Legal
Privacy Policy
What BeDeeper collects, why, for how long, and member rights.
Defined terms carry the meanings given in BeDeeper's shared legal definitions unless expressly redefined here.
In plain language
BeDeeper is a sanctuary. What you write here stays yours. This Policy explains what we collect, why we collect it, who helps us store and process it, how long it stays, and the choices you have. Related documents:
- Cookies actually set: Cookie Policy
- Security posture and responsible disclosure: Security & Data Protection
- Ownership of your writing and BeDeeper's no-sale, no-third-party-AI-training commitments: Content Ownership
- What The Lantern (AI) actually uses and what leaves the sanctuary: AI Transparency
- Age policy and minors: Children's Privacy
1. Who is responsible for your information
BeDeeper is the controller of information collected through the sanctuary. Company details appear at the top of this page. For privacy questions, write to the privacy contact listed there.
2. What we collect
2.1 Account information
When you create an account we collect your email address, a chosen name, and either a hashed password or an identity token from Google or Apple if you sign in with OAuth. We do not collect passwords when you use OAuth.
2.2 Member content
The heart of BeDeeper is what you write. We store:
- Living Journal entries — the reflections you write in Journey.
- Passage reflections — the answers you write within a Passage's six rooms.
- Lantern conversations — the messages you and The Lantern exchange in The Deep. Both your messages and The Lantern's responses are stored so you can return to a conversation later.
- Compass content — your maps, life-compass snapshots, north-star declarations, and Dream Journal entries.
- Vision board — images you upload and reflections you attach to them.
- Voice reflections — audio you choose to record.
- Artifacts — pieces of wisdom you accept and keep, and the favorites you place on your Wisdom Shelf.
- Sanctuary state — the quiet notes the sanctuary keeps for itself so it can remember you (presence, season, atmosphere, visit patterns), stored per-member and readable only by you (and by BeDeeper staff under the safeguards in section 8).
Ownership of everything you create is described in Content Ownership. What The Lantern actually sees when it responds — and what it does not — is described in AI Transparency.
2.3 Membership and billing
When you subscribe to Explorer, purchase an Oil refill, or join as a Founding member, we and Stripe process billing information as described in Billing Policy. BeDeeper receives Stripe customer and subscription identifiers, plan and status, invoice references, trial-end and renewal timestamps, and Founding milestones. BeDeeper does not receive or store your full payment-card number; Stripe handles card data as a PCI-DSS-compliant payment processor.
2.4 Technical and cookie information
We set the cookies listed in Cookie Policy so the sanctuary can sign you in, remember trusted devices for multi-factor authentication, and hold short-lived post-verification grants. We keep basic operational logs (request timestamps, error signals, IP address at the network edge) to run the service, protect it from abuse, and diagnose incidents.
We do not run advertising, cross-site tracking, or third-party analytics inside BeDeeper. If we ever add analytics, this Policy and Cookie Policy will be updated first and you will be told.
2.5 Communications
If you write to us, we keep your message and our reply so we can respond and follow up.
3. Why we collect it
We use your information only for the purposes listed below.
| Purpose | Data classes |
|---|---|
| Provide the sanctuary you asked for — Sanctuary, Passages, Meraki, Journey, Telescope, and Compass, including Living Journal, Artifacts, and The Deep. | Account, member content, technical. |
| Enable dialogue with The Lantern within The Deep and within Compass contexts you have chosen to allow. | Member content (as bounded excerpts — see AI Transparency). |
| Bill and account for membership, Oil refills, and Founding activation. | Billing, membership. |
| Send transactional email — welcome, trial reminders, renewal notices, cancellation confirmations, security notices. | Account, membership. |
| Keep the sanctuary secure — sign-in, MFA, trusted devices, session management, abuse response. | Account, technical. |
| Meet legal, accounting, and tax obligations. | Billing, communications. |
| Improve the sanctuary carefully — fixing bugs, addressing errors, understanding how BeDeeper actually behaves. | Technical, aggregated usage. Never member writing sent to third parties for training; see Content Ownership. |
4. Legal bases (for members in the European Economic Area, United Kingdom, and other jurisdictions with equivalent frameworks)
Where applicable, we rely on:
- Contract. Providing the sanctuary you subscribed to under Terms of Service and Billing Policy.
- Legitimate interests. Running BeDeeper securely, preventing abuse, understanding operational errors, and communicating with you about the service. We take care that these interests do not override your rights.
- Consent. For anything that requires an active opt-in, such as enabling The Lantern to use a Compass map as context. You may withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing.
- Legal obligation. Retaining billing records, responding to lawful requests.
5. Who else sees your information (subprocessors)
BeDeeper uses the subprocessors listed in BeDeeper's Legal Foundation. Each is bound by its own terms with BeDeeper and only handles what is necessary to deliver its part of the sanctuary. The overview at time of writing:
- Supabase — authentication, database (Postgres), and file storage (vision-board images, voice reflections).
- Stripe — payment processing, subscription management, and the self-serve billing portal.
- OpenAI — language-model provider for The Lantern (see AI Transparency for exactly what is sent and what is never sent).
- Resend — transactional email delivery.
- Vercel — application hosting and edge delivery.
- Google, Apple — optional OAuth identity providers, used only if you choose to sign in with them.
If the list changes, it is updated in BeDeeper's Legal Foundation and this Policy is republished on the same effective date.
BeDeeper does not sell your personal information. BeDeeper does not share your writing with any third party except as strictly necessary to operate the sanctuary you have asked for (for example, sending your Lantern message to OpenAI to receive a response). See Content Ownership for the underlying commitments, including the promise not to use member writing to train third-party AI models.
6. How long we keep it
We keep information for as long as it is needed for the purpose it was collected, and no longer than we reasonably need — subject to legal obligations we cannot avoid.
- Account and member content — retained while your account is active. When you delete your account (see Account Termination) member content is removed from live systems.
- Backups. Deleted content may persist in encrypted operational backups for a limited window before being overwritten as part of normal backup rotation. During that window, deleted data is not restored to live systems except to recover from a documented incident. The current retention window is described in Account Termination.
- Billing and invoicing records. Stripe retains payment records under its own retention and legal obligations. BeDeeper retains a limited set of billing-linked identifiers as long as we are required to for accounting and tax.
- Security logs. Kept only as long as needed for detection, investigation, and diagnosis, and then overwritten.
- Communications. Retained for a reasonable period so we can respond to follow-ups and reconstruct a conversation if needed.
Where a specific retention window is proposed rather than fixed, BeDeeper's legal consistency review records the item for founder confirmation before public launch.
7. Your rights
Depending on where you live, you have some or all of the following rights:
- Access. Ask what we hold about you.
- Portability. Receive a copy of your writing in a usable form.
- Correction. Ask us to correct account information that is inaccurate.
- Deletion. Ask us to delete your account and member content. Account deletion is available from Settings and works as described in Account Termination.
- Objection and restriction. Object to or ask us to restrict certain uses of your information based on legitimate interests.
- Consent withdrawal. Withdraw a consent you gave (for example, allowing The Lantern to use a Compass map as context).
- Complaint. Complain to your national or regional data-protection authority.
Where BeDeeper does not yet offer a full self-serve export for every data class, you may request an export by writing to privacy@bedeeper.com. We aim to acknowledge within seven (7) days and respond within a reasonable timeframe consistent with applicable law. Current gaps between self-serve tooling and this Policy are recorded in BeDeeper's legal consistency review.
8. Access inside BeDeeper
Access to member data inside BeDeeper is restricted to what is necessary to operate the sanctuary and honor legal obligations. Row-level security separates your data from every other member's on the database itself. Founder and administrative access to member writing is limited to purposes such as moderation review under Community Guidelines, abuse response under Acceptable Use, and diagnostics of a specific incident. Any current administrative access surface not fully constrained by tooling is identified in BeDeeper's legal consistency review for tightening.
Security architecture — encryption in transit and at rest as provided by our infrastructure, authentication, MFA, and responsible-disclosure process — is described in Security & Data Protection.
9. International transfers
BeDeeper's subprocessors operate globally. Where we transfer your information outside your country of residence — for example between the United States and the European Economic Area — we rely on the transfer mechanisms our subprocessors make available (such as Standard Contractual Clauses or equivalent adequacy decisions) and on contractual terms with each subprocessor that reflect their obligations.
10. Children
BeDeeper is not directed to children. Age minimums, treatment of accounts opened by minors, and parent or guardian requests are set out in Children's Privacy.
11. Cookies
Cookies actually set by BeDeeper are listed in Cookie Policy. BeDeeper does not run advertising or cross-site tracking cookies.
12. Changes to this Policy
The effective date and versioning convention for this Policy live in BeDeeper's Legal Foundation. Substantive changes are notified in advance, as described in Terms of Service.
13. Contact
Privacy questions and rights requests should be sent to privacy@bedeeper.com. Security concerns should follow the responsible-disclosure process in Security & Data Protection.