Privacy Policy for Beheld

Last updated: November 12, 2026

Beheld is owned and operated by EJL Consulting, LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the Beheld mobile app ("Beheld" or the "app").

What Beheld does

Beheld helps families preserve a loved one's life story. A primary user ("Keeper") uses Beheld to record audio responses to interview questions with a parent, grandparent, or other person whose story they want to capture ("Subject"). Invited friends and family ("Contributors") can also record their own memories. We capture audio, transcribe it to text, and keep it in a private archive for the Keeper.

What we collect

Account information (Keepers and Subjects):

• Your name (display name)
• Your email address
• Your role (Keeper or Subject)
• The relationship between Keeper and Subject

Account information (Contributors):

• Your name
• Your relationship to the Subject
• Your email address (optional)
• We do not require Contributors to create an account or password.

Audio recordings and transcripts:

• Audio files you record in the app
• Text transcripts generated from those recordings
• The question or prompt each recording answers
• Timestamps and duration

Technical information:

• Anonymous device and crash information needed to keep the app running properly

We do not collect: location data, contacts, photos, payment information, advertising identifiers, or any biometric data.

How we use it

We use your information only to:

• Provide the core features of Beheld (record, transcribe, archive, replay)
• Authenticate your identity when you sign in
• Send you the magic-link email you request to sign in
• Link Subjects and Contributors to the correct Keeper's archive
• Respond to you if you contact us

We do not sell your data. We do not use it for advertising. We do not use your recordings or transcripts to train AI models.

Who we share it with

We use a small number of trusted third-party services to operate Beheld. Each only receives the minimum data needed:

• Supabase — hosts our database, authentication system, and audio storage. Data is stored on US-based servers and protected by row-level security.
• OpenAI — transcribes your audio recordings using the Whisper model via OpenAI's API. Audio sent through OpenAI's API is not retained by OpenAI and not used to train their models, per OpenAI's API data policy.
• Resend — sends sign-in emails on our behalf.
• Apple — when you choose "Sign in with Apple," Apple authenticates you and provides us with an account identifier. If you use Apple's Private Email Relay, the email address we have on file for you is your relay address (@privaterelay.appleid.com), not your real email. Sign-in emails sent to that relay address are forwarded to your real inbox by Apple.

We do not share your information with anyone else.

How we protect your data

Your audio files and transcripts are stored privately. Only you (and the Keeper who owns the archive, where applicable) can access them. Recordings are not public. Transcripts are not shared outside the app.

We use HTTPS for all data in transit and require authentication for nearly all data access. Subjects and Contributors who access the app via invite codes can only see content tied to their own session.

How long we keep your data

We keep your data for as long as your account is active.

If you delete your account from inside the app (Settings → Delete account):

• Keepers: all your data — recordings, transcripts, contributor memories, account — is permanently deleted within minutes.
• Subjects: your sign-in is removed and you are unlinked from the Keeper's archive. The Keeper still owns the recordings you contributed; you can no longer access them.

We cannot recover deleted data.

Your rights

You can:

• View, edit, or delete your data at any time in the app
• Delete your entire account from Settings → Delete account
• Contact us by email or postal mail (addresses below) with questions or requests

Depending on where you live, you may have additional rights under laws like the GDPR (Europe) or CCPA (California), including the right to access, correct, or export your data. Contact us and we'll respond within 30 days.

California residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you, the right to delete your personal information, and the right to opt out of any sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@beheldapp.com or by postal mail at the address below.

Children's privacy

Beheld is not intended for children under 13. We do not knowingly collect data from anyone under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with information, contact us and we'll delete it.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date at the top and notify you inside the app or by email. Continued use of Beheld after a change means you accept the updated policy.