BeDoBeDoPrivacy
BeDo Privacy Policy
BeDo helps you finish the few things you set for yourself each day: until they're done, your distracting apps stay locked. This policy explains what BeDo does with your information. The short version: your things, records, photos and recordings stay on your phone. We have no accounts, no user database, no ads and no tracking. The only data that leaves your phone is what goes to the AI service that powers Bedo, by way of a small relay of ours that keeps none of it, and only after you agree.
- No sign-up. No account. Our only server is a relay that passes AI requests along and stores none of them.
- No advertising, no analytics SDKs, no tracking across apps or websites. We never sell your data.
- Which apps you lock is hidden even from BeDo: iOS only gives it unreadable tokens.
- Your Apple Health data never leaves your phone. Your recordings are never sent to us or to the AI; if you're signed in to iCloud, a copy is kept in your own iCloud.
- When you talk to Bedo, what you send goes through our relay to DeepSeek, an AI service, and only after you say yes.
Who we are
BeDo is made by Wuxi Entropy Intelligence Technology Co., Ltd ("we", "us"). Contact details are at the end of this policy.
What stays on your phone and in your iCloud
All of the following is stored in BeDo's storage on your device and, if you're signed in to iCloud, in your own iCloud. We don't receive it and can't see it.
- Your things and their rules: names, days, lock times, how each one counts as done, smaller versions, scripts you read from.
- Your records: when you finished what, counts and times, notes you wrote, photos and screenshots you kept, voice recordings, your progress page, weekly notes and letters.
- What Bedo remembers: things you've told Bedo to keep in mind, in your own words (up to 60). You can see, change and delete them in Me → Bedo.
- Settings: Bedo's name, when your day ends, how many early unlocks you allow yourself, and similar.
If you're signed in to iCloud, BeDo keeps a copy of this in your own iCloud account (Apple's CloudKit private database), so it comes back when you change phones or reinstall. That copy sits in your iCloud, not with us, and we can't see it. Which apps you lock, your subscription status and your Screen Time data are not synced. If you're not signed in, everything stays on this phone only. Like other app data, this information may also be included in your device backups according to your iOS settings.
Permissions and what they're used for
Screen Time
BeDo uses Apple's Screen Time framework to lock the apps you pick and to know when you've spent a set time in an app. iOS gives BeDo only encrypted tokens for those apps. Neither we nor BeDo can tell which apps they are, and these tokens never leave your phone.
Camera
Used to count reps (push-ups, squats and so on), to take photos you keep as proof, and to scan pages you want to read aloud. Rep counting happens on your phone in real time and the video is not saved. Text in scanned pages and pictures is read on your phone.
Microphone and speech recognition
Used to record you when a thing is done by voice, and to turn what you say into text when you talk to Bedo. Recordings are saved on your phone (and, if you're signed in to iCloud, in your own iCloud) and are never sent to us or to the AI. Speech-to-text runs on your phone when your language supports it; otherwise Apple's speech recognition service processes the audio under Apple's privacy policy.
Apple Health
If you set a thing to finish from Health data, BeDo reads today's walking and running distance, running workouts, steps, exercise minutes or mindful minutes. Read only: BeDo never writes to Health. Health data stays on your phone. It is not sent to the AI service or to anyone else, and is never used for advertising.
Photos
Used when you choose a screenshot or picture to send. BeDo only sees the pictures you pick.
Notifications
All BeDo notifications are scheduled on your phone. No push server is involved.
What goes to the AI service
Bedo, BeDo's companion, is powered by DeepSeek, an AI service (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd.). The first time something would be sent, BeDo asks you in the chat and sends nothing unless you agree. If you don't agree, BeDo still works: you set things up yourself, checks still work, and Bedo replies with fixed lines. Photo checks aren't offered in that case.
When you've agreed, these can be sent, and only these:
| When | What is sent |
|---|---|
| You talk to Bedo | What you type, or say after it's turned into text. The things you've told Bedo to keep in mind (Me → Bedo). A short summary of your things so Bedo knows what you mean: names, times, days, how many times you've done them lately, whether apps are locked, and how many early unlocks you've used. |
| You send Bedo a picture | The picture, plus the text your phone read from it. |
| You ask Bedo to work on a script | That script. |
| You finish a thing by photo or screenshot | That picture, so Bedo can check it matches what you agreed. If you turned on a "before" photo for that thing, also the photo you took when you started that day, so Bedo can compare the two. Until then the "before" photo stays on your phone, and it is deleted once the thing counts or the day ends. |
| You finish a thing | Its name and the numbers already on your wall (for example "30 push-ups, 8 days"). With BeDo Pro, also a small copy of the photo you took. Numbers read from Apple Health are not sent. |
| Weekly notes and letters | Your record of those days: what you did and when, how much, when you unlocked early and the reason you gave, up to 12 things you wrote, what you told me when you started, the things you've told me to keep in mind, and my last letter with your reply. No photos or recordings. |
Never sent: which apps you lock, your recordings, your Apple Health data, your rep-counting video.
Before a photo is sent, BeDo shrinks it and re-encodes it, which strips location and other camera metadata.
Requests go from your phone to a small relay we run on Cloudflare Workers. It adds our DeepSeek key, passes the request to DeepSeek and streams the reply straight back. The relay doesn't log or store what you send or what comes back. To stop the service being used by anything other than BeDo, and to count your daily messages, it keeps only:
- An anonymous device ID: the ID of a key your iPhone creates for BeDo with Apple's App Attest, plus that key's public half. It isn't linked to your name, Apple ID or any account, and it changes if you reinstall BeDo. It's deleted after 90 days without use.
- How many requests that device ID made today (kept for about two days), and, before you start, how many in total.
- With BeDo Pro, a fingerprint (hash) of your Apple-signed purchase record and when it expires, so the relay doesn't have to check Apple's signature every time.
As with any internet request, Cloudflare, which runs the relay, can see your IP address, and it may be passed on to DeepSeek; the relay doesn't store it. DeepSeek processes data on servers in the People's Republic of China, and how long it keeps data is set by DeepSeek's own privacy policy and terms (see deepseek.com). Bedo's replies are generated by AI and may be wrong.
Subscriptions
BeDo holds one task for you for free. More is sold by Apple, as an auto-renewing subscription (yearly or monthly; new subscribers can try it first) or as a one-time Lifetime purchase. Apple handles payment; we never receive your payment details. To know whether your trial, subscription or purchase is active, BeDo checks Apple-signed purchase records on your phone, and sends the current one with each AI request so our relay can check Apple's signature itself. The relay keeps only a fingerprint of that record and when it expires. To stop abuse, the relay counts messages under your anonymous device ID: a few each day on the free plan, and a daily ceiling you won't reach in normal use once you subscribe. If you allow notifications, BeDo reminds you two days before a trial ends and you're charged; that reminder is scheduled on your phone. Manage or cancel in your iPhone's Settings → your name → Subscriptions. Purchases are covered by Apple's privacy policy.
What we receive
Never what you send to Bedo. Our relay keeps only the anonymous device ID, daily counts and Pro fingerprint described in "What goes to the AI service". Beyond that, we only receive information if you choose to send it to us, for example by email or through TestFlight feedback. Apple may also give us anonymized App Store statistics and crash reports from people who have chosen to share them with developers. We use these only to answer you and to fix and improve BeDo.
Keeping and deleting your data
Data on your phone stays until you delete it. You can delete a thing and its records, delete everything in Me → Privacy & data → Delete all data, or delete the app. Delete all data also removes BeDo's copy from your iCloud; deleting the app only removes what's on this phone, and the iCloud copy stays until you delete all data in BeDo or remove BeDo's data in iOS Settings → your name → iCloud. Deleting all data can't be undone. It doesn't reset your daily message count: the relay's record of your anonymous device ID goes away on its own after 90 days without use. Things already sent to DeepSeek are held under DeepSeek's terms. We can't access or delete them because we never kept them.
Your rights
Depending on where you live (for example under the GDPR in the EU/UK or privacy laws in US states such as California), you may have rights to access, correct, delete or port your personal data, and to object to or restrict processing. Because your data lives on your phone and in your own iCloud, you can see, change and delete it in BeDo yourself. For anything else, contact us. We don't sell or share personal information for cross-context behavioral advertising.
Where the GDPR applies, we rely on your consent to send content to the AI service. You can withdraw it by not sending further messages and deleting your data. We rely on performing our service to you for everything that happens on your device.
Children
BeDo isn't directed to children under 13, or under the minimum age set by law in your country, and we don't knowingly collect their data.
Changes
If what BeDo sends or stores changes, we'll update this page and the date at the top before the change ships. For significant changes, BeDo will tell you in the app.
Contact
Wuxi Entropy Intelligence Technology Co., Ltd
Email: remagi2046@gmail.com