Privacy
Last updated:
Bruuh is a one-thing app: you pick a username, add other people’s usernames, and tap to send a phrase the app has blessed. This policy describes the information that takes, who else handles it, and how long every copy of it is kept.
What we do not collect
We do not ask for your name, email, phone number, birthday, or any other real-world identity. We do not read your address book, photos, camera, microphone, or location. We do not use advertising, analytics, crash-reporting, or tracking SDKs. We do not sell your information. We do not keep a history of the Bruhs you send.
What our server stores, so the app can work
- Username. The handle you choose (letters and numbers only). This is your account. It is not your legal name.
- Sign-in credentials. When you claim a name, the app keeps a secret on your device (in the iOS Keychain). We store only a one-way hash of that secret, plus a one-way hash of the recovery phrase shown to you once at claim. We never store the secret or the phrase in recoverable form.
- A device check. When you claim or recover a name, the app asks Apple’s App Attest to vouch that it is a genuine copy of Bruuh on a real Apple device. We keep the identifier of the key the app made for that, so one key can claim only one name. It identifies that key, not you.
- Device token. Apple’s push token for your device, so a Bruh can reach you as a notification. It exists only for delivery.
- Your sound. Which sound your Bruhs arrive with.
- Friends you added. The usernames on your Bruhs list.
- People you blocked. The “Nah, bruh” list, so their Bruhs never reach you.
- People who Bruh’d you that you have not added. The “New bruh, who dis?” list - usernames only. No messages, counts, or times.
- Unanswered Bruhs. A mark on each friend whose last Bruh to you you have not answered - one mark, not a count or a time. It goes when you Bruh them back.
- Reports. If you report a username, we keep your username, theirs, and when, until we act on the report or either account is deleted.
- Retired usernames. When an account is deleted, its username goes on a list of names that can never be claimed again, so nobody can take over a name other people still have saved. The name is kept on its own, linked to nothing else.
Server logs record usernames, because most requests name one, and the network address a request came from when it is turned away for arriving too fast. Logs stay on our server.
On your iPhone, the app keeps your username, the Keychain secret, and a local copy of your friends and blocks so the list works offline. Sends themselves leave no local record.
How we use it
Only to operate Bruuh: identify your account, show your lists, deliver a notification when someone Bruhs you, let you recover the same username on a new device, keep the service from being flooded, and act on reports under the Terms. We do not use this information for advertising, profiling, or tracking you across other apps or websites.
Who else handles it
- Apple delivers notifications (APNs): it receives your device token and the notification itself - the sender’s username, the blessed phrase, and the name of the sound. Apple also runs App Attest, the device check above.
- DigitalOcean runs our server, which holds everything listed above, and its logs.
- Cloudflare stores the server’s backups.
- Grafana Labs receives the server’s performance metrics - counts and timings, with no usernames or addresses.
Each handles the data only to run its part of Bruuh for us, and under terms that protect it at least as well as this policy does. We do not share your information with advertisers, data brokers, or analytics companies, and the iOS app has no third-party SDKs. This website is hosted by Netlify and has no analytics or tracking of its own.
How long we keep it
Your account data stays for as long as your account does. Friends, blocks, and who-dis entries stay until you remove them; a mark for an unanswered Bruh stays until you Bruh back; a report stays until we act on it. Device tokens are replaced when the token changes or when you recover your account on another device.
Anything deleted leaves the live database at once. Copies of it outlive that only in our backups and logs, and those age out: every copy is gone within 30 days. The one thing kept longer is a deleted account’s username, on the retired list above, forever.
Deleting your account
In the app, tap the person button, then Delete Account. That deletes your account and everything above that names you - your credentials, device check, token, sound, lists, marks, and reports - at once, and retires your username so it can never be claimed again. Two things it cannot reach: a Bruh you already sent stays on the other person’s lock screen, like a sent text, and backups and logs keep their copy until they age out within 30 days.
You can also remove a friend, unblock someone, or ignore a stranger at any time in the app.
Children
Bruuh is not directed at children under 13, and we do not knowingly collect information from children under 13.
Changes
If this policy changes, we will update the date at the top of this page.
Contact
Questions about privacy:help@bruuh.online