Who processes your data
The controller of your data is Besa, based in Tirana, Albania. We process your data under Albanian personal data protection law and, where it applies, the EU General Data Protection Regulation (GDPR). For any privacy question, write to us from the contact page.
Our principle
Besa has no public profiles. Nobody can search for you or browse you. Only the people you are proposed to see your profile, and only those you both said yes with see your contact details. We do not sell data and we show no advertising.
Data we collect
| What | Examples |
|---|---|
| Account | phone number, email, gender, your statements (18+, not married, the pledge) with their date and the terms version |
| Profile | first name and surname, date of birth, where you live, where you were born, height, languages, education, job, income bracket, marital status, children, plans, personality, interests, your "In your own words" text |
| Faith | only if you choose to give it; you can pick "I'd rather not say" |
| Media | your photos and intro video |
| Preferences | who you are looking for and how much each criterion matters |
| Contacts | the channels on your number, your email if you choose to share it, Instagram, your first-contact preference |
| Activity | proposals, your answers and the private reasons for a "no", connections and the stage only you see |
| Payments | amount, date, payment method, invoice; card details are handled only by Stripe |
| Safety | reports, evidence you upload, blocks, the team's decisions |
| Technical | sign-in codes, IP address and security logs, notification subscriptions |
Why we use it and on what basis
- To provide the service (contract): your account, profile, match calculation, proposals, contact exchange, notifications and payment.
- With your explicit consent: your faith and other sensitive details you choose to give. You can withdraw consent at any time by removing the detail from your profile.
- For members' safety (legitimate interest): profile review, detecting duplicate accounts, handling reports and preventing fraud.
- For legal obligations: invoices and payment records required by tax law.
We calculate matches automatically from your answers, but a person approves every profile. No decision to admit or suspend a member is made by a machine alone.
Who sees your data
| Who | What they see |
|---|---|
| People you are proposed to | first name, age, job, city, country, birthplace, main photo, video, text and profile facts; other photos as you choose; income only as a bracket and only if you allow it |
| Connections, after a mutual yes | surname, phone, channels, Instagram, first-contact preference, and your email if you share it |
| The Besa team | what is needed for review, payments and reports; every time a team member opens your contacts or video, their name and reason are logged |
| Nobody | your exact date of birth, your income amount, your answer when it is "no", the identity of whoever reports you |
Providers who help us
We share data only with providers who process it on our behalf and on our instructions: server hosting and photo and video storage in the European Union, Stripe for card payments, the SMS and voice provider for sign-in codes, the email provider, and browser push services. We do not transfer data outside the EU and Albania unless a provider does so with the safeguards the law requires.
How long we keep it
- Active account: for as long as you are a member.
- No renewal: your profile is hidden from proposals on 1 January and archived after the set period (31 days by default).
- "I found my person" or closing your account: 30 days, so you can come back; after that your data is erased.
- Immediate deletion: your profile, photos and video are erased straight away.
- Reports: 3 years after the case is closed, for the safety of other members.
- Payments and invoices: as long as tax law requires.
- Sign-in codes: expire after 10 minutes and are deleted regularly.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. You can change most of your data yourself from your profile, and you can download a copy of your data from the app. For other requests, write to us; we reply within 30 days.
If you believe we have not handled your data properly, you have the right to complain to the Albanian Information and Data Protection Commissioner or to the supervisory authority where you live.
Security
Data is encrypted in transit. Photos and videos are kept in private storage and served only through links that expire after a few minutes. The team signs in to the admin console with a password and an authenticator-app code, and every access to sensitive data is logged.
Children
Besa is only for people over 18. We do not accept profiles of minors and we delete any account as soon as we learn it belongs to someone under 18.
Changes
When we change this policy, we publish a new version with the date it takes effect and let you know before it applies.
Questions about this document? Write to us at [email protected].