Privacy Policy

Last updated: June 21, 2026

Buko (“the App”) is operated by NIXLIGHT TECHNOLOGY LIMITED (“we”, “us”). This policy explains what we collect, how we use it, and your choices. Buko is private and invite-only; we do not show ads and we do not sell your personal data.

1. Information we collect

• Account & profile. Your email address (used to send a one-time login code), and profile details you provide: display name, optional username/handle, avatar, cover image, and bio.
• Invites. Invite codes you create or redeem, to enable invite-only access.
• Messages & media. The content of messages and photos you send. Message history is stored primarily on your device; our servers keep a transient delivery buffer for up to 30 days. Media files are stored in object storage (chat media for 30 days, Moments images for 60 days; profile/cover/group images are retained while in use).
• Moments. Posts (text and photos) you publish to your contacts; retained for about 60 days.
• Device & notifications. A per-install device identifier and a push notification token, used to deliver notifications.
• Calls. For voice/video calls we relay signaling and media through a third-party real-time network. We do not record calls.
• Diagnostics. Crash and error reports (which may include device model, OS version, and stack traces) to keep the App stable. These do not include your message content.

2. How we use information

• To provide messaging, calls, Moments, and notifications.
• To authenticate you and keep your account and the service secure (including anti-abuse and moderation).
• To diagnose crashes and improve reliability.
• To respond to support requests and reports.

3. Service providers

We share the minimum necessary with infrastructure providers that process data on our behalf:

• Cloudflare — hosting, database, object storage, and real-time/calling infrastructure.
• Apple — push notification delivery (APNs).
• Resend — sending login verification emails.
• Sentry — crash/error diagnostics.

We do not sell your data and do not share it for advertising.

4. Retention

Locally stored history remains on your device until you delete it or uninstall. On our servers, the message delivery buffer is retained up to 30 days, Moments up to 60 days, and chat media up to 30 days. When you delete your account, we delete your account, profile, group memberships, push tokens, and avatar.

5. Your choices and rights

• Access & correction. View and edit your profile in the App.
• Deletion. Delete your account from in-app Settings; this permanently removes your account data.
• Blocking & reporting. Block users and report content; reported content enters a moderation queue.
• Notifications. Control push permissions in your device settings.

6. Security

All network traffic uses HTTPS/TLS. Sensitive data on your device is stored using the platform keychain/keystore. Access to backend systems is restricted.

7. Children

Buko is not directed to children under 13 (or the minimum age required in your region). If you are under that age, please do not use the App.

8. International processing

Our infrastructure is global; your information may be processed in countries other than your own, with appropriate safeguards.

9. Changes

We may update this policy. Material changes will be reflected on this page with a new “Last updated” date.

10. Contact

Questions? Email support@buko.app.

隐私政策

最后更新:2026 年 6 月 21 日

Buko(“本应用”)由 NIXLIGHT TECHNOLOGY LIMITED(“我们”)运营。本政策说明我们收集哪些信息、如何使用,以及你的选择。Buko 为私密、邀请制应用;我们不展示广告,也不出售你的个人数据。

1. 我们收集的信息

• 账号与资料。 你的邮箱地址(用于发送一次性登录验证码),以及你提供的资料:显示名、可选的用户名/handle、头像、封面图、简介。
• 邀请码。 你创建或使用的邀请码,用于实现邀请制准入。
• 消息与媒体。 你发送的消息内容和照片。消息历史主要存储在你的设备上;我们的服务器仅保留最多 30 天的临时投递缓冲。媒体文件存于对象存储(聊天媒体 30 天、朋友圈图片 60 天;头像/封面/群头像在使用期间保留)。
• 朋友圈。 你发布给联系人的动态(文字和照片),保留约 60 天。
• 设备与通知。 每安装一个的设备标识,以及推送通知 token,用于送达通知。
• 通话。 语音/视频通话通过第三方实时网络中转信令与媒体。我们不录制通话。
• 诊断信息。 崩溃与错误报告(可能包含设备型号、系统版本、堆栈),用于保持应用稳定。其中不含你的消息内容。

2. 我们如何使用信息

• 提供消息、通话、朋友圈与通知。
• 验证你的身份,保障账号与服务安全(含防滥用与内容审核)。
• 诊断崩溃、提升可靠性。
• 响应支持请求与举报。

3. 服务提供方

我们仅按最小必要,与代我们处理数据的基础设施提供方共享:

• Cloudflare —— 托管、数据库、对象存储、实时/通话基础设施。
• Apple —— 推送通知送达(APNs)。
• Resend —— 发送登录验证邮件。
• Sentry —— 崩溃/错误诊断。

我们不出售你的数据,也不为广告目的共享。

4. 保留期限

本地历史保留在你的设备上,直到你删除或卸载。在服务器端,消息投递缓冲最多保留 30 天,朋友圈最多 60 天,聊天媒体最多 30 天。当你注销账号时,我们会删除你的账号、资料、群成员关系、推送 token 与头像。

5. 你的选择与权利

• 访问与更正。 在应用内查看并编辑你的资料。
• 删除。 在应用内设置中注销账号,将永久删除你的账号数据。
• 拉黑与举报。 拉黑用户、举报内容;被举报内容进入审核队列。
• 通知。 在系统设置中管理推送权限。

6. 安全

所有网络流量使用 HTTPS/TLS。设备上的敏感数据使用平台 Keychain/Keystore 存储。后端系统访问受限。

7. 儿童

Buko 不面向 13 周岁以下(或你所在地区要求的最低年龄)的儿童。若你未达该年龄,请勿使用本应用。

8. 跨境处理

我们的基础设施是全球性的,你的信息可能在你所在国家/地区以外被处理,并采取适当保护措施。

9. 变更

我们可能更新本政策。重大变更将在本页更新,并标注新的“最后更新”日期。

10. 联系我们

有疑问?请发邮件至 support@buko.app。