Privacy Policy

The controller responsible for processing personal data in Beeside is Aiconic Studio Bingesser, the sole proprietorship of Ramin Bingesser, Neuhusweg 4, 6205 Eich, Switzerland, registered in the commercial register of the Canton of Lucerne, UID CHE-429.542.672 (“we”).

For questions about privacy and requests regarding your rights, contact us at hello@getbeeside.com.

We process personal data to provide Beeside and its features and to operate it securely. This includes:

• Account: Your email address, to create your account and let you sign in with a six-digit code that we send by email. When you first start, you can use Beeside anonymously until you secure your account with your email address.
• Family and people: The family’s name, country, language, and time zone; for each person, their name, avatar (an emoji), color, and whether they are an adult or a child. For children, their birthday including the year, so Beeside knows their age (for example, to suggest suitable chores) and can remind you of the birthday; for adults, optionally their birthday, with or without the year. Optionally, a PIN protects a profile; we store only a hash of it.
• Family content: Everything your family enters: grocery items and stores, to-dos, events, recipes with photos, meals, packing lists, birthdays and gift ideas, subscriptions and contracts with amounts and deadlines, chores, stars and allowance, and notes. Family members see this content together; entries marked as “private” are visible only to their owner.
• Vault: Your devices encrypt passwords, Wi-Fi details, codes, and notes end to end (using the libsodium library). The server stores only encrypted data and cannot read it.
• Devices: Device name, browser identifier (user agent), time of the last connection, and the push token for notifications, as well as paired kids’ devices and family tablets. This lets notifications reach the right device and paired devices work.
• Logs: The history (who changed what) for 180 days and a notification log (which notification went to which profile) for 120 days. The history is a feature for your family; the notification log serves operations.
• Subscription: Status, expiration, product, and store of the subscription, which profile purchased it, and the purchase events reported by RevenueCat. Beeside uses this to unlock your family’s access.
• Onboarding usage: Which steps of the onboarding and the subscription screens are shown, completed, or skipped, together with a random installation identifier, the time, the app version, and the platform. This shows us where getting started is too hard, so we can improve it. The identifier is not an advertising ID and is not linked to your account or family; we analyze it ourselves, without any third-party service.
• AI features: Text, photos, and item names for Quick add and AI import (see “AI features”).
• Connection data: Whenever an app or browser connects to our servers, our service providers process technically necessary data such as the IP address to answer the request and to operate the service securely.

Some data is processed only on your device and never leaves it:

• Dictation: Speech recognition runs on your device, and the recording is not transmitted. The recognized text is treated like any other input.
• Device calendars: With your permission, Beeside shows events from your device’s calendars. These events are not uploaded.
• Settings and drafts: Settings such as appearance and language, and drafts in Quick add.

Beeside sorts much of what you add without an AI service: with a dictionary on your device, with what your family sorted before, and on iPhones with Apple Intelligence, with Apple’s on-device model. Whatever is still open, and AI import, runs through our server. The server then sends data to Anthropic, the provider of the AI model we use:

• for sorting new entries, such as grocery items, their names and the departments, categories, or areas to choose from
• for importing, the text you entered or the photo you chose

Beeside does not add your account, your email address, or the names of the people in your family; only what is in the text or photo is sent. Private entries are never sorted through the server, only on your device. We do not store the photo you import. We cache how item names are sorted for 180 days per family and keep usage counts per family and month for 13 months; use is limited per family. Our contracting party is Anthropic Ireland, Limited in Dublin; the data is also processed in the USA and other countries. Under its commercial terms, Anthropic may not use this data to train models, and it deletes inputs and outputs after 30 days, except in case of a violation of its usage policies.

Your family can turn off the server route in the settings. Beeside then sorts only on your device, and importing photos is not available.

The AI features suggest entries. Beeside does not make automated individual decisions about people.

Beeside sends notifications, such as reminders, only if you allow them on your device or in your browser. For this, we store your device’s push token and hand each notification to the platform’s push service: Apple Push Notification service (APNs), Google’s Firebase Cloud Messaging (FCM), or your browser’s push service (Web Push).

We record which notification went to which profile in a notification log for 120 days. You can turn off notifications at any time in your device or browser settings.

In the web app, Beeside stores your sign-in data and the local copy of your data in your browser (localStorage and IndexedDB), so that you stay signed in and Beeside works without a connection. A cookie named “beeside-language” remembers the language you chose.

Beeside does not use advertising or analytics cookies. You can delete the stored data at any time in your browser settings.

• Invitations: New members join your family via a link, QR code, or code. An invitation is valid for 14 days. We store invitation and pairing codes only as hashes.
• Calendar subscription: If you want, Beeside creates a secret link that other calendar apps use to fetch your family’s events as a calendar file. Anyone who knows the link can read these events. You can create a new link; the previous one then stops working. The calendar app where you add the link has its own privacy policy.
• Recipe import: When you import a recipe from a website, our server fetches that page in the web app, and your device fetches it in the app; Beeside takes the title, image, ingredients, and steps.

Until Beeside is on the App Store and Google Play, you can join a waitlist at www.getbeeside.com. For this we store your email address, the language of the page, where the form was, when you signed up and when you confirmed. Nothing else.

After you sign up, we send an email with a confirmation link (double opt-in). Only after you confirm do we write to you, once, when Beeside is available. We delete unconfirmed addresses once their confirmation link expires after 7 days.

Every email contains a link to leave the waitlist; your address is deleted right away. After the launch email we delete the whole waitlist.

To prevent abuse we count sign-up attempts per IP address. For this we store a non-reversible hash of the IP address and delete it after 24 hours. The waitlist is stored with Supabase, and the emails are sent by Resend (see Service providers).

We use service providers that process personal data on our behalf:

• Supabase Pte. Ltd., Singapore: Database, sign-in, files such as photos, and server functions. Data is stored in the eu-central-2 region in Zurich, Switzerland (an Amazon Web Services data center). For support and operations, Supabase staff may also access it from other countries, such as the USA. Supabase keeps logs with IP addresses for 7 days, and daily backups for 7 days as well.
• Railway Corporation, USA: Hosting of the web app at app.getbeeside.com and the website www.getbeeside.com on servers in Amsterdam, the Netherlands. Railway keeps request logs with IP addresses for no more than 30 days.
• Plus Five Five, Inc. (Resend), USA: Sending the emails with your sign-in code and the waitlist confirmation from hello@getbeeside.com. Emails are sent from the eu-west-1 region in Ireland; Resend keeps delivery logs with your email address for 30 days in the USA.
• Anthropic Ireland, Limited, Ireland: AI model for Quick add and AI import (see “AI features”).
• RevenueCat, Inc., USA: Subscription management. RevenueCat receives purchase receipts and an identifier for your family, but no names, no email address, and no advertising ID. When a family deletes its data, we also delete its customer record at RevenueCat.

Purchases go through Apple’s App Store and Google Play. Apple and Google are responsible for purchases and payment, and their privacy policies apply; we never receive payment details such as card numbers. Notifications are delivered by the push services of Apple, Google (Firebase Cloud Messaging, on our behalf), and browser makers.

Beeside’s database is located in Switzerland. Some service providers process data abroad: Railway in the Netherlands and the USA, Resend in Ireland and the USA, Anthropic in Ireland, the USA, and other countries, RevenueCat in the USA, and Supabase, for support and operations, also in Singapore and the USA.

Ireland and the Netherlands are among the countries whose level of data protection Switzerland recognizes as adequate. Railway and Google are certified under the Swiss-U.S. Data Privacy Framework, which Switzerland has also recognized as adequate since September 15, 2024. All other transfers to the USA and to Singapore are covered by the European Commission’s standard contractual clauses with the adjustments for Switzerland, which are part of our contracts with these providers. For users in the EU, transfers to the USA rely on the EU-U.S. Data Privacy Framework (Railway, Google, Resend) or on the standard contractual clauses.

Apple and Google (app stores and push services) and browser makers process data under their own terms, including outside Switzerland and the EU.

For users in the EU and the EEA, we rely on these legal bases:

• Contract (Art. 6(1)(b) GDPR): Account, family, content, devices and sync, subscription, and AI features, meaning everything needed to provide Beeside.
• Legitimate interests (Art. 6(1)(f) GDPR): Security and abuse prevention, such as the lockout after wrong PIN entries and the limits on AI features, stable technical operation, and measuring the onboarding to improve it. Also information about other people that your family enters itself, such as children or relatives’ birthdays: your family’s interest and ours is to provide the service your family ordered. Children’s interests weigh particularly heavily here; that is why we process only what parents enter about them and use it for nothing else.
• Consent (Art. 6(1)(a) GDPR): Notifications that arrive only after you allow them on your device or in your browser. You can withdraw this consent at any time in your device or browser settings. The same applies to the waitlist at www.getbeeside.com: it only takes effect after you confirm by email and ends with one click on the unsubscribe link.

You can delete your own account at any time: in the app’s settings or on the web at app.getbeeside.com, even without a subscription. Your account is deleted immediately. If you are the last person in your family with an account, you can also delete the entire family with all its content; otherwise, the family remains for the other members. Deleted data disappears from our backups within 7 days.

Before deleting, you can export your own data as a file (JSON) in the settings. You can also request deletion by emailing hello@getbeeside.com. Deleting your account does not cancel an active subscription; subscriptions are canceled in your Apple or Google Play subscription settings.

In addition:

• Content remains stored until your family deletes it. Deleted entries stay in the Trash for 30 days and can be restored; after that, they are permanently deleted, including photos.
• Without a subscription, Beeside stays locked. Your family’s data is kept so that it is back as soon as you subscribe again. If no one in a family without a subscription has signed in for 12 months, we delete the family with all its content; we announce this by email to all adults with an account 30 and 7 days in advance. Until then, you can export and delete at any time.
• If a person deletes their account and the family remains, their profile and private entries move to the Trash and are permanently deleted after 30 days. Shared entries they created remain with the family.
• History: 180 days. Notification log: 120 days. Sorting of item names for the AI features: 180 days. AI usage counts: 13 months. Onboarding usage: 12 months. Logs with IP addresses at our service providers: 7 to 30 days (see “Service providers”).
• An invitation is valid for 14 days; its record is deleted 90 days after it is used or expires.
• We delete anonymous sign-ins without a family after 7 days. We delete anonymous families without an account and without a subscription once no device has connected for 30 days.
• When a family deletes its data, we also delete its customer record at RevenueCat. Apple and Google keep purchase data under their own terms.

You have the right to access your personal data and to have it corrected or deleted, to restrict or object to its processing, and to data portability. Much of this works directly in Beeside:

• Export: In the settings, as a file (JSON) that you can also take to another service.
• Correction: You can change your details and entries in the app at any time.
• Deletion: You can delete entries and your entire account in the app and on the web (see “Retention and deletion”).

For anything else, just email hello@getbeeside.com. You can withdraw consent, for example for notifications, at any time with effect for the future.

You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with a data protection supervisory authority, for example in your country of residence.

Only adults aged 18 or older can create an account. Children do not have their own account in Beeside. Parents create profiles for their children and decide what information to enter.

Parents can pair a child’s device. It then shows only chores, stars, and rewards and transmits only what the child taps there, such as a completed chore or a redeemed reward. None of this goes to an AI service, and there are no in-app purchases for children.

If you enter information about other people, such as relatives’ birthdays or names in events, you may do so only to the extent you are entitled to. We process this information only to provide Beeside to your family. We do not inform these people individually, because we do not know them and doing so would require disproportionate effort. You can also keep it minimal: birthdays can be entered without the year.

Our safeguards include:

• encrypted transmission (TLS) for every connection
• row-level security in the database, so each family sees only its own data
• private entries that only their owner can see
• the end-to-end encrypted Vault
• PINs, invitation codes, and pairing codes stored only as hashes

We update this privacy policy when Beeside or the law changes. The version published here applies; the date at the top shows when it was last updated. We will inform you of significant changes in an appropriate way.

Questions about privacy and requests regarding your rights: hello@getbeeside.com. Postal address: Aiconic Studio Bingesser, Ramin Bingesser, Neuhusweg 4, 6205 Eich, Switzerland.