Account and age checks
Google Sign-In and Firebase Authentication handle your sign-in. Butt Butt uses an account identifier, sign-in email, account status and records of the terms you accept to recognize you, protect your account and provide the service. Google handles your Google password.
You must be at least 18. When you enter your date of birth, the service checks your eligibility. The account database records the result and time of the declaration, the applicable region when available, and any restriction or appeal. It does not store the full birth date from that check. Where stronger proof is required, access may be restricted. If a separate verification provider is offered, you can see who will receive your information before you proceed.
Profile and matching
We use the profile details you save, including your username, bio, emoji appearance, gender choices, relationship preferences and availability, to find compatible introductions. Some choices can reveal sensitive information, including sexual orientation. Eligible members may see your emoji and information offered in an introduction. Each person decides independently whether to connect.
Body details are optional. If you save a length, circumference or other intimate detail, Butt Butt can use it for private matching and show that detail to a connection after everyone accepts. Measurements are self-reported and stored in millimeters, including when you enter them in inches. You can leave these fields blank or clear them and save your profile again.
Location and online status
If you choose nearby discovery, Android asks for approximate location while you use the app. The service receives the coordinates Android supplies and converts them into a coarse area for matching. Eligible members can see your emoji in that area and that you were recently active. The map does not show your exact position. Separately, the service can use a regional signal to determine which age-access rules apply.
You can skip sharing your area or revoke the location permission in Android settings. Revoking the permission stops new device-location readings. A previously saved area can still be used for matching. Contact Dana to request its removal, or delete your account.
Messages and optional photos
Butt Butt stores proposals, consent decisions, conversation membership, messages and timestamps so participants can communicate and safety reports can be investigated. The emoji cover and two-thumb gesture control what is visible on your screen. Messages are not end-to-end encrypted. The service can decrypt them for delivery and authorized moderation.
Where private face-photo sharing is available, the photo you choose is reviewed before sharing. You must offer it and the recipient must accept. Revoking a reveal limits later access in the app. A recipient may already have a copy.
Who receives information
- Other members receive the information available through nearby discovery, an introduction or a conversation, subject to the choices described above.
- Google and Firebase handle authentication. Google Cloud hosts the service and its database. These providers may process identifiers, IP addresses, device or connection information and service logs to operate and secure their services.
- Authorized moderators and support may review relevant messages, photos, blocks, reports, appeals and account records to address abuse or assist you. If you email support, Gmail handles your email address, message and any attachments.
- Legal or safety recipients may receive information when disclosure is legally required or necessary to address a specific safety, fraud or security issue.
The current Android test has no advertising or paid purchases enabled. We do not sell personal data or use private profile details, messages or location for targeted advertising.
Security and retention
The app uses HTTPS to communicate with its service. Access to private information is checked against accounts, consent and moderation permissions. The service encrypts stored message bodies and private photo content.
We retain account, profile and conversation data while providing those features. If you delete your account, limited records can remain for specific purposes. These include restricted evidence from safety reports and appeals, fraud-prevention identifiers, and receipts documenting completed deletions. Certain receipts and one-way identifiers have no automatic expiry. Backups, operational logs and support correspondence may persist separately, including during backup replacement or while a support, legal or security matter is being resolved.
Delete your account and data
In Butt Butt, open Settings → Delete my account. If you are still completing onboarding, use Delete account instead where available. You can also request deletion without using the app. Email 10tothehundrethpower@gmail.com with the subject “Butt Butt account deletion.” Use the email associated with the account if possible so support can verify ownership.
An accepted in-app deletion request removes your account from discovery and gives you 24 hours to cancel. After that window the service queues deletion of your account and associated data, including your profile, preferences, stored areas, conversations and private photos. It also queues removal of your Butt Butt sign-in record from Firebase. Processing and backup removal can take longer. The limited records described above may remain. Deleting Butt Butt leaves your personal Google account intact.
Questions, corrections or privacy requests
Email Dana E. Carlson at 10tothehundrethpower@gmail.com to ask about your data, request access or a correction, or report a possible underage account. Include just enough information to locate the account. Keep passwords, sign-in codes, identity documents and intimate photos out of support emails.
We will update the effective date on this page when the policy changes. For details about the providers that handle authentication and hosting, see Firebase privacy and security and Google’s privacy policy.