Privacy Policy

Last Updated: March 4, 2026

1. Introduction

The Bro App is operated by DAG Consulting LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Bro App. Please read this policy carefully. By using the Bro App, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address (or a private relay email address if you use Sign in with Apple), name, living locataion, date of birth, and profile photo.

User-Generated Content

We collect content you create within the app, including messages, picks, bracket selections, photos, and videos shared in group features.

Group and Friendship Data

We collect information about your group memberships, activity within groups, and interactions with group features.

Usage Data

We automatically collect information about how you use the app, including feature interactions, session data, and app performance metrics.

Device Information

We collect device type, operating system version, push notification token, and device identifiers.

Communications

We collect any messages you send to us through our support channels.

3. How We Collect Information

• Directly from you: When you sign up, create your profile, and post content within the app.
• Automatically: Through Firebase Analytics and Crashlytics when you use the app.
• Through third-party integrations: As described in the Third-Party Services section below.

4. How We Use Your Information

• Provide and operate the Bro App features, including weekly games, daily challenges, and group activities
• Send push notifications about group activity, game results, and challenges
• Monitor and improve app performance and stability
• Train, develop, test, and improve machine learning models, AI systems, algorithms, and automated tools using anonymized, aggregated data (not individual attributed responses)
• Develop and improve AI-powered features, including through limited sharing of anonymized data with third-party AI and ML service providers
• Serve relevant advertising in the future (we will update this policy with specifics before introducing ads)
• Respond to your support requests
• Comply with legal obligations

5. Third-Party Services

The Bro App uses the following third-party services that may collect data:

• Firebase (Google): Authentication, database (Firestore), cloud storage, analytics, push notifications (FCM), and crash reporting (Crashlytics). Firebase Privacy Policy
• Giphy: GIF search and display within the app. Giphy may independently collect search queries and IP addresses when you use GIF features. Giphy Privacy Policy

6. Data Sharing

We do not sell your personal data. We may share data in the following ways:

• Within your groups: Your activity is visible to members of your Bro groups as part of normal app functionality (game picks, responses, feed posts).
• Service providers: We share data with third-party providers that help us operate the Bro App, including hosting (Firebase/Google), analytics, and cloud infrastructure.
• AI/ML service providers: We may share limited, anonymized data with third-party AI and machine learning providers to develop and improve AI-powered features.
• Advertising partners: If we introduce advertising in the future, we will update this policy with specific disclosures and provid you with opt-out controls before any data is shared with advertising partners.
• Legal compliance: We may disclose data if required by law, legal process, or to protect the safety of our users.

7. Data Security

Your data is stored using Firebase infrastructure with industry-standard encryption. We use secure HTTPS connections for all data transmission. Access to user data is restricted to authorized systems and personnel.

8. Your Rights and Choices

• Access: You can view your profile and content within the app at any time.
• Correction: You can request correction of inaccurate personal information by contacting support@thebro-app.com.
• Deletion: You can delete your account from the app settings. Account deletion removes your personal data within 30 days.
• Push notifications: You can disable push notifications in your device settings at any time.
• Analytics opt-out: You can limit ad tracking via iOS device settings (Settings > Privacy & Security > Tracking).

9. Data Retention

• Active accounts: Data is retained while your account is active.
• Post-deletion: Personal data is deleted within 30 days of account deletion, except as required by law.
• Anonymized data: Anonymized and aggregated data (including data used to train ML models) is retained indefinitely and survives account deletion. "Anonymized" means data processed so that it cannot reasonably be used to identify an individual, either directly or in combination with other data.
• Backups: Backup copies of personal data are purged within 90 days of deletion.
• Legal holds: We may retain data longer if required by law, legal process, or fraud prevention.

10. Children's Privacy

The Bro App is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If we learn we have collected data from a person under 18, we will delete it promptly. The App Store's age restriction mechanism serves as the primary age gate for the Bro App. In addition to the App Store's age restriction, we require users to confirm their date of birth during account creation.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via in-app notification or email. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

12. Data Breach Notification

In the event of a data breach involving your personal information, we will notify affected users in accordance with applicable state and federal law. We will provide notification as expeditiously as possible and without unreasonable delay, using the contact information associated with your account.

13. Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what categories of personal information we have collected about you, the sources of that information, the business purposes for collecting it, the categories of third parties with whom we share it, and the specific pieces of personal information we hold about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
• Right to Opt Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information as defined under the California Consumer Privacy Act.
• Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights.

How to Submit a Request: To exercise any of these rights, email support@thebro-app.com with the subject line "California Privacy Request." Please include your name and the email address associated with your account.

Response Timeline: We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days. If we need additional time, we will notify you of the reason and extension period (up to an additional 45 calendar days).

Categories of Personal Information Collected: We may collect the following categories of personal information: identifiers (email address, display name, date of birth, and living location), internet or electronic network activity (usage data, feature interactions), audio/visual information (profile photos, shared media), and inferences drawn from the above (game preferences, group activity patterns).

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights:

• Email: support@thebro-app.com
• To request data deletion: email the above address with the subject line "Data Deletion Request"