Privacy notice
Before&After™ · Updated: September 27, 2026.
Operator and contact
Data controller: Pascui Tiberiu. Country: Romania. Contact and privacy requests: tiberiupascui887@gmail.com.
What data goes into the app?
Sign-in takes place through an external account provider. The provider sends a user identifier, email address, and sometimes a name to Before&After™. The app’s own database stores the identifier, chosen public username, provided profile photo and bio, as well as the version and time of acceptance of the community rules and the language in which the rules were displayed; it does not copy the email address or name supplied by the provider into its own profile. The app stores posts, photos, videos, comments, likes, follows, saves, messages and their read status, notifications, reports, moderation decisions, and coin events.
The profile name, profile photo, bio, published posts and comments, and listings, including the advertiser name, price and condition, are public. The phone number, WhatsApp number, and website in a listing are also visible. Private messages and read indicators are visible to the participants in the conversation; a moderator may examine them if reported. The service does not use its own advertising tracker or analytics script; the hosting provider also handles sign-in sessions and technical logs. When you open an external WhatsApp or website link, the other service’s privacy practices may also apply.
Live broadcasts
If live broadcasting is available and you use it, the app stores the broadcast title, creator identifier, status, and times; the text, author, and time of live chat messages; and reports and bans related to the broadcast. The broadcast video, audio, any screen share, its title, and live chat are visible to signed-in viewers. The external LiveKit-based media provider processes the audio and video needed for the broadcast, connection status, room identifier, pseudonymous participant identifier, and public username. The app does not make a recording of the live broadcast and does not store its audio or video in its own database or media storage.
Purposes and legal bases
The legal basis for operating accounts, posts, listings, live broadcasts, community features, messages, and coin balances is performance of the service requested by the user (GDPR Article 6(1)(b)). Reviewing reports, moderation, security, and preventing repeated misuse of the one-time registration coin are based on the operator’s legitimate interest (GDPR Article 6(1)(f)): protecting users and ensuring fair operation of the service. Requests under the law are handled on the basis of a legal obligation (GDPR Article 6(1)(c)).
Retention and deletion
Content linked to an active account remains until the user deletes the account, deletes the content, or the content is removed through moderation. Deleting an account also affects messages and related data. Photos and videos are no longer visible in the app after deletion; their removal from storage is handled through a technical queue, and we cannot promise a precise time for this.
There is currently no automatic time-based deletion for reports, notifications, messages, and moderation logs of active accounts. Deleting an account removes most associated reports. Events needed for other users’ coin balances may remain with data redacted; the reason and time of a moderation decision may also remain while affected identifiers are partly replaced by the system. A hash derived from an identifier prevents repeated claims of the one-time registration gift while this rule is in place. You can send requests about retention or deletion to the operator’s email address.
There is currently no separate automatic time-based deletion for the broadcast titles, times, chats, reports, and bans stored in the database; related data is deleted when the account is deleted. The app does not set the external media provider’s retention period for technical data.
Hosting and data transfers
External application, database, and hosting providers operate the app; community data is held in a database, and uploaded photos and videos are held in storage. Recipients include visitors for published content, participants for messages, the operator’s moderator in the event of a report, and the infrastructure providers and subprocessors needed to operate the service. Data may also be processed outside the European Economic Area under the providers’ then-current privacy and international-transfer terms. The operator does not control every provider retention period for technical logs.
Rights and deletion
On the Profile page, you can download a JSON export of some data linked to the account and delete the account. The account and data deletion page is also available without installing the app. You can save photos and videos separately from their media URLs before deletion. For a more complete access request, correction, deletion, restriction, or objection to processing based on legitimate interests, write to the operator. Self-service deletion of a moderator account is limited until the role is transferred; you can still request action by email. You can lodge a complaint with the competent data protection authority.