Privacy Policy

Last updated: October 1, 2026

Baile was designed so you can exist in here without leaving a trace out there. Privacy isn't an add-on to the product; it is the product. This policy explains, in plain language, what data we process, why, and what your rights are under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).

1. Who we are

Baile is operated by Bends Tecnologia e Consultoria Ltda., CNPJ 57.365.541/0001-30, headquartered at Alameda Rio Negro, 503, sala 2020, Alphaville, Barueri/SP, CEP 06454-000, Brazil ("Baile", "we"), the controller of the personal data processed in the app and on this site. For any privacy matter, contact our Data Protection Officer (DPO) at suporte@baile.app.br.

2. What we collect

Account and sign-in

• Your phone number (SMS sign-in) or the identifier and email of your Apple or Google account. None of it is shown to other people: it lets you sign in, recover your account and prevents duplicate accounts.

Profile

• Pseudonym. It's the only name others see. We don't ask for your real name.
• What you declare: solo or couple profile, gender or couple composition, and who you're looking for.
• Bio, photos and captions. Photos are stored privately and appear blurred to others. Your main photo opens on a match (on VIP, only once a request is accepted) and the rest only when you accept a trade request.

Face check (biometric, sensitive data)

• The check confirms you're a real person and that you're the one in your main photo (for couples, that it's both of you). It is run by a partner that specialises in face verification and processed in Brazil.
• The video is analysed and discarded. We keep no video and no selfie. Only the result and the check's technical scores are recorded.
• Biometric data is sensitive data (LGPD art. 11) and is only processed with your specific, prominent consent, asked before the camera opens. We record when you consented and under which version of this policy. You can withdraw consent at any time; without the check, however, your profile doesn't appear at the ball.

Age (18+)

• Baile is for adults 18+ only, as required by Brazilian Law 15.211/2025. We confirm age through the system age check (Apple or Google) when it's available and, when it isn't, through your declaration.
• We only keep the confirmation that you're 18 or older, not your date of birth. We don't ask for any document or CPF.

Location

• Your device's approximate location, requested only while the app is in use and used only to show people within the distance you choose. Your position is never shown to anyone.

Interactions

• Likes, matches, messages, photo requests, blocks, reports, trust ratings after meeting someone, and participation in the Community tab.
• Photos sent in chat open twice at most, and screenshots are blocked in conversations.
• When you report someone, we keep a copy of your conversation with them alongside the report: the text and time of each message and, for photos, only the fact that one was sent. Moderators may read it, and every read is logged. The copy exists because the person reported could otherwise delete messages, unmatch or delete their account.

Payments

• App Store and Google Play subscriptions are charged by Apple or Google and managed by a subscriptions partner. We never receive your card details.
• PIX payments happen on a payments partner's page, where you give your name and CPF directly to them. We only receive the payment confirmation.
• We keep your plan, payment method and expiry date.

Ads

• On the Free plan we show ads from a partner network, including ads you choose to watch for extra likes. The network may use your device's advertising identifier; on iPhone, only with your permission. Advertisers never receive your profile, photos or conversations.

Invites and links

• When someone opens a Baile invite or campaign link, we record the click to know where the install came from: the campaign, the app the link was opened in (Instagram, TikTok…), the system, the language, the time zone, the screen size and a code derived from the network, which cannot be turned back into the IP address. These records are deleted within 30 days.
• On an iPhone, the link page's button copies the link itself. The app only reads it if you tap Paste the first time you open Baile.
• If you joined through an invite, we record who invited you so we can give them the reward. If you joined through a campaign, we record which one, and whether the account was verified and signed up for a plan, to measure each campaign's results.

Device and usage

• Notification token, language, technical and usage data (device model, system, usage events) and crash reports, through analytics tools.
• A device identifier, kept only as a code that cannot be turned back into the original, and a pseudonym of every account that has signed in on it. They tell a reinstall from a new person, and keep several accounts on one phone from earning the same reward.

3. What we use your data for

• Creating and authenticating your account;
• Confirming you're a real person, that it's you in the photos and that you're 18 or older;
• Running the app: profiles, distance-based discovery, matches, chat, photo requests, reputation badges, community and notifications;
• Safety, fraud prevention and moderation, including reviewing reports;
• Processing subscriptions and payments and showing ads on the Free plan;
• Knowing where installs come from and improving the app with usage metrics;
• Complying with legal obligations.

4. Legal bases

• Consent (art. 11, I): the face check;
• Performance of contract (art. 7, V): account, profile, discovery, chat and subscriptions;
• Legal obligation (art. 7, II): age confirmation and retaining records required by law;
• Legitimate interest (art. 7, IX): safety, fraud prevention, moderation, ads, metrics and install attribution, always with the minimum data needed.

5. Who we share with

We never sell your data. Other people on Baile only see your pseudonym, what you declared on your profile, your badges and your photos under the rules above; never your phone, email or location. We only share data with partners that help us deliver the service, under contract and our instructions, and only what each job needs:

• Cloud infrastructure: servers, database and photo storage (in Brazil), sign-in, metrics and crash reports;
• Face verification (in Brazil);
• Notification delivery;
• Subscriptions and payments, including PIX;
• Ads on the Free plan;
• Apple and Google: sign-in, age check and subscription billing.

Partners who promote Baile get only aggregate campaign numbers, never who signed up through them.

We may also share data with public authorities when legally required or by court order. If you'd like to know which partners these are, just ask at suporte@baile.app.br.

6. International transfers

Servers, database, photos and the face check stay in Brazil. Some processors (sign-in, metrics, notifications, ads and subscription management) process data outside Brazil. In those cases, the transfer follows the safeguards of LGPD art. 33.

7. How long we keep data

• Account and profile: while the account exists;
• Photos sent in chat: they stop opening after the second view;
• Invite or campaign link clicks: 30 days;
• Device identifier: up to 2 years after the app was last used on that device;
• An account's campaign record: 2 years after signup, even if the account is deleted sooner;
• Account deletion: your profile leaves the ball right away and your matches and conversations are deleted, except the copy of a reported conversation, which stays with the report. After 30 days we permanently delete your photos, sign-in and profile. Signing back in before then cancels the deletion;
• Audit records (consents, moderation decisions and payments): up to 2 years. Once the account is deleted, they're no longer linked to you, except those about reports, moderation and payments: they stay linked to the account so a ban appeal or a payment dispute can be answered, and so no one can erase their moderation history by deleting their account;
• Reports, with the copy of the reported conversation: 2 years;
• Access logs: 6 months (art. 15 of Brazil's Marco Civil da Internet, Law 12.965/2014), and records tied to reports or investigations for as long as the law requires.

See how to delete your account in Account deletion.

8. Your rights (LGPD art. 18)

You may, at any time, request:

• Confirmation that we process your data, and access to it;
• Correction of incomplete or outdated data;
• Anonymisation, blocking or deletion of unnecessary data;
• Portability;
• Deletion of data processed based on consent;
• Information about sharing;
• Withdrawal of consent.

Just write to suporte@baile.app.br. We reply within the LGPD deadlines. You may also petition Brazil's National Data Protection Authority (ANPD).

9. Security

We use encryption in transit, private storage for photos (with temporary links), restricted access to data, screenshot blocking in conversations and chat photos that open twice at most. No system is infallible, but data minimisation is our first line of defense: what we don't collect can't leak.

10. Children and teenagers

Baile is prohibited for anyone under 18. We confirm age before any interaction and remove accounts belonging to minors. See our child safety standards.

11. Changes to this policy

If we change anything material, we'll let you know in the app before it takes effect. The current version is always on this page, and the Terms of Use complete the rules for using Baile.

12. Contact

Data Protection Officer (DPO): Fábio Mendes Lopes, suporte@baile.app.br