Last updated: April 20, 2026
In brief: Beatrice does not collect, store, or transmit your personal data. Your knowledge graph lives entirely on your device. We have no servers, no accounts, no telemetry, and no way to identify you. This privacy policy is short because there is almost nothing to describe — and that is by design.
Beatrice (“the App”) is developed by an independent team based in Canada. We are committed to protecting your privacy under all applicable laws, including:
References to “we,” “us,” or “our” refer to the developers of Beatrice. References to “you” or “user” refer to any person who downloads or uses the App.
Beatrice operates on a strict local-first principle. The following categories of data are never collected, transmitted, or stored by us:
The following describes all data that the App may interact with. In every case, processing occurs locally on your device and is never transmitted to us or any third party.
All notes, documents, images, code snippets, and other content you create or import into Beatrice are stored locally on your device using Apple’s SwiftData framework. This data is encrypted at rest only by the device’s own file-system encryption (e.g., APFS encryption). We hold no decryption keys because we hold no data.
Beatrice generates text embeddings on-device using Apple’s NaturalLanguage and Core ML frameworks. No API calls are made to external services. Your text is never sent to any server for processing.
If you download Beatrice through the Apple App Store, Apple may collect data as described in Apple’s Privacy Policy. We do not control Apple’s data practices. App privacy labels and data collection disclosures are managed through Apple’s App Store Connect platform.
If you choose to share crash reports with us through Apple’s built-in App Analytics or TestFlight diagnostic sharing, those reports may include technical information such as OS version, device model, and stack traces. These reports do not include your knowledge graph content, personal identifiers, or usage patterns. Participation is entirely voluntary and can be disabled in your device settings.
Under Article 6 of the GDPR, processing of personal data requires a lawful basis. Because Beatrice does not collect or process personal data, no lawful basis is required for our operations. To the extent that any processing occurs (e.g., local embeddings generation), the lawful basis is legitimate interest (Article 6(1)(f)) — namely, providing the core functionality of the App you voluntarily installed.
For any optional crash diagnostics you choose to share, the lawful basis is consent (Article 6(1)(a)). You may withdraw this consent at any time by disabling analytics in your device settings.
Your knowledge graph data may leave your device only through the following mechanisms, all of which you must explicitly configure:
| Mechanism | How It Works | Who Has Access |
|---|---|---|
| iCloud Sync (Pro subscribers only) | Your knowledge graph is synced between your own Apple devices using Apple’s CloudKit infrastructure. You must be signed into iCloud and have a Beatrice Pro subscription. This feature is opt-in and activates after your next app restart following purchase. | Only you, across your own Apple devices. Apple’s privacy policy governs how CloudKit stores data. The Beatrice development team has no access to data stored in CloudKit. |
| Local Mesh Sync | Peer-to-peer transfer over your local WiFi network using Apple’s Network framework and Bonjour service discovery. Data never leaves your local network. | Only devices on your local network that you explicitly pair with a PIN code. |
| Email-Relay Sync | Encrypted payloads sent through your own IMAP/SMTP email account as a transport layer. | Only you (the email account holder). Payloads are encrypted before transmission. |
| Export | You may export your graph as JSON or Markdown files to your device’s local storage. | You control where exported files go. |
At no point does Beatrice transmit your data to any server owned, operated, or controlled by the Beatrice development team. We do not have servers. iCloud sync, when enabled, uses Apple’s infrastructure exclusively and is governed by Apple’s Privacy Policy.
Beatrice uses the following third-party frameworks and services. Each is described with its data implications:
Our marketing website (landing pages and documentation) uses Google Analytics to understand general traffic patterns. This is separate from the App. Google Analytics does not have access to your knowledge graph, App usage, or any personal data stored within Beatrice. Google’s privacy policy can be found at https://policies.google.com/privacy. You can opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on.
Distribution, purchase processing, and App Store analytics are handled by Apple Inc. Apple’s privacy policy governs data collected through the App Store. We do not receive personal information about individual users from Apple beyond aggregated sales and analytics data.
Because we do not collect or store your data, there is no retention period imposed by us. Your knowledge graph data persists on your device for as long as you keep the App installed. Deleting the App removes all Beatrice data from your device.
Depending on your jurisdiction, you may have some or all of the following rights. Because Beatrice does not collect personal data, many of these rights are not applicable in practice — but we list them for completeness and transparency.
Beatrice does not knowingly collect personal information from children under the age of 16 (or the applicable age of digital consent in your jurisdiction). Because the App does not collect any personal information from any user, this policy applies equally to users of all ages. Parents and guardians may review the “Information We Do Not Collect” section above for full details.
Because Beatrice does not transmit data to any server operated by us, there are no international data transfers to consider. Your data remains on your device unless you choose to sync it using one of the mechanisms described in Section 5. Any data transferred through Email-Relay Sync travels through your own email provider and is governed by that provider’s privacy policy and data transfer practices.
While we do not hold your data, Beatrice is designed with security as a foundational principle:
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page. For changes made after the App is distributed through the App Store, we will also note significant changes in the App’s version history or release notes. We encourage you to review this page periodically.
If you have questions about this Privacy Policy or wish to exercise any of your rights, you may contact us at:
We aim to respond to all inquiries within 30 days. Under GDPR, we are required to respond to data subject access requests without undue delay and within one month (Article 12(3)).
Given the nature of Beatrice’s data processing (i.e., the absence thereof), we have not appointed a formal Data Protection Officer (DPO). However, all privacy inquiries are handled directly by the Beatrice development team with equivalent care and attention. If you believe a DPO is required under your jurisdiction, please contact us and we will cooperate fully with relevant supervisory authorities.
If any provision of this Privacy Policy is found to be unenforceable or invalid under applicable law, the remaining provisions will continue to be valid and enforceable to the fullest extent permitted by law.