Bels — Privacy Policy

Effective date: August 3, 2026

Bels is operated by Halo 27, Inc. ("Halo," "we," "us"). Bels is an AI-powered health and wellness companion for iOS. This policy describes what information the app collects, how it is used, and the choices available to you.

Questions or requests: team@withbels.com

1. Information we collect

Account information

• Phone number, used to create and sign in to your account via one-time SMS codes. Authentication is handled by our identity provider (Stytch); we do not see or store your SMS codes.

Content you provide

• Chat messages you send to Bels, and the responses generated for you.
• Voice notes. Audio you record in the app is sent to our servers and converted to text by a speech-to-text provider (Deepgram). Transcripts are stored as part of your chat history; audio is used for transcription and is not retained as a long-term record.
• Photos you choose to share in chat. Bels only accesses photos you explicitly select.
• Lists, plans, and preferences you create in the app (e.g., grocery lists, goals, reminders).

Health data (Apple HealthKit) — optional

With your permission, Bels reads a limited set of HealthKit data to personalize insights: steps, walking/running distance, active energy, sleep, heart rate variability, water intake, menstrual cycle data, height, weight, body fat percentage, date of birth, and biological sex.

• Access is read-only; Bels never writes to HealthKit.
• You choose which types to share, and you can revoke access at any time in the iOS Health app or in Bels' settings.
• HealthKit data is never used for advertising or marketing, is never sold, and is never shared with third parties for their own purposes. It is used solely to provide the app's features to you.

Google user data (Google Calendar) — optional

With your permission, Bels connects to your Google account via Google's OAuth consent flow to access your Google Calendar. Bels reads your calendar events (titles, times, locations, and attendees of events on calendars you choose to share) and can create new events on your calendar when you ask it to. This access is used solely to show you your schedule and to personalize planning help — for example, suggesting meals, errands, or downtime that fit around your day, or adding a plan you've made with Bels (with its title and location) to your calendar.

• Bels only creates events at your direction; it does not modify or delete your existing events.
• You can disconnect Google Calendar at any time in Bels' settings or by revoking access at myaccount.google.com/permissions.
• Google user data is never used for advertising, is never sold, and is never transferred to third parties except as necessary to provide the app's user-facing features (see "AI processing" and "Service providers" below), to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• Humans do not read your Google user data unless you give us explicit permission (e.g., for support), it is required for security or legal reasons, or it has been aggregated and anonymized.

Bels' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Location — optional

With your permission, Bels uses your approximate location while you are using the app to suggest nearby places (e.g., restaurants or stores relevant to your plans). Location is not collected in the background and is not stored as a movement history.

Automatically collected information

• Usage analytics (Mixpanel): app events such as screens viewed and features used, tied to a user identifier, to understand how the beta is used.
• Crash and performance diagnostics (Sentry): crash reports and error logs, which may include device model, OS version, and app state at the time of an error.
• Push notification tokens, so we can deliver notifications and Live Activities you've enabled.

2. How we use information

• To provide the core service: an AI companion that chats with you, remembers relevant context you've shared, and helps with health, food, and daily planning.
• To personalize responses using the information above (chat history, memory derived from your conversations, HealthKit data you've shared, calendar events you've connected, location when in use).
• To send notifications, reminders, and Live Activity updates you've enabled.
• To operate, debug, and improve the beta (analytics and crash diagnostics).
• To keep the service secure and prevent abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

3. AI processing

Bels is powered by large language models. To generate responses, your chat messages and relevant context (which may include memory derived from your conversations and health or calendar data you've chosen to share) are processed by third-party AI model providers — currently OpenAI, Google, and providers accessed through OpenRouter. We also use Langfuse to trace and evaluate AI requests so we can improve quality and safety.

These providers process data on our behalf to deliver the service; they are not permitted to use it to advertise to you. Where the provider offers the option, we opt out of our data being used to train their models. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.

Bels provides general wellness support and is not a medical device and does not provide medical advice, diagnosis, or treatment.

4. Service providers

We share data only with the vendors that operate the service on our behalf:

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets (in which case this policy would continue to apply to previously collected data).

5. Storage, security, and retention

• Data is stored on AWS infrastructure in the United States (us-east-1), encrypted in transit and at rest.
• Your data is partitioned per account so it is only accessible in the context of your user.
• We retain your account data while your account is active. During the beta, you can request deletion of your account and associated data at any time by contacting us at the address above; we will delete it within 30 days except where we must retain it for legal reasons.

6. Your choices

• HealthKit, Google Calendar, location, microphone, photos, and notifications are all optional and controlled through iOS permission prompts, Google's consent screen, and Settings; the core chat experience works without them.
• You can request a copy of your data or deletion of your account by contacting us.
• You can stop all collection by deleting the app and requesting account deletion.

7. Children

Bels is not directed to children and is not intended for anyone under 16. We do not knowingly collect information from children; if you believe a child has provided us information, contact us and we will delete it.

8. Beta status

Bels is currently distributed as a limited beta via TestFlight. Features, data flows, and vendors may change as the product develops; this policy will be updated (and re-dated) when they do, and material changes will be communicated in the app or by notification.

9. Changes and contact

We will post any updates to this policy at this location and update the effective date above.

Halo 27, Inc.
Contact: team@withbels.com

See also our Terms of Service.