Buddito Privacy Policy

We collect personal information about you as a registered Buddito user. We describe what we collect, how we collect it, and why we use it below.

(A) Information you provide through iMessage

When you communicate with Buddito in iMessage, you may provide:

• Contact identifier: the phone number or Apple ID email associated with the iMessage account you use to contact us.
• Age: your self-reported age during onboarding (you must be 18 or older to use the Service).
• Profile and matching preferences: information you share in conversation, such as your display name or nickname, city or area, photo or avatar, bio, interests, activity types, schedule, language preferences, and optional profile fields (for example, MBTI, zodiac sign, or values)—only if you choose to provide them.
• Communication content: your message history with Buddito, including your matching preferences, feedback on suggested matches, verification-code confirmations, and requests to update or delete your information.
• Other information you voluntarily provide: any other personal information you choose to share during onboarding or ongoing conversations.

(B) Information generated through the Service

• Match suggestions and match records: profiles we show you, your decisions to accept or decline matches, verification-code confirmations, and system-generated match reasons or highlights.
• Introduction messages: content we generate for one-time group introductions (for example, icebreaker text and safety reminders), based on information you and your match have provided.

(C) Information collected automatically

• Usage and technical logs: the time and frequency of your interactions, message delivery status, service-response records, and technical logs needed to operate, secure, and troubleshoot the Service.
• Website technical data: if you visit buddito.com, we may automatically collect limited technical information such as your IP address, browser type, and basic access logs needed to deliver and secure the website.
• Website analytics: our website (buddito.com) uses Google Analytics 4 to collect aggregated usage statistics — pages viewed, the site that referred you, approximate location derived from your IP address, and device/browser type. Google Analytics sets first-party statistics cookies (e.g., “_ga”) on your browser to distinguish visitors. We use this data only to understand website traffic and improve the Service; it does not include your name or contact details.

(D) Payment information

We do not collect payment or billing information because the Service is currently free.

We collect information:

• directly from you when you message Buddito in iMessage or visit our website;
• automatically through technical logs generated when you use the Service or visit our website; and
• from your match only to the extent needed to facilitate a mutual introduction (for example, profile fields they have provided and chosen to share through the matching flow).

We do not collect information about you from data brokers for advertising purposes.

We use personal information for the following purposes:

• Providing and operating the Service: onboarding you, understanding your matching needs, building and updating your profile, suggesting compatible Buddito users, facilitating mutual match confirmation, creating one-on-one iMessage group chats, and sending one-time introduction and safety messages in those groups.
• AI-assisted processing: using artificial intelligence to understand your messages, maintain conversation context, generate match suggestions, and draft introduction content. The final decision about whether to match rests with you and the other user.
• Communications and support: responding to your requests, notifying you of changes to the Service or this Policy, and handling complaints.
• Safety, security, and compliance: detecting and preventing abuse, fraud, and unlawful activity; enforcing our Terms; maintaining audit records of certain account actions; and meeting applicable legal obligations.
• Improving the Service: analyzing aggregate or de-identified usage patterns to improve matching quality and reliability.

We do not use automated processing to make decisions that produce legal or similarly significant effects about you.

When you message Buddito in iMessage, the content of your messages is sent to Google Gemini, a third-party large language model service operated by Google, so that Buddito can understand what you are saying and generate replies. Google’s handling of this information is governed by its applicable service terms and data-processing terms. We do not use your conversations to train Buddito’s own machine-learning models.

For security, abuse prevention, and troubleshooting, we may store complete records of AI inputs and outputs in our systems. These records are automatically deleted after approximately 30 days, unless a longer period is required by law or needed to investigate abuse.

To keep the Service reliable, we may use operational and troubleshooting tools that record error information and, when configured, technical logs needed to diagnose problems.

Profile cards

Before you connect with another user, we may show you a profile card with information such as display name, city, photo, and other profile fields that user has provided (for example, bio, interests, MBTI, zodiac sign, or values). We show only fields that exist in their profile—we do not force every field to appear.

We do not intentionally include your phone number in match recommendation cards.

Mutual confirmation

If you and another user both wish to connect, each of you must confirm using a verification code in your individual conversations with Buddito. We only create a connection after both users confirm.

One-on-one iMessage group chats

When you and another user are matched and both agree to connect, we create a one-on-one iMessage group chat between you using your iMessage contact handles.

Apple iMessage may display participants’ contact information (such as phone numbers) to other group members. This is governed by Apple’s platform rules, not by Buddito. Even if you already know each other by name in your address book, other participants may still be able to see contact details depending on their device and settings.

Buddito’s role in group chats

After a group is created, Buddito may send up to two one-time messages: an icebreaker introduction (which may include both users’ names or preferred names, profile highlights, match reasons if available, and a suggested opening question) and a safety reminder. Introduction content is designed to avoid sensitive details such as health conditions or emotional trauma.

After those messages, Buddito does not continue to participate or reply in the group chat. Further communication is between you and your match.

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

We may share personal information in the following circumstances:

With your match

After mutual confirmation, we share agreed profile information and facilitate contact through an iMessage group chat as described in Section 5.

With service providers (subprocessors)

We use trusted vendors to help us operate the Service. They may process personal information only on our instructions and subject to appropriate confidentiality and security obligations. Our key providers include:

• Sendblue: Sending and receiving messages through iMessage on our behalf.
• Google (Gemini): AI message processing.
• Google Analytics: Aggregated website usage analytics for buddito.com.
• Amazon Web Services (AWS): Data storage and application hosting.

For legal and safety reasons

We may disclose information where we believe in good faith that disclosure is necessary to comply with law, respond to lawful requests, cooperate with law enforcement, protect the rights and safety of us or others, or enforce our Terms.

Business transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the successor entity as permitted by law. We will notify you of any material change in ownership or control of your personal information where required by law.

Our website (buddito.com) uses first-party statistics cookies set by Google Analytics (such as “_ga”) to distinguish visitors and measure aggregate site usage, as described in Section 1(C). You can block or delete these cookies at any time through your browser settings; the website remains fully functional without them.

We do not use cookies for advertising or cross-site tracking.

We retain personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required by law.

• Profile and conversation data: For as long as your account is active. Deleted upon account deletion (hard delete).
• LLM invocation logs (full prompt/response copies): Approximately 30 days, subject to the legal and security exceptions described in Section 4.
• Interaction traces (troubleshooting): Approximately 30 days, then automatically deleted.
• Compliance audit logs (e.g., profile writes, key account actions): Retained as long as necessary for security, fraud prevention, and legal compliance.
• Website access logs: When you visit our website, our servers generate access logs (such as visit time, IP address, and browser type) for security and troubleshooting only. These logs are retained for a limited period and then deleted. They are not used for profiling or advertising.

If you delete your account, we hard-delete your profile and conversation data from our production systems. If you register again with the same phone number, you will start as a new user with no linkage to the prior account.

After deletion, your data is removed from the systems we use day to day. Copies may remain in system backups for a reasonable period and are cleared when those backups rotate. Backup copies are not used to restore your account.

We are based in Singapore. Your profile, conversation history, and related personal information are primarily stored and processed in the United States.

By using the Service, you consent to the storage and processing of your information in the United States.

We implement appropriate safeguards for cross-border transfers as required by applicable law, including contractual commitments with our service providers.

We implement reasonable and appropriate technical and organizational measures designed to protect your information against loss, misuse, and unauthorized access, disclosure, or alteration.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. Please keep your device and iMessage account secure, and contact us promptly if you believe your account has been compromised.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• know what personal information we collect, use, and disclose;
• access personal information we hold about you;
• correct inaccurate personal information;
• delete your personal information;
• opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising);
• limit the use of sensitive personal information where applicable; and
• not be discriminated against for exercising your privacy rights.

How to exercise your rights

You may exercise your rights by messaging Buddito in iMessage — for example, ask to view, update, or delete your profile, or request account deletion through our in-conversation deletion flow.

Account deletion through iMessage includes verification steps and results in hard deletion of your account data as described in Section 8.

We will verify your request as required by law and respond within the timeframes required by applicable law. We may be unable to fulfill certain requests where permitted by law (for example, where we cannot verify your identity, where the request would harm others’ rights, or where retention is required for legal compliance).

If you are a California resident, this section provides additional disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

What we collect. In the preceding 12 months, we may have collected the following categories of personal information about California residents who use the Service:

• Identifiers, such as your phone number, iMessage handle, and display name.
• Personal information described in California Civil Code § 1798.80, such as your name and city.
• Characteristics of protected classifications, such as your age (you must be 18 or older to use the Service).
• Internet or other electronic network activity, such as website access logs and service usage logs.
• Inferences, such as information about match compatibility generated to suggest potential buddies.

We do not intentionally collect sensitive personal information as defined by the CPRA (such as health data or precise geolocation) for profiling purposes. Introduction messages in group chats are de-sensitized and do not include such details.

Why we use it. We use these categories for the business purposes described in Section 3, including providing the Service, security, compliance, and product improvement.

Sale and sharing. We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Your rights. If you are a California resident, you may have the right to know what personal information we collect, to access or correct it, and to request deletion, as described in Section 11. To submit a request, message Buddito in iMessage. We will not discriminate against you for exercising your rights.

The Service is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. During onboarding, we ask you to confirm that you are at least 18; if you indicate you are under 18, we will not register you.

If we learn that we have collected personal information from someone under 18, we will delete that information and the associated account. If you believe a minor has provided us with personal information, please notify us by messaging Buddito in iMessage.

We may update this Policy from time to time. The “Last Updated” date at the top indicates when the latest changes took effect. For material changes, we will provide notice by reasonable means (for example, via iMessage with a link to the updated Policy).

If you have questions, comments, or requests regarding this Policy, message Buddito in iMessage or write to us at the address below:

Operating entity: MX INNOVATION PTE. LTD.

Registered address: 727 Clementi West Street 2, #01-280, Singapore (120727)