Privacy policy
1. Who processes your data
The data controller is the owner of Be Chief, Andrés García, reachable at hola@bechief.ai. Write to that address with any question about your data.
2. What data we process
- Account: name, email address, password (hashed with Argon2), language, time zone and, if you use "Sign in with Apple", the identifier Apple gives us.
- Content you create: clients, projects, people, tasks, events, notes, conversations with the assistant and the voice recordings you send, together with their transcription.
- Device: push notification token (APNs), app version and device language.
- Usage: volume of text processed by the AI and minutes of audio transcribed per day, to apply the service limits. Technical server logs (IP address, time, path and response code) for 30 days.
We do not collect location, phone contacts or the device calendar.
3. Why, and on what legal basis
- Providing the service: creating your account, storing and showing your context, transcribing your audio and generating the answers, summaries and drafts you ask for. Basis: performance of the contract.
- Sending notifications (the daily, reminders) when you enable them. Basis: performance of the contract; you can switch them off in the app.
- Verifying your email and recovering your password. Basis: performance of the contract.
- Security, abuse prevention and usage limits. Basis: legitimate interest.
- Meeting legal obligations. Basis: legal obligation.
We do not use your content to train AI models and we do not share it with third parties for their own purposes.
4. Who helps us process it (processors)
- DigitalOcean (Frankfurt, Germany): hosting of the application and your data.
- Microsoft Azure AI Foundry: the language model that processes your texts and transcriptions to answer you. Data sent to the model may be processed in the United States under the European Commission's standard contractual clauses. Microsoft does not use it to train models.
- Resend: verification and password-recovery emails.
- Apple: push notification delivery and, if you choose it, sign-in.
Audio transcription runs on our own server or on your iPhone; it is not sent to other providers.
5. Third-party data
In Be Chief you store information about your clients and the people you work with. You are responsible for having a lawful basis to process that data and for informing those people where required. We process it solely on your behalf and under your instructions.
6. How long we keep it
- Voice recordings: 90 days, then deleted automatically. The transcription stays with your context.
- Account and content: while you have an account. Deleting it from the app removes your data immediately, and from backups within 30 days at most.
- Technical logs: 30 days.
7. Your rights
You can access, rectify, erase, restrict or object to processing and request portability. From the app you can export all your content and delete your account without asking us. For anything else, write to hola@bechief.ai. You may also lodge a complaint with your data protection authority (in Spain, aepd.es).
8. Security
Encryption in transit (TLS), Argon2id password hashing, isolation of each user's data in the database and on disk, encrypted backups and SSH-key-only server access.
9. Minors
Be Chief is intended for professionals aged 18 or over.
10. Changes
If we change this policy we will tell you in the app before the change takes effect. The current version is always on this page.