Privacy Policy

The short version

• Your journal lives on your phone. Your check-ins, notes, photos and voice notes stay on your device unless you choose to share one with your partner.
• An account is only needed for partner features. BeSeen is for adults: you must be 18 or older.
• Before we keep the check-ins you share, we ask for your consent with an unticked box. If you say no, your journal keeps working and your check-ins are not shared.
• Some of what you share is end-to-end encrypted and we cannot read it. Some is not, such as your mood, photos and voice notes. Section 4 lists exactly which is which.
• We never sell your data, show you ads, or use your journal to train AI.
• In the EU/EEA, usage analytics and crash reports stay off unless you say yes. Elsewhere they are on and you can turn them off at any time. They never include your mood, your notes or your photos.
• You can delete your account in the app, and that deletes your data from our servers.

1. Who we are and what this covers

BeSeen is a mood journal for couples, made by MBOA, Inc., a Delaware corporation (“we”, “us”). We are the controller of the personal data described here. This policy covers the BeSeen iOS app and the beseen.love website.

BeSeen is a personal journaling and relationship tool. It is not a medical or mental-health service, and your data is not covered by HIPAA.

People in Washington, Nevada and Connecticut should also read our Consumer Health Data Privacy Policy, which adds to this policy.

2. What stays on your device

These are created and kept on your phone, in the app’s private database and folder. They are not sent to us unless you share a check-in (Section 4):

• Your check-ins: mood, mood words, tags, what you were doing, who you were with, where you were (a place you pick from a list, never GPS), body-map sensations, and notes
• Photos and voice notes you attach
• Reminders, theme and display preferences
• Streaks and weekly insights
• Your answers to the onboarding questions (a copy also goes to analytics if analytics are on; see Section 6)

New users answer an age question with a birth year during setup. The app checks it on your phone and does not keep or send the year.

If you export your journal, the app builds a file on your phone and hands it to the iOS share sheet. Where it goes from there is up to you.

If you add a BeSeen widget, the app keeps what the widgets show in storage that only BeSeen and its widgets can read: your and your partner’s names, latest moods and photos, notes, drawings, streak, distance and dates. It also keeps a short-lived sign-in token there, and the widgets use it to fetch updates from our servers.

3. Your account (only for partner features)

If you sign in, we keep these on our servers:

• How you sign in. Your email address. With Sign in with Apple, Apple gives us your name and email, which may be a private relay address Apple creates for you. With email sign-in, we send a one-time code.
• Display name and optional profile photo. Your partner sees both. The photo is in private storage and is shown through links that expire. Someone who enters your partner code can see your name and photo before you are connected, so they know who they are inviting.
• Partner code. A 6-character code that lets your partner find you.
• Time zone. Your phone’s time zone, so your partner can see your local time and the city that names your time zone (for example “London”).
• Birthday (optional). A month and day, so your partner is reminded. The app saves no birth year.
• Your city (optional). If you pick a city from the list in partner settings, the app sends only its coordinates, rounded to about 1 km. Your partner sees only a rounded distance, never the city or the coordinates, though they could work out roughly where you are from the distance. City search runs on your phone; no search is sent anywhere.
• Notification token. Issued by Apple so we can deliver notifications.
• Encryption public key. The public half of a key pair made on your phone. The private half stays in your phone’s Keychain and is never sent to us.
• Subscription status. Whether BeSeen+ is active and when it ends, and Apple’s transaction ID for your subscription. Apple handles payment and we never see your card. Purchases carry your BeSeen account ID to Apple so we can match them to you.
• Policy and consent records. Which version of this policy you accepted and when, and each answer you give to the sharing consent box (Section 5).
• Activity. When you last checked in (the time, never the check-in itself), which your partner can see, and which widgets you have placed.

4. What you share with your partner

What reaches our servers

Sharing is a choice you make for each check-in, at one of three levels:

Your partner sees your latest shared check-in; sharing a new one replaces it. Changing the level removes what is no longer shared. Unsharing, or deleting that check-in, removes it from our servers with its photos, voice notes and that day’s mood record. Photos are re-saved before upload, which removes their location and camera details. Voice notes are uploaded as recorded.

What we can and cannot read

End-to-end encrypted means your phone locks it with a key we never hold, so we cannot read it. Not end-to-end means it is encrypted on the way to us and on our servers, and only you and your partner can reach it through the app, but our systems can read it. We use that to send notifications and to keep widgets up to date.

We also keep counts and dates, such as streaks, which days each of you shared, and how many moments you have shared. Both of you can see them. When a newer check-in replaces a shared one, that day’s mood stays in the daily record behind your weekly recap until the partnership ends.

If your partner’s app is too old to read encrypted details, those details are not shared; your mood is, and at the Everything level so are your photos and voice notes. Very old versions of BeSeen could send tags, notes or replies in readable form; we have blanked all of those on our servers, and our servers now strip readable text from anything those versions send.

5. Your mood is sensitive, so we ask first

How you feel can be sensitive information. Under the EU and UK GDPR it may count as health data, under California law it is sensitive personal information, and in Washington, Nevada and Connecticut it may be consumer health data.

So before we keep the check-ins you share, we ask with one unticked box: “I agree to BeSeen keeping the moods and moments I share, so my partner can see them.” You see it when you connect with a partner. If you were already connected when this policy took effect, you see it once, the next time you open the app.

• If you tick it, sharing works as described in Section 4.
• If you leave it unticked, your journal works as normal, but your check-ins are not shared until you tick it. Our servers refuse them too, so a no holds even on an older version of the app on another phone. You can tick it later on the Partner tab or when you share.
• You can withdraw at any time with the “Store what I share” switch in partnership settings. Withdrawing stops new check-ins being shared. To remove what you already shared, unshare it, end the partnership, or delete your account.
• What you send on purpose still goes. The box is about your check-ins. A reply, a note, an answer to the daily question, a drawing or a timeline moment reaches your partner because you sent it, whatever your answer to the box. Older versions of the app do not show the box.

We log each answer (yes or no, which wording you saw, where you answered, and when) so we can show what you agreed to. Your answer applies only to that partnership.

We use mood only to run the journal and partner features. We do not use it for advertising, we do not sell it, and we do not use it to train AI.

6. Analytics and crash reports

Where you are decides the default. If your phone’s region or time zone is in the EU or EEA, BeSeen asks once after setup, and the app does not contact our analytics or crash-reporting services unless you say yes. Everywhere else, analytics and crash reports are on, and you can turn them off at any time under Usage analytics in Settings. Turning them off stops both and deletes events waiting to be sent. It also gives this device a new random ID, so anything sent later is not linked to what was sent before. Events already sent are kept as described in Section 11.

Usage analytics (PostHog). We learn which features people use. Events describe what happened, such as that a check-in was saved, how many tags it had, or that a note was attached. They are linked to a random device ID and, once you sign in, your account’s random ID, never your name or email. They carry your app version, language, time zone, phone model and maker, iOS version and screen size, and the names of screens you open. Your analytics profile also holds your answers to the onboarding questions, including anything you type under “Other” (up to 60 characters), and which widgets you have placed. Events never include your mood or your partner’s mood, the topic of a daily question, the content of notes, replies or messages, your photos or your voice notes. We do not record your screen. Events carry no location estimated from your IP address, and our analytics project discards IP addresses.

Crash reports (Sentry). When the app crashes, freezes or hits an error, it can send a technical report: what went wrong in the code and its error message, your phone model and iOS version, the app’s recent steps with IDs and web addresses removed, your account’s random ID, and your partnership’s random ID and status. It also measures how quickly a sample of screens load. Reports are not designed to include your journal, photos or messages.

Feedback. If you send feedback from Settings, it goes to Sentry as a report. Your name and email are attached only if you tick the box asking us to reply.

7. Notifications and emails

Partner notifications show the sender’s name and a short line. By default, when your partner shares a lighter mood (okay, good or great) the notification names it; heavier moods get a line that does not. Whoever receives them can turn mood words off with “Show their mood” in Settings, and iOS can hide notification previews. If your partner’s mood drops sharply, the notification may invite you to say hi, whatever that setting says. Some notifications include an emoji reaction or a date. Notes and reply text never appear in notifications.

BeSeen may also send a gentle nudge: when neither of you has shared in a while, when you have an account but no partner, or to suggest a buzz when your partner has not checked in lately or to tell you how often they shared this week. These are based on when sharing or check-ins happened, never on what they said. Gentle nudges in Settings turns off the first two; Partner notifications turns off all partner notifications.

If you start a BeSeen+ trial, we email you when it starts and before it ends. The email includes your display name, the price and the trial dates.

8. How we use your data, and our legal grounds

Sanctions. US law does not let us provide BeSeen in some places. When you create an account or connect with a partner, our server checks your connection’s IP address against those regions (North Korea, Crimea, Sevastopol, and the whole Donetsk and Luhansk regions, since IP data cannot tell occupied areas from the rest) and refuses if it matches. Our code does not store the address or the result. Like most online services, our hosting providers record IP addresses in their service logs for security and operations.

9. Who we share data with

We do not sell or rent your data, and we do not share it for advertising. We use these providers to run BeSeen, each only for the job listed:

We may also disclose data when the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy continues to apply to your data.

10. Where your data is stored

Our servers are in the United States. If you are in the EU/EEA, the UK or Switzerland, your data is transferred to the United States under the European Commission’s Standard Contractual Clauses, with the UK Addendum and Swiss amendments.

11. How long we keep it

12. Security

• Everything travels over encrypted connections (HTTPS/TLS).
• On our servers, access rules limit your data to you and your active partner.
• End-to-end content is encrypted on your phone (X25519 key exchange with XSalsa20-Poly1305). Your private key stays in your phone’s Keychain. Because we never hold it, we cannot recover end-to-end content if you lose it.
• Purchases are checked with Apple before BeSeen+ is turned on, and refunds turn it off.

No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you where the law requires.

13. Your choices and rights

In the app

• Delete any check-in; if it is the one you are sharing, it is removed from our servers (Section 4).
• Change what you share, unshare, or stop sharing with the “Store what I share” switch.
• End a partnership, which deletes your shared content from our servers.
• Delete your account. This deletes your profile, partnerships, shared content and uploaded files from our servers, asks Apple to revoke BeSeen’s Sign in with Apple access, asks our analytics provider to delete the events linked to your account, and wipes your data and keys from your phone. Analytics events recorded before you signed in are not linked to your account and expire as in Section 11, as do crash reports.

Everyone

You can ask us for a copy of your data, to correct it, or to delete it, by emailing help@beseen.love. We may need to confirm the request comes from you, usually by replying from your account’s email address. We answer within 30 days, or sooner where the law requires.

EU/EEA, UK and Switzerland

You can access, correct, delete or receive a portable copy of your data, restrict or object to how we use it, and withdraw consent at any time without affecting what happened before. You can also complain to your data protection authority.

California

You have the right to know, delete and correct your personal information, to limit the use of sensitive personal information, and not to be treated differently for using these rights. We do not sell or share personal information as California law defines those words, and we use sensitive personal information only to provide BeSeen.

Other US states

Depending on your state, you may have the right to access, correct, delete and port your data, and to opt out of sale, targeted advertising and profiling. We do none of those three. If we turn down a request, you can appeal by replying to our answer; we will respond within 60 days, and if you disagree you can contact your state attorney general. Washington, Nevada and Connecticut residents also have the rights in our Consumer Health Data Privacy Policy.

14. Adults only

BeSeen is for people 18 and older. New users are asked for a birth year during setup, and the app does not let anyone under 18 continue. If you believe someone under 18 is using BeSeen, contact us and we will delete their data.

15. For users in Japan

This section covers the items the Act on the Protection of Personal Information asks us to make known.

• Business: MBOA, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. The name of our representative is available on request.
• Purposes of use: the purposes in Section 8.
• Providers outside Japan: we use the providers in Section 9, which are mainly in the United States. The United States has no single federal privacy law like Japan’s; privacy there is governed by federal rules for particular sectors and by state laws such as California’s. Each provider handles your data under its data processing terms with us.
• Security measures: access rules limit personal data to the person it belongs to and their active partner; data is encrypted in transit and at rest; shared journal details are encrypted end to end; and repeated invitations and code lookups are rate limited (Section 12).
• Requests: to ask us to disclose, correct, add to, delete, stop using, or stop providing your data to third parties, or to make a complaint, email help@beseen.love. We do not charge a fee.

16. Changes to this policy

When we change this policy we update the date above. For important changes, we tell you in the app before they apply, and we ask for your consent again where the law requires it.

17. Contact

Email: help@beseen.love Company: MBOA, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States