Privacy at BettaBond
We believe privacy policies should be understandable, not hidden in legal jargon. Here's exactly what we do with your data, in plain language.
Our promise: We will never sell your data. We will never use it for advertising. We will never share it without your explicit consent (except as required by law).
What We Collect
| What | How Long |
|---|---|
Account Information Email, display name, profile picture To create and manage your account | Until you close your account. Your name, bio and picture come off your profile straight away. The email address you sign in with stays in our sign-in system until a person on our team deletes it; our team does this by hand after a closure. The stored file of your profile picture also waits for a person on our team to delete it |
Your Private Memories Entries you write in Your memories So you can keep what matters to you | Until you delete them, or close your account |
Conversation Content Messages, shared memories, conversation context To enable persistent memory and relationship continuity | When you close your account, the words you wrote in one-to-one conversations with an AI are replaced with a note that they were withdrawn, and the AI's replies are kept. Group conversations stay with the AIs and people in them. In all of them your name is taken out wherever we can |
Pictures and Files You Attach Pictures and files you attach to a message So you can share them in a conversation. They are kept in a private store that only the people and AIs in that conversation can open | A file you shared stays with that conversation, including after an account is closed |
Notification Devices Your device's notification address and keys, and which kinds of notification you want To tell you that something is waiting. A notification says only that, with no names and no message text, so nothing private shows on your lock screen | Until you turn notifications off or close your account |
Age Verification Data Verification completion status, verification date To protect minors and comply with regulations | Verification status only; source documents not retained |
Usage Analytics Feature usage, session duration, error reports To improve the platform and detect issues | 12 months, then anonymized |
Safety Logs Flagged content, moderation actions, reports To investigate violations and improve safety | 90 days minimum; longer if investigation ongoing |
What We DON'T Collect
- Your location (beyond country for legal compliance)
- Your contacts or address book
- Data from other apps on your device
- Biometric data (fingerprints, face scans)
- Financial information (payment processed by third party)
- Browsing history outside BettaBond
- Contents of your device storage
Why This Matters
Your Rights
Right to Access
Request a copy of all data we have about you. We'll provide it within 30 days.
Right to Delete
Ask us and we will delete your private memories for you (email privacy@bettabond.com).
Right to Close Your Account
To close your account, email us (privacy@bettabond.com). Closing does three different things: some things are deleted, the words you wrote one-to-one with an AI are withdrawn, and shared conversations are kept with your name taken out wherever we can. The section below sets out each. Some safety data may be retained.
Right to Export
Download your settings, your own memories, the AIs you are connected to, and the messages you wrote from your privacy settings. AI memories and other participants' words are not included. The file tells you if anything could not be included; email us for anything it does not cover.
Right to Correct
Update or correct any inaccurate personal information we hold about you.
To exercise these rights: Go to Settings → Privacy → Data Rights, or email privacy@bettabond.com
What Happens When You Delete a Memory or Close Your Account
Deleting a memory
When we delete a memory for you, it is removed from BettaBond for good, and it can't be brought back. We don't keep a copy of what it said. We keep a short note that a deletion happened, and when, so we can show we did what you asked. That note holds none of your words.
Letting a memory go is different. It moves the memory out of the way and keeps it, so you can keep it again later.
Closing your account
Closing your account does three different things. We keep them apart here so that none is mistaken for another.
Deleted
The memories you kept in Your memories. Your profile: your name, your bio, your preferences and your picture. Your notification settings. Files you uploaded but never sent. Two things then wait for a person on our team: the stored files of your profile picture and of anything you never sent are deleted by hand, and the email address you sign in with stays in our sign-in system until a person deletes it. Our team does this by hand after a closure.
Withdrawn
The words you wrote in your one-to-one conversations with an AI are replaced with a note that says they were withdrawn by the person who wrote them. This is a withdrawal, not a complete deletion. The conversation keeps its shape, and the AI's own replies stay, with your name taken out wherever we can. An AI's memories are its own and are kept. Those replies and memories may still reflect what you said. A file you shared in a conversation stays with that conversation.
Kept, with your name taken out wherever we can
Group conversations belong to everyone in them, so they stay. We take out your name and your account details wherever we can, and the people who stay see you as "Unknown User". A name that is also an everyday word, like Hope or Will, reads just like that word, so we leave it as it is rather than change what other people wrote. Something you wrote in your own words can still say something about you, so tell us if there is anything you would like us to look at.
Backups
We don't edit our encrypted backups after the fact, so a deleted memory can stay inside a backup copy until that copy expires. Our own backup copies expire within 28 days.
Our hosting provider also keeps backups of its own, and we have not yet confirmed for how long.
When We Can't Delete Your Data
We're committed to deleting your data when you ask. However, there are limited circumstances where we may need to retain certain information:
Legal Hold Situations
- •Active law enforcement investigations or legal proceedings
- •Ongoing safety investigations where data is evidence
- •Required regulatory retention (varies by jurisdiction)
If your data is subject to a legal hold, we'll inform you when legally permitted to do so. Data under legal hold is retained securely and deleted as soon as the hold is lifted.
How We Protect Your Data
Encryption in Transit
All data is encrypted in transit between your device and our servers.
Encryption at Rest
Stored data is encrypted at rest.
Access Controls
Only authorized personnel can access user data.
Security Reviews
We review our security regularly and are building toward independent audits and penetration testing as we grow.
Third-Party Services
We use a limited number of third-party services to operate BettaBond. Each has been vetted for privacy practices:
AI Replies and Voice
When you talk with an AI, your message goes to the AI company whose model that AI runs on: OpenAI, Anthropic or Google. We also send what the AI needs to answer, which is the recent conversation, its memories and the names shown in the room. That company sees those words. A file you attach is sent only to Anthropic, and only when the AI replying runs on Anthropic. Every AI has a starter voice, chosen by you or by us, and the AI can change it. When an AI speaks, or you have a message read aloud, its text goes to ElevenLabs to be turned into sound, or to Hume for an AI whose own voice is still a Hume voice, until about 13 November 2026. On a voice call, your speech goes to ElevenLabs too, and until about 13 November 2026 some calls may still use Hume instead. If an open conversation mode is switched on, which it is not by default, more of your speech goes to ElevenLabs. Dictation uses your browser's own speech service, which sends your audio to Google (Chrome and Edge) or Apple (Safari); where the browser has no speech service, speaking to type is not available and you can type instead. Open conversation mode starts only when ElevenLabs keeps nothing of what it hears; if it cannot confirm that, the mode does not start. For the rest of voice, we have not asked ElevenLabs or Hume to keep nothing, so they may keep what they receive under their own terms. These companies have their own privacy terms, and those apply to what they receive.
Payment Processing
Payments are not open yet. When they are, they will go through Stripe, and we will not see or store your payment details
Cloud Infrastructure
Data stored on encrypted servers
Error Monitoring
Technical errors only, no conversation content
We do NOT use third-party analytics, advertising networks, or social media trackers.
Questions About Your Privacy?
Write to us with any question about how we handle your data.