Privacy Policy

Last updated 30 August 2026

BeeLeaf is a personal dashboard for tasks and household finances. This page explains exactly what we collect, where it goes, and what we do not do with it.

What we collect

• Your account. When you sign in with Google we receive your name, email address and profile picture. We do not receive your Google password and have no access to anything else in your Google account.
• Your dashboard. Everything you enter — tasks, habits, notes, budget categories, bills, transactions, goals and receipts. This is stored so it follows you between devices.
• Subscription state. Your plan, its status, and identifiers that link you to your Stripe customer record.

Ask AI

Ask AI is optional and only runs when you press it. When you do, a summary of the page you are on is sent to an AI provider so it can answer. That summary contains your own words and figures: task titles and notes, your scratchpad, budget category names and amounts, goal names and targets, and the names and amounts of unpaid bills. Nothing is sent unless you press the button, and it is never sent for advertising or profiling.

The request goes to OpenRouter, which routes it to whichever model answers — currently models operated by MiniMax, Google or NVIDIA. We do not send your name, email address or card details with it. We do not use your data to train any model, and we have no arrangement permitting these providers to do so.

If you would rather nothing left BeeLeaf, do not use Ask AI. Every other feature works without it.

What we never see

Your card details. Payments run entirely through Stripe. Card numbers are entered on Stripe’s own pages and never reach our servers. We store only an identifier that lets us ask Stripe about your subscription.

Who processes your data

• Supabase — the database holding your account and dashboard.
• Vercel — hosting and delivery of the site.
• Google — sign-in only.
• Meta — advertising measurement on the marketing pages only, as described above. Never inside the dashboard.
• Stripe — payments and subscription management.
• Resend — sends account email: sign-in confirmation and password resets. Receives your email address only.
• OpenRouter, and the model providers it routes to (MiniMax, Google, NVIDIA) — only when you press Ask AI, and only the summary described above.
• Sentry — error reports when something breaks. Configured not to attach your email or IP address, and cookies are stripped before a report is sent.
• PostHog — product analytics: which pages are used, how often. Automatic click capture and session recording are both switched off, so no dashboard contents reach PostHog. You are identified by an internal id, never by email.

What we do not do

• We do not sell your data.
• We do not share your dashboard — your tasks, notes, bills or figures — with advertisers. Ever.
• We do not read your tasks or finances to build a profile of you.
• We do not use anything you enter to train AI models.
• We do not send marketing email you did not ask for.

Advertising measurement

On our marketing pages only — the home page, the business page and the sign-in pages — we run the Meta Pixel, so we can tell which adverts bring people who go on to sign up. It records that a visit, a plan selection, a sign-up or a purchase happened, along with the plan name and the amount paid.

This means Meta receives data about your visit, which under California law counts as sharing for cross-context behavioural advertising. You can stop it at any time by emailing support@BeeLeaf.app with the subject “Do not share my data”, and we will exclude you. Browser-level Do Not Track and ad-blocking settings also prevent it.

It does not run inside the dashboard itself. Nothing you enter into BeeLeaf — no task, note, bill, amount or receipt — is ever sent to Meta.

Where your data lives

On servers in the United States. If you are outside the US, using BeeLeaf means your data is transferred there.

How long we keep it

For as long as your account exists. Ask us to delete your account and we remove your dashboard and account record within 30 days. Records we are required to keep for accounting — invoices and payment history — are retained by Stripe under their own schedule.

Your choices

• Export or delete your data by emailing support@BeeLeaf.app.
• Cancel at any time from your account page; cancelling does not delete your data.
• Ask what we hold about you and we will tell you.

Children

BeeLeaf is not intended for anyone under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that materially affects you, we will say so by email before it takes effect.

Contact

Questions about privacy: support@BeeLeaf.app.