Effective May 3, 2026
besda is a regulation tool for neurodivergent dads. Privacy is not a feature here — it is a precondition for the app to work. The choices below are the ones we made so the app stays useful in the moments you actually need it.
Every voice entry you record stays on your device. We use Apple's on-device speech recognition — your audio never leaves your phone, never reaches our servers, and never reaches Apple. If you delete the app, your recordings go with it.
Your morning check-in answers (sleep hours, sensory load, initiation difficulty) are stored locally on your device only. We use them to show you your own patterns. We do not see them. We do not aggregate them across users.
Feed posts are anonymous by design. We tag each post with a random identifier so you can edit and reply to your own posts, but that identifier is not linked to your name, email, phone, or any contact information. The text of your post is what other users see — nothing else.
Today, no crash-report data leaves your device. When error monitoring is added in a future release, sanitized crash reports may be sent to a third-party provider — stack traces, device model, and iOS version only, never the contents of your voice memos, check-ins, or feed posts. The policy will be re-surfaced for re-acceptance at that time.
We do not track individual users. We do not run third-party trackers, advertising SDKs, or A/B testing tools. If aggregate analytics (counts only, no per-user identifiers) are added later, the policy will be re-surfaced for re-acceptance before any data is collected.
Today, the only third-party service that receives any data is Supabase, which hosts the anonymous Brotherhood Feed and crisis-concern flag tables. Supabase does not receive your voice, check-ins, or any data linked to your identity. If additional providers are added later, the policy will be re-surfaced for re-acceptance before any data is sent.
besda can optionally write completed Circuit Breaker (90 seconds) and Re-Entry Ritual (4 minutes) sessions to Apple Health as Mindful Minutes — and only those two session types. besda never reads any Apple Health data. The integration is opt-in: both per-session toggles default off, only appear in Settings after five completed Circuit Breaker sessions, and only trigger the Apple Health permission prompt when you explicitly flip a toggle on. Apple Health data stays on your device under Apple's HealthKit contract.
If we change anything material, we will surface a re-acceptance prompt the next time you open the app. Acceptance must always be explicit.
Questions about this policy: elkabesu@gmail.com