Privacy Policy

Bean is a private family organizer for expecting and new parents. This policy explains the information Bean processes when you use the mobile app or public website.

Information Bean handles

• Your email address, name, account identifier, and household membership.
• When you invite a partner, their email address, a private invitation link, invitation status, and email-delivery information.
• Household details such as parent names, a baby nickname, due date, and birthday.
• Captures, log entries, assistant questions, saved links, tags, notes, and photos you choose to upload.
• If you enable notifications, a device installation identifier, push token, timezone, reminder preferences, and delivery status.
• Technical request information needed for security, reliability, and abuse prevention, including information processed by our authentication and hosting providers to protect the service.
• On the public website, cookie-free aggregate page views, App Store link clicks, and validated campaign codes from the page URL. Bean creates no persistent web analytics identifier.

How Bean uses information

Bean uses this information only to authenticate you, provide and sync your private household, organize captures, answer questions, save resources, prevent abuse, and maintain and improve the service, and send notifications you enable. Bean uses cookie-free aggregate website activity to understand campaign performance and feature reliability. Optional mobile product analytics is not enabled in the current app release. Bean does not sell personal information, show advertising, or use third-party advertising trackers.

AI processing

AI features are optional. Before using them, Bean asks for your explicit permission to send the information below to Anthropic (Claude), through its commercial API. Accepting Bean’s Terms does not grant this permission. This information may include pregnancy or health details you choose to enter. Bean does not send saved photos, uploaded files or microphone audio to Anthropic. Anthropic states that commercial API inputs and outputs are not used to train its models by default and are normally retained for up to 30 days, subject to its legal and safety obligations.

We require service providers receiving personal information to provide the same or an equivalent level of protection described in this policy, including confidentiality, purpose-limited processing and appropriate security safeguards. Anthropic processes Bean’s API data under its Commercial Terms and Data Processing Addendum, which set out these obligations. Bean does not enable optional sharing of API content for model training.

• Ask Bean: your question, your prior chat turns and associated replies with known consent provenance, and the household’s approximate pregnancy week or baby age. Other members’ chat turns and legacy shared history are not automatically included in AI requests.
• Quick Log with AI: the text or confirmed speech transcript you submit, and the capture date, time and time zone used to interpret timing.
• Saved-link tagging: the URL, title or note you provide, and text fetched from that web page.

You can decline and still use Bean, save plain notes without AI, and keep your photos, files, visits and invitations. Review or withdraw permission in Settings → AI features. Bean records the policy version, provider, permitted purposes and time of your choice for your account. Turning AI off prevents future provider requests across your devices; it cannot recall data already transmitted. We ask again before sharing under a changed AI provider or materially different disclosure.

Voice and photos

If you use voice input, your device’s speech-recognition service may process audio to produce editable text. Bean does not save the recording. Photos are uploaded only when you choose one and are stored privately for your household.

Service providers and storage

Clerk provides account authentication, including email verification and account recovery. Apple or Google processes sign-in when you choose that provider. Bean stores private household data in access-restricted Neon/Postgres storage. Bean also relies on Vercel for hosting and file storage, Anthropic for AI features, Apple, Google, or the device platform for speech recognition, and Expo/EAS for building and delivering the app and routing enabled push notifications through Apple Push Notification service or Firebase Cloud Messaging. For cookie-free aggregate website activity, Bean also uses PostHog as a product analytics service provider. PostHog events go first to Bean’s server, which accepts only an approved list of event names and coarse properties before forwarding them without account, household, or health information. These providers process information only to supply their services to Bean.

Resend also delivers partner invitation emails. It processes the invited email address, invitation message and private link, and delivery or failure information. Opening an invitation does not create an account or join a household; the invited person must sign in and explicitly accept in Bean.

Website analytics and retention

Vercel Web Analytics also measures aggregate visits to the public home, privacy, terms, and support pages. It processes page paths, safe referrers, approximate location, and browser and device information. We remove query strings and URL fragments before sending page views, and do not track private app, admin, account, or invitation pages. Vercel uses request information to derive a daily visitor identifier without analytics cookies; that identifier is discarded after 24 hours. Bean honors Do Not Track and Global Privacy Control for these Vercel page views.

Aggregate website events are retained for no more than 12 months and are not linked back to your Bean account. They do not include private household content, invitation codes, names, email addresses, or health information. The current mobile app does not collect optional product analytics; a future rollout will provide a separate choice before enabling it.

Retention and deletion

Bean retains household information while the household or an account remains active. You can permanently delete your account from Settings in the app. Deletion removes your sign-in and items attributed to you. Shared household details and items added by another member remain for that member. If you are the last member, Bean deletes the household and its stored files. Provider backups and security logs may take a limited period to expire.

Security and children

Bean uses authenticated household access and encrypted network connections. No system is perfectly secure. Bean is intended for adults and is not directed to children under 13.

Contact

For privacy questions or deletion help, email support@ourbean.app.