Privacy Policy

BEEM ("BEEM", "we", "us", "our") is a privacy-first social signaling app that helps adults nearby discover each other and continue conversations on their preferred social platforms. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, how long we keep it, and the rights you have. By using BEEM you agree to this policy.

BEEM is strictly for users 18 years of age or older. We do not knowingly collect information from anyone under 18, and accounts found to belong to minors are removed immediately.

1. Information we collect

• Account information. Email address, password (hashed, never stored in plain text), age confirmation (18+), display name, optional bio, and optional profile photos.
• Social handles you choose to share. Usernames and links for Instagram, TikTok, Snapchat, X, and similar platforms. These are visible only to users you have explicitly connected with.
• Location data. Your approximate latitude and longitude, captured only while the app is open and you have toggled Beeming on. Location is used to (a) show you to other Beeming users within roughly one mile and (b) decide whether in-app messaging is unlocked between two connected users.
• Visibility state. Whether you are currently Beeming and your last-seen timestamp. We use this to expire your visibility automatically.
• Connections and messages. Records of BEEMs you send, receive, accept, or decline, and the content of in-app messages you exchange with connected users who are within range.
• Device and usage data. IP address, device type, browser, app version, crash reports, basic usage events (e.g. "BEEM sent", "photo uploaded") and timestamps. We use these to keep the app running and to detect abuse.
• Safety and verification signals. Photo moderation results, blocks, reports, support tickets, and rate-limit events.

2. AI photo moderation

To protect the community, every photo you upload is automatically screened by an AI moderation model before it can appear in your profile. The model checks for nudity, sexual content, violence, hate symbols, minors, and other policy violations. Photos that the AI is confident are safe are approved automatically; photos that fail are rejected with a reason; ambiguous photos are placed in a human review queue.

We retain a log of the AI verdict (approved / rejected / pending), the reasons, and the latency of the check. We do not use your photos to train third-party AI models. The photo itself is stored in our secure storage and is only visible to users to whom your profile is visible.

3. Location & proximity

BEEM is built around real-world proximity. Specifically:

• We request your location only while the app is in use.
• Your precise coordinates are never shown to other users. Other users only see that you are nearby while you are Beeming.
• When you turn off Beeming, close the app, or your session expires, your visibility ends and you are removed from other users' Discover feeds.
• In-app messaging between two connected users is only available while both users are within approximately 1 mile of each other and have shared their location within the last 5 minutes. When you walk out of range, history remains readable but new sends are blocked. We do not run continuous background location tracking to enforce this; we check distance only when you try to send a message.

4. How we use information

• To provide and operate the BEEM service, including Discover, BEEMs, and proximity messaging.
• To verify you are 18+, authenticate you, and recover your account.
• To screen photos for safety and to investigate reports and abuse.
• To send you transactional emails (verification, password reset, account changes).
• To send notifications you have opted into (new BEEMs, new messages).
• To debug crashes, monitor uptime, and improve the product.
• To comply with legal obligations and enforce our Terms of Service.

5. Sharing

We do not sell your personal data. We share data only with:

• Other BEEM users — your public profile (name, photos, bio) is visible to nearby Beeming users while you are Beeming. Your shared social handles are only revealed to users you have explicitly connected with.
• Service providers who process data on our behalf under written contracts: our database and authentication provider (Lovable Cloud / Supabase), email delivery, AI moderation provider (Google Gemini via Lovable AI Gateway), error monitoring, and uptime monitoring.
• Law enforcement or regulators when we are legally required to comply with a valid request, or to protect the safety of users and the public.

6. Data retention

• Active account data is retained while your account is active.
• Messages are retained for the lifetime of the connection. If you unmatch, the conversation and its messages are deleted within 24 hours.
• Location coordinates are overwritten each time you update your location; only the most recent point is stored.
• Rejected photos and their moderation logs are retained for 90 days for appeals and abuse investigation, then deleted.
• Reports and blocks are retained for up to 2 years to enforce safety decisions.
• Backups are kept for up to 30 days for disaster recovery.
• When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is legally required.

7. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA, and similar laws), you have the right to:

• Access a copy of your personal data — use "Download my data" in Settings.
• Correct inaccurate data — edit your profile, or contact support.
• Delete your account and personal data — use "Delete account" in Settings.
• Object to certain processing, including marketing communications.
• Withdraw consent at any time by turning off Beeming, revoking permissions, or deleting your account.
• Lodge a complaint with your local data protection authority.

8. Security

We use industry-standard security practices: encryption in transit (HTTPS), encryption at rest, row-level security policies on every user-data table, hashed passwords, rate limiting, and active monitoring. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorized access.

9. International transfers

BEEM is operated from the United States and your data may be processed in the US and in any country where our service providers operate. When we transfer personal data outside your country we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Children

BEEM is strictly for adults aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, please report it to us and we will remove it immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, notify you in the app or by email.

12. Contact

Questions, requests, or complaints? Email beem.support@gmail.com or visit our Contact page.

13. Apple App Store privacy disclosures

This section mirrors the answers we provide for Apple’s Privacy Nutrition Labels so you can see exactly what is declared on the App Store.

Data linked to your identity

• Contact info: email address — for account creation, sign-in, and service emails.
• User content: profile photo, display name, optional bio, and chat messages — for app functionality.
• Identifiers: user ID and device push token — for account management and delivering push notifications.
• Usage data: product interaction events (sign-in, beam sent, match opened) — for analytics and product improvement.
• Diagnostics: crash and performance data — for app stability.

Data not linked to your identity

• Coarse location: approximate location used in-memory to compute proximity within a 1-mile radius. Precise coordinates are never stored on our servers and are never shown to other users.

Data not collected

• Contacts, browsing history, search history, health and fitness, financial info, sensitive info, audio data, gameplay content, and other diagnostic data.

Tracking

BEEM does not track you across apps or websites owned by other companies, and does not use the App Tracking Transparency framework to share data with data brokers or advertising networks.

Third-party processors

• Lovable Cloud / Supabase — managed database, authentication, and storage.
• Firebase Cloud Messaging (Google) — delivery of push notifications to iOS and Android devices.
• Apple Push Notification service (APNs) — final delivery of iOS push notifications.
• Lovable AI Gateway — AI-based photo moderation on upload.