and message identifiers
• reply references
• delivery, read, edit and deletion information
• temporary client message identifiers
• presence and active-chat information

Bromicons and collections

• Bromicon identifiers, quantities and acquisition dates
• ownership and transfer information
• transfer recipients and quantities
• collection or folder names
• associations between collections and other Bromio items
• search, filter and sorting choices

QR codes and media

• public Profile URLs
• scanned QR-code values
• images selected from the camera or photo library

Camera frames used to scan QR codes are processed on the device and are not uploaded to Bromio by the Flutter app.

How we use your data

We process personal data to:

• create and manage Bromio accounts
• authenticate users and restore sessions
• provide Profiles, Content, Encounters, Chat and Bromicons
• deliver push notifications
• process reports and enforce community rules
• provide support and respond to feedback
• diagnose crashes and technical problems
• prevent fraud, abuse and security incidents
• process purchases and maintain purchase records
• comply with legal and regulatory obligations

Depending on the activity, processing may be necessary to perform our agreement with you, comply with legal obligations, protect our legitimate interests or act on your consent.

Profiles, Content and sharing

Profiles and Content are created by users. Depending on the selected privacy settings, this information may be visible to other Bromio users through Encounters, shared Profiles, Chat or public Profile links.

You are responsible for ensuring that you have permission to upload or share personal information belonging to another person.

Information that another user has already received, copied, screenshotted, exported or shared outside Bromio may remain outside our control after you delete the original item.

Chat, reports and moderation

Bromio processes Chat information to deliver messages, synchronize conversations, show delivery and read states, and support replies, editing and deletion.

The current Bromio app does not provide client-side end-to-end encryption. Do not send highly confidential information through Bromio Chat.

Reports and moderation

Users may report Profiles, Chat messages, Encounters or users. Reports may include:

• the selected report reason
• an optional description
• the reported Profile, message or Encounter identifier
• the reporter and reported-user identifiers
• information required to investigate the report
• the moderation decision and actions taken

We use this information to investigate possible violations of our Community Guidelines, prevent abuse, remove inappropriate content and restrict or suspend accounts where appropriate.

Reporting is confidential. Bromio does not disclose the reporter’s identity to the reported user unless legally required.

Read our Community Guidelines for more information about prohibited content and behaviour.

Notifications and diagnostics

Push notifications

To provide push notifications, we may process:

• Firebase Cloud Messaging registration tokens
• Apple Push Notification Service identifiers
• notification permission and preference settings
• notification title, body, image and routing information
• notification delivery, read and open information

Push delivery uses Google Firebase Cloud Messaging and Apple Push Notification Service. Notification content depends on the notification type and may include message-related information.

Crash reporting and analytics

Bromio uses selected Firebase services, including:

• Firebase Crashlytics
• Firebase Sessions
• Firebase Installations
• Google Analytics for Firebase where enabled

These services may process:

• crash reports and stack traces
• app and operating-system versions
• device model and architecture
• installation and session identifiers
• app interaction and technical diagnostic information

We use this information to identify crashes, measure technical performance and improve the reliability of Bromio.

Shop and purchases

When you use the Bromio Shop or make a purchase, Bromio may process:

• product identifiers
• purchased items and quantities
• localized prices and total amounts
• cart and checkout information
• purchase or transaction identifiers
• purchase status
• verification, refund and revocation information
• Bromicon quantities or other purchased entitlements

Native purchases may be processed by Apple through the App Store or by Google through Google Play. Apple and Google process payment details according to their own privacy policies.

Bromio may receive a transaction identifier, product identifier and purchase status to verify a purchase and grant the purchased item. Bromio does not receive your complete card number, banking password or App Store or Google Play payment credentials.

The Bromio Shop may use first-party cookies and browser storage for login, session restoration, cart management and checkout.

Service providers and data sharing

Bromio may share limited personal data with service providers where necessary to operate the service.

Confirmed providers and infrastructure may include:

• Google Firebase Cloud Messaging
• Firebase Crashlytics
• Firebase Sessions
• Firebase Installations
• Google Analytics for Firebase where enabled
• Apple Push Notification Service
• Google ML Kit barcode components
• Google Fonts
• Apple App Store and Google Play purchase services
• Bromio’s API, socket, hosting and Shop infrastructure

We may also disclose information where required by law, to protect users or Bromio, to investigate fraud or abuse, or as part of a corporate restructuring.

Other Bromio users receive information that you intentionally share with them through Profiles, Content, Encounters and Chat.

Storage, security and international transfers

The app may store authentication tokens in secure device storage. It may also store or cache:

• installation identifiers
• theme and language preferences
• notification settings
• temporary image files and image caches
• font caches
• WebView authentication cookies
• short-lived Shop session information

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet-based service can guarantee absolute security. Users should protect their login credentials and notify Bromio if they suspect unauthorised account access.

Some service providers may process data outside Germany or the European Economic Area. Where required, Bromio uses recognised legal safeguards for international data transfers.

Retention and deletion

We retain personal data only for as long as necessary to provide Bromio, meet legal obligations, resolve disputes, prevent fraud and protect the service.

Account deletion

Users can request account deletion from within the Bromio app. A deletion request may enter a 30-day recovery period during which the user may cancel the request and restore the account.

After the recovery period, Bromio processes the account for permanent deletion, subject to legal retention requirements and technical backup cycles.

Deletion may include:

• account and authentication information
• Profiles and Content
• Encounter and Chat information associated with the account
• notification records and push tokens
• Bromicon ownership information
• Shop and purchase information not required for legal retention

Certain records may be retained where required for tax, accounting, fraud prevention, security, legal claims or regulatory obligations.

Account deletion does not remove information independently retained by another user, including messages already delivered, screenshots, exported data or content shared outside Bromio.

Deleted Profiles and Content

Certain deleted items may remain recoverable in a recycle bin for up to 30 days. After that period, they may be permanently deleted, subject to technical backup cycles and legal obligations.

Local device data

Logging out or deleting an account may clear authentication and session information from the app. General preferences and operating-system-managed caches may remain until cleared by the app, user or operating system.

Your privacy rights

Users in the European Economic Area have rights under the General Data Protection Regulation, subject to applicable conditions and exceptions.

You may have the right to:

• access the personal data we hold about you
• correct inaccurate or incomplete information
• request deletion of your personal data
• restrict certain processing
• object to processing based on legitimate interests
• withdraw consent where processing relies on consent
• receive certain data in a portable format
• lodge a complaint with a data-protection authority

To exercise these rights, contact us using the email address listed in this policy. Requests are generally free of charge and will be handled within the period required by applicable law.

Children and minimum age

Bromio is not intended for children below the minimum age permitted by applicable law.

Users must meet the minimum age stated in Bromio’s Terms of Use. Where parental or guardian consent is legally required, the user may only use Bromio after valid consent has been provided.

If you believe that a child has provided personal data without the required permission, contact us so that we can investigate and take appropriate action.

Cookies and local storage

The native Bromio app primarily uses device storage, secure storage and SDK identifiers rather than traditional website cookies.

The Bromio Shop and other web-based parts of the service may use cookies or browser storage for authentication, security, preferences, cart management and checkout.

For more information, read our Cookie Policy.

Changes and contact

We may update this Privacy Policy when Bromio’s features, service providers or legal obligations change.

We will update the date shown below and provide additional notice where required by law. Where a change requires new consent, we will request it before the relevant processing begins.

Questions, complaints and privacy-rights requests can be sent to:

usama.khan@bromio.com

You can also contact us through the Feedback & Support feature in the Bromio app.