Privacy Policy

Last updated: 10 October 2026

1. Controller

The controller responsible for processing personal data under this Privacy Policy is:

Lukas Ruszkowski
Switzerland
Email: privacy@bee-better.app

2. What data we process and why

2.1 Account and Authentication

To register and sign in we require:

Purpose: providing a personal account and secure login. Legal basis: performance of a contract (Art. 6(1)(b) GDPR / Art. 31(2)(a) revDSG).

2.2 App Content

You voluntarily enter data about your contacts:

This data is stored in your account on Supabase infrastructure and is accessible only to you. Purpose: core app functionality. Legal basis: performance of a contract.

Holidays and cultural occasions. You can assign occasions to a contact that you want to be reminded of, including religious festivals such as Christmas, Easter, Rosh Hashanah, Hanukkah, Eid al-Fitr, Eid al-Adha or Diwali. Such an assignment may allow an inference about that person’s religion and therefore counts as a special category of personal data (Art. 9 GDPR, Art. 5(c) revFADP). It is entirely voluntary, made by you alone, visible only to you, and can be removed again at any time. Legal basis: your explicit consent given by setting the occasion (Art. 9(2)(a) GDPR).

Most of these dates are built into the app. Only for Jewish festivals with a moving date (Rosh Hashanah, Hanukkah) does the app look the date up with Hebcal, a free calendar service. The only thing transmitted is the year — not your account, not the person concerned, and nothing else about you. As a technical consequence, Hebcal learns your IP address. Islamic, Hindu and Chinese festivals are built in and trigger no lookup.

Information about other people. What you record about others stays in your account and is made available to no one else, not even to the person concerned. You are, however, responsible for the lawfulness of recording it: only record what you genuinely need for personal use. For purely personal and household purposes, the GDPR does not apply (Art. 2(2)(c)).

2.3 Contact Import (optional)

If you use the import feature, the app will request one-time access to your address book. Device contacts are processed locally only during selection — nothing is transferred to servers before you explicitly import. Only the contacts you select are saved to your account.

2.4 Calendar Import (optional)

If you want to take birthdays from your calendar, the app requests read access to your calendars and scans the entries for birthdays. This analysis happens exclusively on your device — calendar entries are never transmitted to any server. Only the birthdays you then explicitly accept are saved. Your calendar is only ever read, never modified.

2.5 Push Notifications

With your consent we process an Expo push token to deliver notifications to your device. The token is stored in your account together with your device's time zone — the time zone serves solely to deliver messages at your local time rather than in the middle of the night. We also log which message was sent to you and when, in order to prevent duplicate delivery.

We send you two kinds of messages:

Independently of this, you can disable notifications entirely at any time in your device settings.

Messages sent by our server (for example the reminder when you have not opened the app for a while) are delivered through the push service of Expo. Expo receives your push token and the text of the message, which may contain the first name of one of your contacts, and passes both on to Apple. Reminders that the app schedules on your device itself never leave your device.

2.6 Payments and Subscriptions

Purchases (Pro subscription) are processed exclusively through Apple In-App Purchase. We do not receive any payment details (no credit card data, no billing address). RevenueCat manages the subscription status technically; this involves processing a user ID (corresponding to your account ID) and purchase data (products purchased, subscription status, timestamps, App Store country/currency). Apple's and RevenueCat's privacy policies also apply to payment processing.

We additionally store the event notifications from RevenueCat (purchase, renewal, cancellation, expiry) in our own database so that your subscription status remains correct even while the app is closed. These notifications contain no payment details.

2.7 Usage Analytics and Error Diagnostics

We use PostHog to understand how the app is used and to improve it. We collect usage events (e.g. "Onboarding started", "Paywall shown", completed reminders). We do not collect the contents of your contacts, notes, photos or messages, or any names.

After you sign in, these events are linked to a pseudonymous identifier corresponding to your account ID. We can therefore associate usage patterns with an account without viewing your content. The data is pseudonymous, not fully anonymous.

We also collect technical error diagnostics (error context and abbreviated system/SDK messages) to fix crashes. These contain no content you have entered.

PostHog is operated in the EU Cloud (eu.i.posthog.com). IP-based geolocation is disabled — no location data is derived from your IP address. There is no automatic capture of clicks or screens (no autocapture). Legal basis: legitimate interest in a functioning, improved app (Art. 6(1)(f) GDPR). You may object to analytical processing (see Section 5).

2.8 Session Recording (Onboarding and Purchase screens only)

To improve the onboarding experience and the clarity of our purchase screens, we record screen interactions via PostHog Session Replay — but exclusively during onboarding and on paywall / purchase screens. No recording takes place in the rest of the app (in particular on your contacts, notes, photos and reminders).

To protect your data, all text inputs and images are automatically masked (blacked out) in these recordings — entered content is not readable in the recordings. The recordings help us understand usability and drop-off points only; they are not used to identify individuals. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You may object to this processing (see Section 5).

2.9 Feedback and Surveys

When you write to us through the feedback feature, we store your text together with your account ID so we can respond and act on it. If you cancel your subscription, we ask once for the reason; we record the answer option you select and whether you additionally wrote something in the free-text field — not the free text itself. Both are voluntary. Legal basis: legitimate interest in improving the app.

2.10 Advertising Measurement (Meta)

We advertise BeeBetter on Instagram and Facebook. So that we can tell which ads actually bring new users, the app includes Meta’s App Events SDK.

Only events unrelated to your content are transmitted:

What is never transmitted: your contacts, notes, conversation content, photos, birthdays, your name, your email address and your phone number. We do not use Meta’s “Advanced Matching” and we do not send your account ID to Meta. The SDK does send device type, operating system and app version, and your IP address.

When measurement starts. Meta’s component starts together with the app, not only after the tracking prompt. From that moment it reports that the app was installed and opened. This is deliberate: people who abandon setup would otherwise go uncounted and our advertising measurement would be systematically skewed. No advertising identifier is transmitted while you have not agreed to the tracking prompt.

Advertising identifier and Apple’s tracking prompt. On iPhone, Apple asks you during setup whether BeeBetter may track your activity across apps and websites. Your device’s advertising identifier (IDFA) is passed to Meta only if you agree there. If you decline, it stays off, and measurement then happens only in aggregate via Apple’s SKAdNetwork, which does not allow conclusions about you as a person.

Objection. You can switch advertising measurement off at any time in the app, under Settings → Legal → “Measure ad performance”. This takes effect immediately and permanently, regardless of how you answered Apple’s prompt.

Legal basis: consent insofar as the advertising identifier is processed (Art. 6(1)(a) GDPR); otherwise legitimate interest in measuring the effectiveness of our advertising (Art. 6(1)(f) GDPR), which you may object to at any time as described. Meta processes this data in the USA and also uses it for its own purposes under its own terms; transfers are safeguarded via EU Standard Contractual Clauses.

This section concerns the app. For the waitlist on our website, see Section 2.12.

2.11 This Website

Our website bee-better.app is hosted by Infomaniak in Switzerland. When you open a page, the server briefly stores technically necessary log data: IP address, time, requested page, browser and operating system. It is used solely to operate the site securely and to fend off attacks, and is not combined with any other data. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

The website sets no cookies, runs no analytics or advertising tools in your browser and loads no third-party content. The fonts are served from our own server as well, so opening a page does not connect you to Google or any other provider. The only exception is the waitlist form: what you submit there goes to our server at Supabase (see Section 2.12).

2.12 Waitlist and Newsletter

Before BeeBetter launches in the App Store, you can join our waitlist on bee-better.app. For this we process:

Double opt-in. After you sign up, we send you an email with a confirmation link. Only once you open it are you on the list. We delete unconfirmed sign-ups automatically after 30 days. Signing up the same address again triggers a new email at most every ten minutes, five at most in total.

Purpose. We write to you when BeeBetter launches, send you your code for the day-one discount, and occasionally share news (newsletter). We also evaluate which of our ads lead to confirmed sign-ups.

Sending via Brevo. We send these emails via Brevo (Sendinblue SAS, Paris, France). Confirmed addresses are also kept in our contact list there. Brevo may record whether an email was opened and whether a link in it was clicked.

Reporting to Meta. If you came from an ad on Instagram or Facebook, we tell Meta after your confirmation that the ad led to a sign-up (event "Lead"). Nothing runs in your browser for this; our server sends the report via Meta's Conversions API. We transmit your email address and the internal ID of your sign-up, both only as a hash (SHA-256), plus IP address, browser identifier and the ad's click ID. Meta compares the hashes with those of its own accounts to attribute the sign-up to the ad; Meta does not receive your address in plain text. Meta also processes this data in the USA and, under its own terms, for its own purposes; transfers are safeguarded via EU Standard Contractual Clauses.

Unsubscribing and withdrawal. You can withdraw your consent at any time, via the unsubscribe link in our emails or by writing to privacy@bee-better.app. Withdrawal applies to the future; after that we will not write to you again.

Legal basis: your consent (Art. 6(1)(a) GDPR), given by signing up and confirming.

3. Processors and Data Transfers

To provide the app we use the following service providers who process data on our behalf:

Where data is transferred to countries outside Switzerland/the EEA (in particular the USA), this is done on the basis of appropriate safeguards such as EU Standard Contractual Clauses. We do not sell your data. For the measurement of our advertising we transmit to Meta only the events and details listed in Sections 2.10 and 2.12; we never pass on your content.

4. Retention

We store your data for as long as your account is active. If you delete your account (in the app under Settings → Delete Account), all your data will be completely and irreversibly deleted within 30 days.

Waitlist sign-ups: we delete unconfirmed ones automatically after 30 days. We keep confirmed ones until you unsubscribe or ask us to delete them; after that we delete them, except where we need them as proof of your unsubscribing (see Section 2.12).

5. Your Rights

You have the right to:

To exercise your rights, contact: privacy@bee-better.app

6. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection authority. In Switzerland: Federal Data Protection and Information Commissioner (FDPIC). In the EU: the supervisory authority of your country of residence.

7. Security

All transmission between the app and servers uses encrypted HTTPS connections exclusively. Passwords are stored as hashes and are not accessible to us.

8. Children

BeeBetter is not directed at children under 13. We do not knowingly collect data from children.

9. Changes to this Policy

We may update this policy. The current version is always available at this URL. We will notify you within the app of any material changes.