Find your digital balance I www.balnz.io

Version 2.0 — effective as of 21 October 2026

It replaces the two policies of 24 July 2025 ("adults" and "teenagers 13+").

In short

This policy applies to all Users, from 13 up. It is written so that everyone can understand it.
We only process the data needed to run Balnz, judge Challenges, protect Users and comply with the law.
Balnz does not read what you do in your other apps and does not sell your data.
Your Feed photo is seen by your friends only, for 24 hours, then it is deleted.
Your data is hosted in the European Union (Microsoft Azure, the Netherlands and Ireland).
When you delete your account, everything is deleted straight away, except your phone number and your account's dates, kept for 12 months to prevent abuse.
You have rights over your data. Email support@balnz.io.

1. Who is responsible for your data

BALNZ SRL (Balnz brand), a company governed by Belgian law

Rue Jules Cockx 10, 1160 Brussels, Belgium — company number BE 1022.382.572

For any question about your data: support@balnz.io. A person at Balnz is in charge of data protection and answers you.

We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Belgian law of 30 July 2018 on data protection.

2. Who this policy is for

For all Balnz Users. There is no longer a separate policy for teenagers and for adults: the app is open from 13 and the rules are the same for everyone.
In Belgium, from 13, you can decide for yourself about your data in an app like Balnz. If you are under 18, you can show this text to your parents or the adult who looks after you: they can also write to us.
Balnz is not open to under-13s. If we learn that an account belongs to someone under 13, we close it and delete their data.

3. The data we process

3.1 Your account

your phone number (used to log in, with a code sent by text message);
your first name, last name and nickname;
your date of birth, gender and language;
your profile photo, if you add one;
your country, city and address, only if you give them: they are used to offer you Rewards near where you live;
your interests, if you choose them.

3.2 Your Challenges, Diam's and Rewards

the Challenges you create, join, win or lose (date, length, participants, result);
the text of the Reward you write in a custom Challenge;
your Diam's: what you earn and what you spend;
the Rewards you unlock and their codes.

3.3 Measurement during a Challenge (Screen Time)

To judge a Challenge, the app uses your phone's Screen Time (iPhone) or usage access (Android). During a Challenge, your phone sends our server, about once a minute, presence facts:

whether Screen Time access is granted;
whether you left Balnz, how many times and for how long;
whether your phone was locked;
the time spent on other apps and, if you use one during the Challenge, the name of that app and how long;
the reason for a loss, where relevant.

What Balnz does not collect: the content of your other apps, your messages, your photos, the pages you visit, your contacts. The usage statistics shown in the app (for example your most used apps) are calculated on your phone and do not leave it.

3.4 Community (the Feed)

your Feed photo and its size;
the Challenge it belongs to (date, length, Diam's won, participants);
the posting date;
your Likes and the Likes you receive;
your friends (worked out from the Challenges you won together) and the ones you deleted;
the photos you removed from your Feed;
your reports and reports about you, with the moderation decisions;
the date you first shared a photo on Instagram.

Balnz does not analyse faces in your photos and never uses them for advertising.

3.5 When you write to us

your messages in Support & Feedback, the screenshot if you attach one, your phone model, and the system and app versions;
your emails, and your email address if you write to us.

3.6 Technical data

the identifier used to send notifications to your phone, and your notification choices;
technical and security logs (dates, times, IP address);
Firebase statistics and crash reports (a Google tool): usage events (for example: an account created, a Challenge started, won or lost), your phone's model and system, the app version, a technical identifier of the installation, an approximate location (country, region) that Google works out from the connection, and, in case of a crash, a technical report. Firebase never receives your name or your phone number. These statistics are provided for in the Terms of Use (section 22).

4. Why, and on what legal basis

Why — Data — Legal basis (GDPR art. 6)

Create and manage your account, log you in — 3.1, 3.6 — performing the contract (the Terms of Use)
Offer you Rewards near where you live — 3.1 (address, if you give it) — performing the contract
Run Challenges, Diam's and Rewards — 3.2 — performing the contract
Judge a Challenge and prevent cheating — 3.3 — performing the contract and our legitimate interest (a fair verdict for everyone)
Run the Feed, Likes and friends — 3.4 — performing the contract
Moderate, handle reports, protect Users — 3.4, 3.1 — our legal obligations (EU Digital Services Act) and our legitimate interest
Answer your questions and complaints — 3.5 — performing the contract and our legitimate interest
Send you notifications — 3.6 — performing the contract; for notifications about Rewards, your consent (your phone's notification permission, adjustable in Profile › Notifications)
Measure the app's use and fix its crashes (Firebase) — 3.6 — our legitimate interest, as provided for in the Terms of Use
Security of the app and the server — 3.6 — our legitimate interest
Complying with the law, answering authorities — what is requested — our legal obligations

When we rely on our legitimate interest, we have checked that it does not override your rights — taking into account that many Users are under 18. You can object to it (section 9).

Your phone's permissions (camera, notifications, Screen Time) are given and withdrawn in your phone's settings. Without the camera, you can't take a photo; without Screen Time, you can't play.

Automated decision. A Challenge verdict is calculated automatically by our server, based on the presence facts. You can ask a person on the team to check it (Profile › Support & Feedback or support@balnz.io). Moderation decisions, on the other hand, are always made by a person.

5. Who sees what

Other Users

What they see — Who

Your nickname and profile photo — participants in the Challenges you play, and your friends
Your result in a group Challenge — the participants in that Challenge
Your Feed photo, its Likes and the Challenge's participants — you and your friends, for 24 hours
Who liked a photo — you and your friends

No one sees your phone number, date of birth, address or Diam's.

The Balnz team accesses the data it needs for its work: for example, moderation sees reported photos, support sees your messages. The team is bound by confidentiality.

Our service providers process data for us, on our instructions and under contract:

Provider — What for

Microsoft (Azure) — hosting the server, the database and the photos, in the European Union (West Europe region, in the Netherlands, and North Europe, in Ireland)
Spryng — sending the login code by text message
Apple and Google — sending notifications; app stores
Google (Firebase) — usage statistics and crash reports
Atlassian (Jira) — tracking bugs reported in Support & Feedback
Google (Places) — suggesting addresses when you type yours

Instagram (Meta). When you share your photo, it is your phone that sends the image to Instagram. Balnz sends nothing to Meta. On Instagram, Meta's policy applies.

Partner brands of the Rewards only receive figures without names (for example the number of vouchers used). They do not receive your name, your number or your address.

Authorities. We only pass data to the police or the courts when the law requires it, or when someone's life or safety is at risk.

Balnz does not sell your data and does not use it for targeted advertising.

6. Outside the European Union

Our server, our database and the photos are hosted in the European Union (Microsoft Azure, the Netherlands and Ireland). Some other providers (for example Google, Apple or Atlassian) may process data outside the European Union, in particular in the United States. In that case, we make sure there is adequate protection: a decision of the European Commission (such as the EU–US Data Privacy Framework) or standard contractual clauses. You can ask us for a copy.

7. How long we keep your data

Data — How long

Your account and your history (Challenges, Diam's, Rewards) — as long as your account exists
Sign-up started but never confirmed with the text-message code — 7 days
Photo taken during a Challenge that hasn't ended yet — until the verdict; deleted if you lose or leave
Photo posted in the Feed — visible for 24 hours, then deleted (file included), even if a report is open
Photo removed by moderation — deleted straight away; the record of the decision, without the photo, is kept for 12 months
Likes, deleted friends, photos removed from your Feed — as long as your account exists
Reports — 12 months after the decision, then anonymised
Presence facts of a Challenge — as long as your account exists (they explain a disputed verdict)
Support & Feedback messages — 12 months after the last exchange
Technical and security logs — 12 months at most
Backups — deleted within 30 days at the latest
Deleted account — see section 8
What the law requires us to keep — for as long as the law requires

To improve Balnz, we may produce statistics. They are anonymised: you can no longer be identified in them.

8. Deleting your account: what really happens

How. In the app: Profile › "Delete my account". Without the app: email support@balnz.io with your account's phone number; we handle your request within 30 days.

Straight away, your account is closed: you can no longer log in, and no one sees you in Balnz any more (not in Challenges, not in friend lists).

Straight away, we delete:

your first name, last name, nickname, date of birth, gender and language;
your profile photo, file included;
your country, city, address and interests;
the history of your Challenges, Diam's and Rewards, and the presence facts;
your Feed photos (files included), the Likes you gave and received, the photos you had removed from your Feed and your friend deletions;
your Support & Feedback messages.

In Challenges played with others, their results do not change, but your name and photo no longer appear. Reports you made are kept (moderation needs them), but without your name. Reports about you follow their own period (12 months after the decision, then anonymised).

We only keep, for 12 months: your phone number, and the creation date and deletion date of your account.

Why: to prevent abuse, for example someone creating new accounts to win bonuses again, or to come back after being closed for a breach. This data is used for nothing else, and only the Balnz team can access it. After 12 months, it is deleted.

You can object to your number being kept: email support@balnz.io. We delete it, unless we have a serious reason to keep it (for example a closure for a serious breach); in that case, we tell you why.

Your unused Diam's and Rewards are lost: you don't get them back if you return. Technical logs and backups follow the periods in section 7.

9. Your rights

At any time, you can ask us:

to know what data we hold about you, and to get a copy;
to correct wrong data (you can also do it yourself in Profile);
to delete your data (section 8);
to restrict what we do with your data, for example while we check a complaint;
to object to processing based on our legitimate interest;
to receive your data in a readable format, to give it to another service (portability);
to withdraw your consent, where we asked for it (this does not affect what was done before).

How. Email support@balnz.io. To be sure it's really you, we may ask you to confirm with your account's phone number (for example with a text-message code). We will not ask you for a copy of your identity card unless there is no other way.

Time limit. We answer within one month. If the request is complicated, this may be extended by two months; we will tell you and explain why.

Complaint. You can file a complaint with the Data Protection Authority: Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be — contact@apd-gba.be.

10. You are in a photo, without a Balnz account

If you appear in a photo posted on Balnz, even without an account, you have the same rights: to know whether a photo of you exists, and to ask for it to be deleted. Email support@balnz.io; we remove the photo as soon as we have found it. A Feed photo is deleted after 24 hours in any case.

11. Keeping your data secure

Exchanges between the app and our server are encrypted.
Photos are kept in a private space: they can only be opened through temporary links, valid for one hour, given only to the people allowed to see them.
Only the team members who need it can access the data, and they are bound by confidentiality.
If a data breach puts you at risk, we notify the Data Protection Authority and, where the law requires it, we also let you know.

12. When this policy changes

If we make important changes to this policy, we let you know in the app before the change applies. The date of the current version is always shown at the top of the page.

13. Contact us

One single address for everything, your data included: support@balnz.io.

BALNZ SRL — Rue Jules Cockx 10, 1160 Brussels, Belgium — BE 1022.382.572