Transparency
No fine print: what we do with your data and what we don't.
Your life is yours. In BeNexo that isn't a setting you switch on: it's the starting point. This page explains, in plain words, what stays on your phone, what syncs, who we work with — and also what others would rather not tell you.
Our promises
No ads. Ever.
No banners, no sponsored content. Your attention isn't for sale.
No tracking, no tracking cookies.
We don't follow you around the web or across apps. No ad profiles.
We don't sell your data.
To anyone. BeNexo doesn't make money from your information, and never will.
Local-first.
The home of your data is your phone. The server only syncs; it doesn't own it.
Private by default.
Every memory starts private. Sharing is always your call, and reversible.
Export or delete everything.
Whenever you want, in one tap: take your whole life with you, or truly erase it.
What stays on your phone and what syncs
BeNexo is built local-first: everything lives on your device first. The server exists only to carry your things from one of your devices to another — and to the people you choose to share with.
Stays on your phone
- Everything you save, available offline
- On-device AI, if you choose it (see below)
- Your backup, if you export it: you keep it wherever you like (or in your own Google Drive, with the minimum permission; never on our servers)
Syncs (encrypted)
- Between your devices and the web, to keep everything up to date
- Only what you choose to share, and only with whom you choose
- Contacts and location only if you enable those permissions
What data we handle
- Your account: your phone number (to identify you and sign in) and, if you want, your name.
- What you create: your contacts and what you record about them — memories, plans, dates, links, and attachments like photos or documents.
- Minimal technical data: device identifiers needed to sync and basic security logs. None of this is used to profile you. Aggregate usage data and error reports from the app are only sent if you turn them on ("Help me improve BeNexo").
What leaves the device only if you turn it on
Some things are optional by design. They don't happen unless you enable them, and we always explain first:
- Contacts. To find your people and avoid duplicates. We only send fingerprints (hashes) of the numbers, never names or plain numbers. You can use BeNexo without granting it.
- Location. Only if you attach a place to a memory or plan; we store the coordinates you choose, nothing more.
- Cloud AI. Only when you use it, and it sends only the necessary text about that person to generate the suggestion (see below).
- Analytics and error reports. Off by default; only if you turn on "Help me improve BeNexo". No content from your notes or contacts.
- Backup to your Google Drive. Only if you connect your account, with the minimum permission. The file goes from your phone to your Drive, without passing through our servers.
- On-device AI models. If you choose that option, your phone downloads the model from Hugging Face. They only see the download, not your content.
The AI (Nex): you choose how it works
AI features are optional: BeNexo works fully without them. And when you use them, you decide where they run:
- On your device. The AI runs inside your phone and nothing you write leaves it. It works offline.
- In the cloud. Faster. It sends our AI provider only the necessary text about the person you ask about; it is not used to train models.
Who we work with
We don't sell your data. To run the service we rely on a small number of providers, acting on our behalf and bound by confidentiality:
- Railway — hosting and database infrastructure.
- Supabase — sending the SMS with your verification code and storing attachments.
- Google (Gemini) — only if you enable cloud AI: it receives the text needed to generate the suggestion.
- PostHog — aggregate product analytics, hosted in the EU; in the app, only if you turn it on. It does not receive the content of your contacts or notes.
- Sentry — error reports, in the EU; in the app, only if you turn it on. It does not receive the content of your contacts or notes.
- Expo — delivers app updates and relays push notifications (it receives the notification text, e.g. "Sara shared a memory with you", never the content).
- Google (Firebase Cloud Messaging) — delivers push notifications on Android.
- FormBold — on the website only, to manage the waitlist (your email).
Our infrastructure runs on providers with recognized security certifications: Railway (SOC 2 Type II) and Supabase (SOC 2 Type II and ISO 27001).
The uncomfortable truth: there's no end-to-end encryption
We'd rather tell you than have you find it in the fine print. Your data travels encrypted in transit (TLS) and is stored encrypted at rest. But for sync, reminders and cloud AI to work, BeNexo does not use end-to-end encryption: someone who gained access to the running database could read the data.
We work hard to make sure that doesn't happen — and that's why the on-device AI option exists, and why everything you don't share stays private by default. If we ever offer end-to-end encryption, you'll read it here first.
Your control, always
- Export all your data to a file, whenever you want (Settings → Backup).
- Stop sharing anything at any moment; the other person's copy disappears.
- Delete your account and all your data from our servers (Settings → Account). Deletion is real.
For the full legal detail, see our Privacy Policy. Any questions? Write to us at hola@benexo.app.