Privacy Policy

Last updated: August 1, 2026

Buko (“the App”) is operated by NIXLIGHT TECHNOLOGY LIMITED (“we”, “us”). This policy explains what we collect, how we use it, and your choices. Buko is a lightweight messenger; we do not show ads and we do not sell your personal data.

1. Information we collect

• Account & profile. Your email address (used to send a one-time login code), initial sign-in method and provider identifiers if you use Apple or Google sign-in, and profile details you provide: display name, optional username/handle, avatar, cover image, and bio.
• Invites. If invite access is enabled, invite codes you create or redeem, to manage registration access and abuse prevention.
• Messages & media. The content of messages and photos you send. Message history is stored primarily on your device; our servers keep a transient delivery buffer for up to 30 days. Media files are stored in object storage (chat media for 30 days, Moments images for 60 days; profile/cover/group images are retained while in use).
• Moments. Posts (text and photos) you publish to your contacts; retained for about 60 days.
• Device, sign-in & notifications. A per-install device identifier, app/device/OS information, sign-in time, IP address and approximate region, and a push notification token. We use these details to secure accounts, prevent abuse, diagnose compatibility issues, and deliver notifications.
• Calls. For voice/video calls we relay signaling and media through a third-party real-time network. We do not record calls.
• Diagnostics. Crash and error reports (which may include device model, OS version, and stack traces) to keep the App stable. These do not include your message content.

2. How we use information

• To provide messaging, calls, Moments, and notifications.
• To authenticate you and keep your account and the service secure (including anti-abuse and moderation).
• To diagnose crashes and improve reliability.
• To respond to support requests and reports.

3. Service providers

We share the minimum necessary with infrastructure providers that process data on our behalf:

• Cloudflare — hosting, database, object storage, and real-time/calling infrastructure.
• Apple — push notification delivery (APNs).
• Resend — sending login verification emails.
• Sentry — crash/error diagnostics.

We do not sell your data and do not share it for advertising.

4. Retention

Locally stored history remains on your device until you delete it or uninstall. On our servers, the message delivery buffer is automatically removed within 30 days, Moments are retained for up to 60 days, and chat media for up to 30 days. Account sign-in and device information is retained while your account exists. When you delete your account, we remove your profile, sign-in metadata, login bindings, sessions, push tokens, avatar, and your Moments. Existing contact references, group membership, and group ownership may remain under a generic “Deleted User” identity so shared records are not corrupted. Ownership is not transferred automatically. The group or channel remains visible to surviving members and continues under its existing role and posting rules; capabilities that require an owner or admin may no longer be available. A space is dissolved only after no live human members remain. Ordinary human accounts with no authenticated activity for one year may be deleted. Before scheduling that deletion, we must successfully send a warning email at least 30 days before the earliest deletion date. Any authenticated activity during that period cancels the scheduled deletion. If the warning email cannot be delivered, the deletion countdown does not begin. Copies already delivered to participants’ devices are outside Buko’s control and may remain there, including screenshots or exported copies. Non-reversible keyed digests of deleted sign-in identities are retained for 24 hours to prevent repeated delete-and-register abuse, then removed. Registering again after that cooldown creates a separate new account and does not restore prior data or relationships.

5. Your choices and rights

• Access & correction. View and edit your profile in the App.
• Deletion. Delete your account from in-app Settings. Your profile and personal account data are removed; shared records may remain visible as “Deleted User” as described above.
• Blocking & reporting. Block users and report content; reported content enters a moderation queue.
• Notifications. Control push permissions in your device settings.

6. Security

All network traffic uses HTTPS/TLS. Sensitive data on your device is stored using the platform keychain/keystore. Access to backend systems is restricted.

7. Children

Buko is not directed to anyone under 18 (or the minimum age required in your region, if higher). If you are under that age, please do not use the App.

8. International processing

Our infrastructure is global; your information may be processed in countries other than your own, with appropriate safeguards.

9. Changes

We may update this policy. Material changes will be reflected on this page with a new “Last updated” date.

10. Contact

Questions? Email support@buko.app.

隐私政策

最后更新:2026 年 8 月 1 日

Buko(“本应用”)由 NIXLIGHT TECHNOLOGY LIMITED(“我们”)运营。本政策说明我们收集哪些信息、如何使用,以及你的选择。Buko 是一款轻便的即时通讯应用;我们不展示广告,也不出售你的个人数据。

1. 我们收集的信息

• 账号与资料。 你的邮箱地址(用于发送一次性登录验证码)、首次注册方式、使用 Apple 或 Google 登录时的登录提供方标识,以及你提供的资料:显示名、可选的用户名/handle、头像、封面图、简介。
• 邀请码。 若开启邀请准入,我们会处理你创建或使用的邀请码,用于管理注册准入与防滥用。
• 消息与媒体。 你发送的消息内容和照片。消息历史主要存储在你的设备上;我们的服务器仅保留最多 30 天的临时投递缓冲。媒体文件存于对象存储(聊天媒体 30 天、朋友圈图片 60 天;头像/封面/群头像在使用期间保留)。
• 朋友圈。 你发布给联系人的动态(文字和照片),保留约 60 天。
• 设备、登录与通知。 每个安装实例的设备标识、App/设备/系统信息、登录时间、IP 地址及大致地区,以及推送通知 token。我们使用这些信息保障账号安全、防止滥用、诊断兼容性问题并送达通知。
• 通话。 语音/视频通话通过第三方实时网络中转信令与媒体。我们不录制通话。
• 诊断信息。 崩溃与错误报告(可能包含设备型号、系统版本、堆栈),用于保持应用稳定。其中不含你的消息内容。

2. 我们如何使用信息

• 提供消息、通话、朋友圈与通知。
• 验证你的身份,保障账号与服务安全(含防滥用与内容审核)。
• 诊断崩溃、提升可靠性。
• 响应支持请求与举报。

3. 服务提供方

我们仅按最小必要,与代我们处理数据的基础设施提供方共享:

• Cloudflare —— 托管、数据库、对象存储、实时/通话基础设施。
• Apple —— 推送通知送达(APNs)。
• Resend —— 发送登录验证邮件。
• Sentry —— 崩溃/错误诊断。

我们不出售你的数据,也不为广告目的共享。

4. 保留期限

本地历史保留在你的设备上,直到你删除或卸载。在服务器端,消息投递缓冲会在最长 30 天内自动删除,朋友圈最多保留 60 天,聊天媒体最多保留 30 天。账号登录与设备信息在账号存续期间保留。当你注销账号时,我们会删除你的资料、登录元数据、登录绑定、活跃会话、推送 token、头像和你自己的朋友圈。为避免破坏共享记录,已有联系人引用、群成员身份和群主身份可能继续以通用的“已注销用户”身份保留。系统不会自动转移群主。群组或频道仍对存活成员可见,并继续遵循原有角色和发布权限;需要群主或管理员的功能可能无法继续使用。仅当其中已没有任何未注销的真人成员时,系统才会解散该空间。普通真人账号连续一年没有任何已认证活动时可能被删除。在安排删除前,系统必须成功发送提醒邮件,且邮件发送时间距离最早删除日期至少 30 天。在此期间进行任意已认证活动都会取消计划删除;提醒邮件发送失败时不会开始删除倒计时。已经送达参与者设备的副本不在 Buko 控制范围内,可能继续保留,包括截图或导出的副本。为防止反复删除和注册,系统会保留已删除登录身份的不可逆带密钥摘要 24 小时,之后删除。冷却期结束后重新注册会创建一个彼此无关的新账号,不会恢复原数据或关系。

5. 你的选择与权利

• 访问与更正。 在应用内查看并编辑你的资料。
• 删除。 在应用内设置中注销账号。你的个人资料与个人账号数据会被删除;共享记录可能按上述说明继续以“已注销用户”显示。
• 拉黑与举报。 拉黑用户、举报内容;被举报内容进入审核队列。
• 通知。 在系统设置中管理推送权限。

6. 安全

所有网络流量使用 HTTPS/TLS。设备上的敏感数据使用平台 Keychain/Keystore 存储。后端系统访问受限。

7. 儿童

Buko 不面向 18 周岁以下(或你所在地区要求的更高最低年龄)的用户。若你未达该年龄,请勿使用本应用。

8. 跨境处理

我们的基础设施是全球性的,你的信息可能在你所在国家/地区以外被处理,并采取适当保护措施。

9. 变更

我们可能更新本政策。重大变更将在本页更新,并标注新的“最后更新”日期。

10. 联系我们

有疑问?请发邮件至 support@buko.app。