Privacy Policy

1. Introduction

Bellami (“we”, “our”, or “us”) is a mobile application that helps people express genuine appreciation to the people they care about. We do this by generating personalised messages using AI, based on context you voluntarily provide about yourself and your relationships.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights in relation to it. We are committed to handling your information transparently and responsibly.

By using Bellami, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.

2. Age Requirements and Children

Bellami is intended for users aged 13 and older. We do not knowingly collect personal information from anyone under 13: children do not create accounts, use the app, or provide anything to us directly. This is different from a registered user choosing to store details about a child in their own account (for example, a birth date for their own child), which we describe in Section 3.3. If we learn that a child under 13 has created an account or provided information to us directly, we will delete it promptly.

If you are between 13 and 17, you must have a parent or guardian's permission to use Bellami.

If you believe we have collected information from a child without parental consent, please contact us at privacy@bellami.app.

The people you add to Bellami may include children. Bellami lets you store details — including an optional date of birth — about the people you want to appreciate, and some of them may be your own children or other minors. That information is provided by you, the account holder; the child does not use Bellami and gives us nothing directly. How we store, use, and delete it is described in Section 3.3.

3. Information We Collect

3.1 Information You Provide Directly

Account information: Your first name, email address, and authentication credentials (including tokens from Google Sign-In and Apple Sign-In if you use those methods).

Profile information: Gender, age range, and an optional personal bio (up to 300 characters). You choose what to share; this information helps us generate more relevant messages.

Relationship information: Details about the people you wish to appreciate. Because this is information about people who are not users of Bellami, we describe it separately and in full in Section 3.3 below.

Payment information: We do not collect or store your payment card details directly. Purchases are processed by Apple (via the App Store) and RevenueCat. We receive confirmation of purchases, subscription status, and transaction identifiers — not raw payment data.

3.2 Information Generated Through Your Use

Messages: The AI-generated messages we create for you are stored so you can view your message history. Messages are associated with your account and a specific relationship.

Usage data: When you generate a message, share it via the native share sheet, or interact with the app, we log the action and relevant metadata (e.g., message tone, timestamp, streak status). We never log the content of a message in our analytics or logging systems.

Credit and purchase history: We maintain a ledger of credit transactions (sign-up bonus, weekly refresh, purchases, usage) for account integrity and dispute resolution.

Technical and device data: Standard information such as device type, operating system, app version, IP address (temporarily, for fraud prevention), and crash/error data.

3.3 Information About the People You Add

Bellami only works if it knows a little about the people you want to appreciate. For each person you add, you can provide the following. Everything except the name and relationship type is optional, and you can change or remove any of it at any time.

• A name — a label you choose for them. It does not have to be their legal name.
• Relationship type — partner, friend, or family; and for family, an optional sub-type (child, sibling, parent, grandparent, or other).
• Date of birth(optional) — used only to tailor the tone and wording of your messages to the person's age. You can leave this blank.
• How long you have known them (optional).
• Notes (optional) — free text about what makes them special.
• Your message preferences for them — tone, length, and language.

These people are not users of Bellami. They do not have an account, we never contact them, and beyond what you choose to type in we do not store their contact details (such as a phone number or email address) on our servers. Linking one of your device contacts to a relationship is covered in Section 3.4. This information is used to generate your messages and to power the app features you use, such as reminders, streaks, and message history (see Section 4). It is never shown to other users, never sold, and never used for advertising. It is held in our database and the infrastructure that runs Bellami (listed in Section 6); the only external service it is sent to is Anthropic's Claude API, at the moment you generate a message, so that the message can be written (see Section 5).

Information about minors. The people you add may be children — for example, your own child. Any date of birth or other detail you enter about a minor is information you provide as the account holder; the child does not use Bellami and provides nothing to us directly. We use it only to tailor your messages; we do not build advertising or tracking profiles of children, and we never sell it or disclose it to anyone for their own purposes; like the rest of your relationship information, it is sent only to the service providers that generate and store your messages (Sections 5 and 6). You can clear any detail (including a date of birth) by editing the relationship. When you remove a relationship, we hide it and stop using its information; the stored record is kept as part of your message history and is permanently deleted when you delete your account (see Sections 8 and 9).

You can edit or remove any of this at any time in the app. Editing a field overwrites what was stored; removing a relationship hides it and stops Bellami from using it, and everything stored about that person is permanently deleted when you delete your account.

3.4 Information We Do Not Collect

Beyond the details you choose to enter about a relationship (described in Section 3.3), we do not independently gather information about the people you appreciate, and we do not look them up in any external database.

We do not scan or upload your address book, photos, or messages. If you choose to link one of your device contacts to a relationship and grant contacts access, Bellami reads only that one linked contact, only on your device, and only to pre-fill your messaging or email app when you send a message. That contact's phone number and email address are used on your device for that purpose and are never sent to or stored on our servers — we store only a reference to the contact you linked so the app can find it again.

We do not use your information to serve third-party advertising, and we do not sell your personal information.

4. How We Use Your Information

We use your information for the following purposes, relying on the legal bases noted where applicable (relevant for EEA/UK users):

We do not use your relationship notes or message content for any purpose other than generating messages within the session you initiate.

5. AI-Generated Content

Bellami uses Anthropic's Claude APIto generate appreciation messages. When you tap “Generate”, we send a structured prompt to Anthropic's servers. That prompt includes:

• Your first name, gender, and age range (from your profile)
• The relationship name, type, family sub-type, how long you have known them, your optional notes, and your tone, length, and language preferences. If you have entered the person's date of birth, their age may also be included so the message suits their age.

Anthropic processes this information to generate the message. Anthropic's API usage policies apply to this processing. Anthropic does not use prompts sent via the API to train its models. You can review Anthropic's privacy practices at anthropic.com/privacy.

Generated messages are stored in Bellami so you can view your history. You can delete your account at any time to remove them.

AI disclosure: Messages produced by Bellami are AI-assisted. They are designed to reflect your voice and intent, but they are generated by a language model, not written by a human. You should review every message before sending it.

6. Sub-Processors and How We Share Information

We share your information only with the third-party services necessary to operate Bellami. We do not sell your data, share it for advertising, or disclose it to unaffiliated third parties except as described below.

Legal disclosures: We may disclose your information if required by law, court order, or government authority. Where permitted, we will notify you before complying with such requests.

Business transfers: If Bellami is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you of any such change.

7. Where Your Information Is Processed

Bellami is operated from the United States. If you are located outside the USA — including in the European Economic Area (EEA), United Kingdom, Canada, or Australia — your information is transferred to and processed in the USA.

For EEA and UK users: Transfers to the USA are made on the basis of Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent mechanisms, where required by applicable data protection law. We select sub-processors who commit to adequate data protection safeguards.

If you have questions about international transfers or wish to obtain a copy of the relevant transfer mechanisms, please contact us at privacy@bellami.app.

8. How Long We Keep Your Information

When you delete your account, we delete your profile, your relationships (including every detail you stored about the people in them, such as any dates of birth), your messages, and associated data promptly. Some anonymised or aggregated data (e.g., that a message was generated on a given day, without any identifying information) may be retained for statistical purposes.

9. Your Privacy Rights

Depending on where you live, you may have various rights regarding your personal information. These rights and how to exercise them are described below.

9.1 Rights Available to All Users

• Access:You can view most of your profile information directly in the app under Settings > Profile.
• Correction: You can update your profile at any time in the app.
• Deletion:You can delete your account from Settings > Account > Delete Account. This deletes your profile, your relationships and everything stored about the people in them (including any dates of birth), and your messages. To request deletion of data held by third-party sub-processors (such as Sentry or PostHog analytics), contact us and we will facilitate the request.
• Portability: You can request a copy of your data by emailing privacy@bellami.app. We will provide it in a commonly used machine-readable format within 30 days.

9.2 Additional Rights for EEA and UK Residents (GDPR / UK GDPR)

If you are in the European Economic Area or United Kingdom, you also have the right to:

• Object to processing based on legitimate interests
• Restrict processing of your data in certain circumstances
• Withdraw consent at any time where processing is consent-based (e.g., push notifications — you can withdraw via your device settings)
• Lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EEA)

9.3 Rights for Canadian Residents (PIPEDA / Law 25)

Canadian residents have the right to access and correct their personal information, and to challenge our compliance with applicable privacy law. For Quebec residents, Law 25 provides additional rights including the right to data portability and the right to de-indexation.

9.4 Rights for Australian Residents (Privacy Act 1988)

Australian residents have the right to access and correct their personal information held by us. If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us first, and then with the Office of the Australian Information Commissioner (OAIC) if the matter is not resolved.

9.5 How to Exercise Your Rights

To exercise any of the rights above, email us at privacy@bellami.app with your request. We will respond within 30 days. We may ask you to verify your identity before processing the request.

10. How We Protect Your Information

We use a combination of technical and organisational measures to protect your data:

• All data in transit is encrypted using TLS. Data at rest is encrypted by our hosting providers.
• Authentication is managed by Clerk, which uses industry-standard token-based authentication and supports multi-factor authentication.
• Sensitive fields — including message content, relationship notes, and your bio — are masked before being logged or sent to error-tracking systems.
• API routes authenticate every request using JSON Web Tokens (JWTs) issued by Clerk. There is no unauthenticated access to user data.
• Access to production systems and databases is restricted to authorised personnel on a need-to-know basis.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

11. Apple Privacy Nutrition Label Summary

Apple requires apps on the App Store to disclose their privacy practices in a standardised format. The following reflects the information we have declared to Apple. The full label is visible on the Bellami App Store listing.

Data Used to Track You

None. We do not use your data to track you across apps or websites owned by other companies, and we do not share your data with data brokers.

Data Linked to You

The following data categories are collected and linked to your identity within Bellami:

• Contact Info: Name, email address
• User Content: Relationship notes, generated messages
• Other Data: Optional dates of birth for the people you add to your relationships, used only to tailor your messages
• Identifiers: User ID
• Purchase History: Credit purchases, subscription status
• Usage Data: In-app actions (e.g., message generated, share sheet opened)
• Diagnostics: Crash data and performance metrics

Data Not Linked to You

Aggregated, anonymised analytics events that cannot be used to identify you. (Crash and diagnostics data is reported through Sentry linked to your account, so it appears under Diagnostics in the “Data Linked to You” list above, not here.)

12. California-Specific Disclosures

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights regarding your personal information.

12.1 Categories of Personal Information Collected

12.2 Your CCPA Rights

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell (we do not sell).
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale / Sharing: We do not sell or share your personal information for cross-context behavioural advertising.
• Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information (such as relationship notes and your bio) to provide the core service.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your California privacy rights, contact us at privacy@bellami.app. We will respond within 45 days as required by the CCPA.

12.3 Shine the Light

California Civil Code §1798.83 (“Shine the Light”) allows California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Updating the “Effective date” at the top of this policy
• Sending an in-app notification or email if the change is significant

We encourage you to review this policy periodically. Your continued use of Bellami after any changes take effect constitutes your acceptance of the updated policy.

Previous versions of this policy are available on request by emailing privacy@bellami.app.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email: privacy@bellami.app
• General support: support@bellami.app

We aim to respond to all privacy-related inquiries within 30 days. For EEA/UK users, if you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Bellami is operated by Carey Marcel. For the purposes of the GDPR and UK GDPR, Carey Marcel acts as the data controller.