Privacy Policy

1. Introduction

Bellami (“we”, “our”, or “us”) is a mobile application that helps people express genuine appreciation to the people they care about. We do this by generating personalised messages using AI, based on context you voluntarily provide about yourself and your relationships.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights in relation to it. We are committed to handling your information transparently and responsibly.

By using Bellami, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.

2. Age Requirements and Children

Bellami is intended for users aged 13 and older. We do not knowingly collect personal information from anyone under 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly.

If you are between 13 and 17, you must have a parent or guardian's permission to use Bellami.

If you believe we have collected information from a child without parental consent, please contact us at privacy@bellami.app.

3. Information We Collect

3.1 Information You Provide Directly

Account information: Your first name, email address, and authentication credentials (including tokens from Google Sign-In and Apple Sign-In if you use those methods).

Profile information:Gender, age range, location (city and country), lifestyle tags (such as “parent”, “partner”, “pet owner”), and an optional personal bio (up to 300 characters). You choose what to share; this information helps us generate more relevant messages.

Relationship information: Names and details about people you wish to appreciate — including the nature of your relationship, how long you have known them, optional notes about what makes them special, and your preferred message tone and length. These are people who are not users of Bellami, and we treat this information with particular care.

Payment information: We do not collect or store your payment card details directly. Purchases are processed by Apple (via the App Store) and RevenueCat. We receive confirmation of purchases, subscription status, and transaction identifiers — not raw payment data.

3.2 Information Generated Through Your Use

Messages: The AI-generated messages we create for you are stored so you can view your message history. Messages are associated with your account and a specific relationship.

Usage data: When you generate a message, share it via the native share sheet, or interact with the app, we log the action and relevant metadata (e.g., message tone, timestamp, streak status). We never log the content of a message in our analytics or logging systems.

Credit and purchase history: We maintain a ledger of credit transactions (sign-up bonus, weekly refresh, purchases, usage) for account integrity and dispute resolution.

Technical and device data: Standard information such as device type, operating system, app version, IP address (temporarily, for fraud prevention), and crash/error data.

3.3 Information We Do Not Collect

We do not collect the name, contact details, or any direct information about the recipients of your messages. We store only the notes and context you choose to write about them within Bellami.

We do not read your device contacts, photos, or messages.

We do not use your information to serve third-party advertising, and we do not sell your personal information.

4. How We Use Your Information

We use your information for the following purposes, relying on the legal bases noted where applicable (relevant for EEA/UK users):

We do not use your relationship notes or message content for any purpose other than generating messages within the session you initiate.

5. AI-Generated Content

Bellami uses Anthropic's Claude APIto generate appreciation messages. When you tap “Generate”, we send a structured prompt to Anthropic's servers. That prompt includes:

• Your first name, gender, age range, and location (from your profile)
• The relationship name, type, duration, optional notes, and your tone/length preference

Anthropic processes this information to generate the message. Anthropic's API usage policies apply to this processing. Anthropic does not use prompts sent via the API to train its models. You can review Anthropic's privacy practices at anthropic.com/privacy.

Generated messages are stored in Bellami so you can view your history. You can delete your account at any time to remove them.

AI disclosure: Messages produced by Bellami are AI-assisted. They are designed to reflect your voice and intent, but they are generated by a language model, not written by a human. You should review every message before sending it.

6. Sub-Processors and How We Share Information

We share your information only with the third-party services necessary to operate Bellami. We do not sell your data, share it for advertising, or disclose it to unaffiliated third parties except as described below.

Legal disclosures: We may disclose your information if required by law, court order, or government authority. Where permitted, we will notify you before complying with such requests.

Business transfers: If Bellami is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you of any such change.

7. Where Your Information Is Processed

Bellami is operated from the United States. If you are located outside the USA — including in the European Economic Area (EEA), United Kingdom, Canada, or Australia — your information is transferred to and processed in the USA.

For EEA and UK users: Transfers to the USA are made on the basis of Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent mechanisms, where required by applicable data protection law. We select sub-processors who commit to adequate data protection safeguards.

If you have questions about international transfers or wish to obtain a copy of the relevant transfer mechanisms, please contact us at privacy@bellami.app.

8. How Long We Keep Your Information

When you delete your account, we delete your profile, relationships, messages, and associated data promptly. Some anonymised or aggregated data (e.g., that a message was generated on a given day, without any identifying information) may be retained for statistical purposes.

9. Your Privacy Rights

Depending on where you live, you may have various rights regarding your personal information. These rights and how to exercise them are described below.

9.1 Rights Available to All Users

• Access:You can view most of your profile information directly in the app under Settings > Profile.
• Correction: You can update your profile at any time in the app.
• Deletion:You can delete your account from Settings > Account > Delete Account. This deletes your profile, relationships, and messages. To request deletion of data held by third-party sub-processors (such as Sentry or PostHog analytics), contact us and we will facilitate the request.
• Portability: You can request a copy of your data by emailing privacy@bellami.app. We will provide it in a commonly used machine-readable format within 30 days.

9.2 Additional Rights for EEA and UK Residents (GDPR / UK GDPR)

If you are in the European Economic Area or United Kingdom, you also have the right to:

• Object to processing based on legitimate interests
• Restrict processing of your data in certain circumstances
• Withdraw consent at any time where processing is consent-based (e.g., push notifications — you can withdraw via your device settings)
• Lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EEA)

9.3 Rights for Canadian Residents (PIPEDA / Law 25)

Canadian residents have the right to access and correct their personal information, and to challenge our compliance with applicable privacy law. For Quebec residents, Law 25 provides additional rights including the right to data portability and the right to de-indexation.

9.4 Rights for Australian Residents (Privacy Act 1988)

Australian residents have the right to access and correct their personal information held by us. If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us first, and then with the Office of the Australian Information Commissioner (OAIC) if the matter is not resolved.

9.5 How to Exercise Your Rights

To exercise any of the rights above, email us at privacy@bellami.app with your request. We will respond within 30 days. We may ask you to verify your identity before processing the request.

10. How We Protect Your Information

We use a combination of technical and organisational measures to protect your data:

• All data in transit is encrypted using TLS. Data at rest is encrypted by our hosting providers.
• Authentication is managed by Clerk, which uses industry-standard token-based authentication and supports multi-factor authentication.
• Sensitive fields — including message content, relationship notes, and your bio — are masked before being logged or sent to error-tracking systems.
• API routes authenticate every request using JSON Web Tokens (JWTs) issued by Clerk. There is no unauthenticated access to user data.
• Access to production systems and databases is restricted to authorised personnel on a need-to-know basis.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

11. Apple Privacy Nutrition Label Summary

Apple requires apps on the App Store to disclose their privacy practices in a standardised format. The following reflects the information we have declared to Apple. The full label is visible on the Bellami App Store listing.

Data Used to Track You

None. We do not use your data to track you across apps or websites owned by other companies, and we do not share your data with data brokers.

Data Linked to You

The following data categories are collected and linked to your identity within Bellami:

• Contact Info: Name, email address
• User Content: Relationship notes, generated messages
• Identifiers: User ID
• Purchase History: Credit purchases, subscription status
• Usage Data: In-app actions (e.g., message generated, share sheet opened)
• Diagnostics: Crash data and performance metrics

Data Not Linked to You

Anonymised crash reports and aggregated analytics events that cannot be used to identify you.

12. California-Specific Disclosures

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights regarding your personal information.

12.1 Categories of Personal Information Collected

12.2 Your CCPA Rights

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell (we do not sell).
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale / Sharing: We do not sell or share your personal information for cross-context behavioural advertising.
• Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information (such as relationship notes and your bio) to provide the core service.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your California privacy rights, contact us at privacy@bellami.app. We will respond within 45 days as required by the CCPA.

12.3 Shine the Light

California Civil Code §1798.83 (“Shine the Light”) allows California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Updating the “Effective date” at the top of this policy
• Sending an in-app notification or email if the change is significant

We encourage you to review this policy periodically. Your continued use of Bellami after any changes take effect constitutes your acceptance of the updated policy.

Previous versions of this policy are available on request by emailing privacy@bellami.app.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email: privacy@bellami.app
• General support: support@bellami.app

We aim to respond to all privacy-related inquiries within 30 days. For EEA/UK users, if you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Bellami is operated by Carey Marcel. For the purposes of the GDPR and UK GDPR, Carey Marcel acts as the data controller.