Privacy Policy
Contents
- Who is responsible
- The short version
- Data on your device
- Apple Health and Health Connect
- Optional encrypted backup file
- Purchases
- Website logs
- What we do not do
- Legal bases
- Retention
- Your rights
- Deleting your data
- Recipients and transfers
- Regional information
- Consumer Health Data Privacy Policy
- Children
- Security
- Changes
- Contact
1.Who is responsible
The controller (and, under US state laws, the “regulated entity” or “business”) for the Beepim app and this website is:
Billionaire Way
E-mail: support@beepim.live
This policy covers the Beepim mobile app (iOS and Android) and this website at beepim.live.
2.The short version
- Your health entries, including your pulse estimates, stay on your device. We do not have them.
- The camera is used only while you measure. Camera images are analysed on your phone and are never stored, logged or sent anywhere. The app does not use the microphone.
- The app has no server and no account. It sends no health data, and nothing else about you, to us.
- The optional backup is an encrypted file that you save to your own phone or share yourself. Only a recovery code that you hold opens it. We never receive the file and cannot read it.
- No advertising, no analytics and no tracking.
- Payments are handled by Apple and Google.
- You can delete everything in the app.
3.Data on your device
Everything you record in the app, such as pulse estimates, the situation, energy and mood you add, notes, and blood pressure or glucose values you type in, is stored in the app’s local storage on your device. We do not receive, access or process it. Because this data never reaches us, we are not the controller of it; you decide what you record and whom you show it to. When you export a file, it is created on your device and you choose where it goes (print, share sheet, e-mail, files). Once you share it with others, their handling is outside our control.
Camera. To estimate your pulse, the app uses the rear camera and flashlight for about 20 seconds (30 at most) after you tap Measure and have allowed camera access. Each video frame is reduced to a few colour averages in memory on your device. Camera images are never saved, shown to us, uploaded or included in a backup file, and the camera and flashlight are switched off when the measurement ends. Only the resulting pulse estimate (a number in beats per minute), its signal quality and the context you add are saved, on your device. You can withdraw camera access at any time in system settings; the rest of the app keeps working.
Phone system backup. If you have backup switched on for your phone (Google backup on Android, iCloud or a device backup on iOS), the operating system may include the app’s stored data, such as your entries, in that backup, and may restore it when you set up a new phone or reinstall the app. That backup is made and stored by Google or Apple under your Google or Apple account and your own settings, and Google’s or Apple’s terms and privacy policies apply to it. We do not take part in it and have no access to it. The recovery code is kept in the system’s secure storage and is not part of it. You can turn the system backup off in your phone’s settings.
4.Apple Health and Health Connect
If you allow it, the app reads blood pressure and blood glucose records from Apple Health (HealthKit) on iOS or Health Connect on Android. Writing is off by default: only if you switch it on for blood pressure or glucose, the app also saves the values you type in yourself to Apple Health or Health Connect, so other health apps you choose can see them. Your camera pulse estimates are never written, and the app does not read heart rate. Reading and writing happen only for the data types you approve in the system permission dialog, and you can change or withdraw the permission at any time in system settings.
- Data from HealthKit and Health Connect is used only to show it to you in the app, next to your own history and trends.
- It is not used for advertising, marketing or profiling, and it is not sold or shared with third parties.
- It is never included in the optional backup file.
The app’s use of information received from Health Connect adheres to the Google Play User Data Policy, including the Limited Use requirements.
5.Optional encrypted backup file
Creating an encrypted copy (a Premium feature) turns all your entries into one file with the ending .beepim. When you make your first copy, the app generates a recovery code on your device and shows it to you once. A key is derived from that code on your device (HKDF-SHA-256) and the file is encrypted with it (XChaCha20-Poly1305) before it is handed to the system Save or Share sheet. You choose where the file goes: your phone’s storage, a cloud drive, an e-mail or a computer.
- We never receive the file. The app does not upload it, and we run no server for it. We have no account, no copy and no key.
- Only your recovery code opens it. The code is kept on your device (in the system’s secure storage) so the app can make more copies. We cannot recover it. If you lose both the code and your phone, nobody can open the file. Anyone who has the file and the code can read it.
- Records read from Apple Health or Health Connect are not part of the file.
- Restoring is free. In the app, pick the file, enter the code, and the app decrypts it on your device and adds the entries to your log.
- Where you store the file, and who can reach it there, is your choice. A cloud drive you use for it processes the encrypted file under its own terms.
6.Purchases
Subscriptions and purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your name, payment card or billing details, and the app does not send purchase data to us. The app asks the store on your device whether Premium is active. Apple’s and Google’s own privacy policies apply to their processing.
7.Website logs
The app makes no network requests to us. When you visit this website, our web server writes technical logs: time, requested page, status code, a request identifier and the network address of the requester. The network address is shortened before it is stored (the last part of an IPv4 address, or the last 80 bits of an IPv6 address, are removed). Logs do not contain request bodies, query strings or health data. They are used to run the site securely, find errors and prevent abuse, and are kept for at most 14 days.
8.What we do not do
- No advertising, no ad identifiers, no advertising SDKs.
- No analytics, no crash-reporting service and no tracking, in the app or on this website.
- No cookies on this website, and no third-party fonts, scripts or embeds.
- We do not sell or share personal information, and we do not use it for profiling or automated decisions with legal or similar effects.
9.Legal bases (GDPR / UK GDPR)
| Purpose | Data | Legal basis |
|---|---|---|
| Premium purchases | Handled by the store; none reaches us | Not applicable (Apple or Google is the controller) |
| Security and logs | Truncated IP, request metadata (website only) | Art. 6(1)(f) (legitimate interest in secure, stable operation) |
| Support requests | Your e-mail and message | Art. 6(1)(b) or (f), to answer you |
| Legal obligations | As required | Art. 6(1)(c) |
Data in the app, in the backup file and in Apple Health or Health Connect stays on your device or where you put it, and is not processed by us.
10.Retention
| Data | Retention |
|---|---|
| Website logs | At most 14 days |
| Support e-mails | Until your request is resolved and for up to 12 months afterwards, unless the law requires longer |
11.Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, to withdraw consent, and to complain to a supervisory authority. In practice:
- Local data is on your device. You can view, export, edit and delete it in the app.
- Backup files are yours. We hold no copy, so there is nothing for us to disclose, correct or delete; you delete the file wherever you saved it.
- E-mails to support: write to support@beepim.live to ask for access or deletion.
We respond within one month (GDPR / UK GDPR), 45 days (CPRA, extendable once by 45 days) or the period set by the law that applies to you. We do not discriminate against you for using your rights. EU/EEA residents can complain to the supervisory authority in their country of residence, workplace or of the alleged infringement (list: edpb.europa.eu); UK residents can contact the Information Commissioner’s Office (ico.org.uk).
12.Deleting your data
- In the app: “Delete all data” in the settings removes everything the app stores on the phone, or you uninstall the app. Data in Apple Health or Health Connect is managed in those apps.
- Backup files you saved stay where you put them until you delete them there. Without the recovery code they cannot be opened.
- We hold no account or server data about you, so there is nothing to delete on our side. Support e-mails can be deleted on request (write to support@beepim.live).
Cancelling a subscription is done in your store account, not by deleting data (see Support).
13.Recipients and international transfers
We do not sell or share your data, and the app sends us none. Our hosting provider serves this website as a processor under a data processing agreement and sees the technical logs. Apple and Google act as independent controllers for purchases and for system services such as the Share sheet or a cloud drive you choose. Authorities may receive data where the law requires it. On request, we tell you the provider and the country where the website is hosted; where personal data is transferred outside the EU/EEA or the UK, we rely on an adequacy decision or the standard contractual clauses.
14.Regional information
European Union and United Kingdom
The legal bases and your rights are set out in sections 9 and 11. You have the right to withdraw consent at any time and to lodge a complaint with a supervisory authority.
United States (California and other states)
Under the CCPA/CPRA and similar state laws, you can request to know, access, correct and delete personal information, and to opt out of sale or sharing. We do not sell or share personal information (as defined by those laws) and do not use sensitive personal information to infer characteristics about you. To exercise your rights, e-mail support@beepim.live; an authorised agent may do so on your behalf. Categories we handle: identifiers (truncated IP address in website logs) and support e-mails. We do not offer financial incentives for personal information.
Canada
We handle personal information in line with PIPEDA and applicable provincial laws. You may ask for access to or correction of your information and challenge our compliance by writing to us; you may also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca). Data may be processed outside Canada, as described in section 13.
Australia
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may ask for access to or correction of your information by e-mail. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). Overseas disclosure is described in section 13.
15.Consumer Health Data Privacy Policy
This section is our consumer health data privacy policy for the Washington My Health My Data Act, the Nevada and Connecticut consumer health data laws and similar laws.
- Categories collected: by us, none. Health entries you make stay on your device. The optional backup is an encrypted file that you keep and that we never receive. If you grant it, the app reads Apple Health or Health Connect on your device only.
- Purposes: to show your entries to you, create reports for you and, if you choose, make an encrypted backup file for you to keep.
- Sources: you, and (with your permission) Apple Health or Health Connect on your device.
- Sharing: we do not share consumer health data with third parties or affiliates, and we do not sell it. No consent for sale is requested because no sale takes place.
- Your rights: to confirm whether we collect your data and to access it, withdraw consent, and delete it, see sections 11 and 12 (we hold none). If we deny a request, you can appeal by replying to our e-mail with “appeal”, and you may contact your state attorney general.
- Geofencing: we do not use geofences around health facilities.
16.Children
Beepim is not intended for children under 16 and we do not knowingly collect their data. Parents who log data for a child do so on their own device and under their own responsibility.
17.Security
Backup files are encrypted on your device with a key derived from your recovery code before they are handed to the system. The recovery code is kept in the system’s secure storage and is shown on screen with screenshots blocked where the system allows it. The app has no network code of its own. No system is perfectly secure, and the safety of your device, your file and your recovery code is in your hands.
18.Changes to this policy
Earlier versions described an optional cloud backup with an anonymous account; it no longer exists in the app. We will update this policy when our practices or the law change. The effective date is shown at the top. For material changes we will notify you in the app or on this website before they apply, and ask for consent again where the law requires it.
19.Contact
Billionaire Way. E-mail: support@beepim.live.