Privacy Policy

This Privacy Policy explains how Besties, Inc. (“BeAnywhere,” “we,” “us”) collects, uses, and protects your information when you use the BeAnywhere mobile app and web studio (together, the “App”). BeAnywhere lets you upload photos of yourself and generates stylized, AI-created images of you in different scenes. This Policy explains our practices; it does not replace a separate permission where one is required.

This Policy covers the App on Apple devices, Android, and the web. Sign-in and payment providers depend on the platform, as described below.

We built BeAnywhere to do one thing with your photos — make fun images of you — and to hold onto as little as possible for as short a time as possible.

1. The short version

• We collect the selfies you upload, the images we generate for you, a per-device identifier, and your in-app purchase records.
• We use your photos to generate your images and for related security and provider safety checks. We do not use facial recognition to identify you, we do not build or store a “faceprint,” and we do not opt your photos into AI-model training.
• Uploaded photos in our Firebase storage are automatically deleted within 30 days after you most recently upload or reuse them. Your generated packs stay until you delete them. Service providers may temporarily process or retain data for safety, abuse prevention, security, or legal obligations as described below.
• You can delete your photos and generated packs, or delete your account, profile, contact information, and photos, from Settings. Group business statistics and restricted generation and transaction records without photos or contact information may remain for accounting, reconciliation, security, and anti-fraud purposes. Individual usage events are removed during account deletion.
• We do not sell your personal information.

2. Information we collect

Photos you provide. When you create a pack, you upload a small number of selfies. These are used to generate your images and are stored only as long as described in Section 5.

Images we generate. The AI photos we create for you (“packs”) are stored so you can view, save, and re-open them.

Device identifier. When you first open the App, we create an anonymous identifier stored securely on your device. This is how your packs are associated with you and restored when you reopen the App. It is not your name and does not by itself identify you in the real world.

Sign in with Apple (optional, on Apple devices). Signing in is optional and is offered only so your packs can follow you to a new Apple device. If you choose it, we receive the name and email you authorize Apple to share — which may be Apple’s private relay email if you choose to hide your address. We do not automatically email packs to that address. Pack email is a separate action: you type or confirm a delivery address and tap Send photos for each pack. You can use the App fully without ever signing in.

Sign in with Google (optional, on Android). Signing in is optional and lets you restore your packs on another Android device. If you choose it, we receive your Google account identifier and the name and email Google provides. We use the verified account identifier to connect your packs. Google sign-in does not grant us access to Gmail, Google Drive, or your Google Photos library. We do not automatically email packs to your Google address. Pack email is a separate action: you type or confirm a delivery address and tap Send photos for each pack. You can use the App fully without signing in with Google.

Purchase information. When you buy a pack, the purchase is processed through Apple’s in-app purchase on Apple devices or Google Play billing on Android. We receive purchase confirmations and transaction information to verify purchases, deliver packs, and handle purchase status and refunds, with help from RevenueCat. We do not receive or store your credit-card number — the applicable store or Stripe handles payment.

Operational records. We keep the purchase, refund, delivery, generation-cost, and security records needed to operate the service and reconcile the business. Selected women’s or men’s styling describes a product choice, not an inference about your gender.

Product analytics. We use Google Analytics for Firebase (GA4) and our own event service to understand visits, pack selection, uploads, checkout, photo saves, and return visits. We send an opaque analytics identifier, app-instance identifiers, app/device information, and fixed product/event parameters. Google may derive approximate location from network information. We do not send your photos, image URLs, email, Apple or Google sign-in credential, or device-ban identity to GA4. Advertising identifiers and advertising-personalization signals are disabled.

Crash diagnostics. We use Firebase Crashlytics to receive crash and device/app diagnostic information so we can identify and fix reliability problems. We report handled errors using a fixed context and error category instead of the original sensitive message, and do not attach your account ID, email, photos, or image URLs. Native crash reports include diagnostic installation identifiers and stack information.

Abuse prevention. To stop automated scripts from blocking uploads, our server converts the request network address into a one-way, server-secret daily bucket. We do not store the raw address in that bucket, and the bucket expires automatically after approximately two days.

Support communications. If you email us, we receive your message and the support identifier you send so we can find your packs and help you.

3. How we use your information

We use the information above to:

• generate your AI images and deliver, display, and restore your packs;
• process your purchases (via Apple, Google Play, or Stripe, depending on your platform) and provide any credits or re-shoots you’re owed;
• respond to your support requests;
• understand how the App is used, measure product performance, and improve reliability;
• keep the App secure, prevent abuse, and fix problems;
• comply with our legal obligations.

We do not sell or rent your personal information, and we do not opt your photos or generated images into training, fine-tuning, or improving any AI model.

4. Facial images and biometric information — important

BeAnywhere processes images that contain your face in order to generate stylized pictures of you. We want to be clear about what we do and do not do:

• We use your photos to generate artistic/stylized images at your request and to support security and provider safety checks for that service.
• We do not use facial recognition to identify you, and we do not match your face against any database.
• We do not create, capture, store, or use a face template, faceprint, facial-geometry scan, or other biometric identifier to identify you, and we do not enroll your face in any identification system.
• We do not sell or license your facial images to others.
• We do not opt your photos into AI-model training or improvement.

Written retention and destruction policy. We retain uploaded photos in our Firebase storage only as long as needed to provide the service and automatically delete them within 30 days after you most recently upload or reuse them. Generated packs are retained until you delete them (or delete all of your data). Our service providers may temporarily process or retain data for safety, abuse prevention, security, or legal obligations under their applicable terms and policies. If we ever stop offering the App, we will delete photos and generated images stored in our systems within a commercially reasonable time. This Section 4 is our publicly available written policy governing the retention and permanent destruction of facial information in our systems, as may be required by applicable biometric-privacy laws (including the Illinois Biometric Information Privacy Act).

Your consent. Before you upload photos, the App asks you to consent to this processing. You can withdraw consent at any time by deleting your data in the App or requesting deletion by email as described in Section 7, and discontinuing use.

5. How long we keep data

• Uploaded selfies in our Firebase storage: automatically deleted within 30 days after you most recently upload or reuse them. Temporary service-provider processing or retention may occur for safety, abuse prevention, security, or legal obligations under the provider’s applicable terms and policies.
• Generated packs: kept until you delete them in the App or delete all your data.
• Packs you ask us to email: Resend processes the message and attachments to deliver them. Deleting photos in the App removes our Firebase copies but cannot recall a delivered email from your inbox or your email provider; you can delete that email directly.
• Copies outside BeAnywhere: photos you save to your Camera Roll, export through the share sheet, screenshot, send to another person, or receive by email are controlled by you and the recipient services. In-app deletion cannot silently remove or recall those copies.
• Account, profile, contact information, device credential, uploaded photos, and generated images: deleted when you delete your account. Individual raw usage events and purchase-cohort links are removed during account deletion. Group business results remain. Restricted generation and transaction evidence is kept separately for accounting, reconciliation, security, and anti-fraud purposes.
• Mobile usage analytics: our raw event and session records are scheduled for expiration after 90 days; expiry cleanup can take additional processing time. GA4 follows the configured property retention and Google’s deletion processing. When you delete your account, we submit deletion requests for the known analytics user and app-instance identifiers and erase matching records in our configured BigQuery export, with a separate follow-up for late exports. This does not promise instantaneous deletion from a service provider’s backups.
• Crash diagnostics: Google states that Crashlytics keeps crash data and associated installation identifiers for 90 days before beginning removal from live and backup systems. These diagnostic records are not labelled with your BeAnywhere account ID.
• Business totals and limited financial records: pack-level group totals can remain after account deletion. Individual purchase-cohort links are finalized and removed at account deletion or 180 days after the first paid purchase, allowing processing time for the scheduled cleanup. Previously earned group totals remain; removing detail does not subtract past sales, costs, or repeat purchases. Restricted transaction correction receipts remain separate so later refunds and reversals can be reconciled without rebuilding a deleted usage profile. They contain no photos, contact details, or device-ban identity, and are not used to reconnect a deleted account to a new marketing or usage profile.
• One-way network abuse-limit buckets: approximately two days.
• When you choose Delete my photos & packs, we delete your uploaded photos and your generated packs from our systems. User-controlled Camera Roll, shared, screenshotted, and delivered-email copies remain until you delete them where they were saved.

6. Who we share data with (service providers)

We use a small number of trusted service providers that process data on our behalf, only to run the App:

• Apple — in-app purchases and, if you choose it, Sign in with Apple on Apple devices.
• Google — Google Play billing and, if you choose it, Sign in with Google on Android.
• RevenueCat — purchase verification, web purchase reporting, and purchase-status handling.
• Our AI image-generation provider (currently OpenAI) — to perform image generation and related safety and abuse checks. OpenAI states that API data is not used to train its models unless the API customer opts in; we do not opt in. OpenAI may temporarily retain or review content for abuse monitoring, safety, security, or legal obligations under its applicable policies.
• Google Firebase / Google Cloud — authentication, database, file storage, server functions, GA4 usage analytics, and Crashlytics diagnostics used to run and improve the App.
• Expo — app updates and, if you enable notifications, push-notification delivery.
• Stripe — hosted web checkout, payment processing, receipts, and fraud prevention. Stripe receives your checkout email and payment details. Cloudflare hosts our website, and Google reCAPTCHA Enterprise helps protect web requests against automated abuse.
• Resend — delivery of your pack by email when requested in the mobile app or automatically to the delivery email you provide at web checkout. Resend and your email provider may retain that sent or delivered message under their applicable policies; in-app deletion cannot recall it.

These providers are bound by their own terms and privacy commitments and are not permitted to use your data for their own unrelated purposes. We may also disclose information if required by law, to enforce our Terms, or to protect rights and safety. We do not sell your personal information.

7. Your rights and choices

• Delete your data anytime: Settings → Delete my photos & packs removes your uploaded photos and generated packs from BeAnywhere. It cannot remove copies saved to Photos, shared, screenshotted, or delivered by email.
• Delete your account anytime: Settings → Delete account removes your account, profile, contact information, device credential, uploaded photos, and generated images. Group business results and limited restricted generation and transaction evidence without photos or contact information may remain for accounting, reconciliation, security, and anti-fraud purposes. Individual raw usage events and purchase-cohort links are removed.
• Request deletion by email: You can also request deletion of your BeAnywhere account and associated data by emailing support@beanywhere.app, including if you no longer have the App. See account deletion instructions for instructions. The same deletion and retention details described in this Policy apply.
• California residents (CCPA/CPRA): You have the right to know what personal information we collect, to access and delete it, to correct it, and to limit the use of sensitive personal information (which can include facial images). We do not sell or share your personal information for cross-context behavioral advertising. To exercise these rights, use the in-app deletion option or email us. We will not discriminate against you for exercising your rights.
• Other states / regions: If your jurisdiction grants similar rights, you may contact us to exercise them.

Web studio details

The web studio creates a separate browser identity. It does not require Google sign-in or automatically combine purchases with your Apple or Android account. Your browser remembers galleries created there. You can also recover web galleries by entering the checkout email in My photos, including after clearing browser data or changing devices. Email-only recovery does not verify ownership of the email address: anyone who knows it can view and download matching web galleries and use their remaining included reshoots. Recovery does not grant access to original uploaded selfies, payment details, mobile purchases, or account deletion.

At web checkout, we collect the delivery email you enter and automatically send completed photos there through Resend. Stripe processes your payment, and RevenueCat receives purchase information for reporting and reconciliation. Your email is not a marketing subscription. Keep your delivered email and order reference for access to your attachments or support.

Web payment, checkout, delivery, and dispute records may include your email and are retained for fulfillment, support, accounting, and fraud prevention. This is an exception to the contact-free restricted transaction records described above. You can delete photos created in the current browser through My photos → Photo settings or request account/contact deletion at support@beanywhere.app; legally required payment records may remain with us and payment providers. Browser-local drafts can be removed in Photo settings or by clearing website data.

We separate web activity from Apple and Android activity in operational and conversion reporting. Our business records track successful purchases and generation outcomes without sending your photos or email as analytics event parameters.

Website usage measurement uses Google Analytics to understand referring sites and tagged campaign links, visited screens, selected photoshoots, browser and device type, language, approximate location, engagement time, page performance, checkout steps, and returning browsers. We use a random browser identifier and sessions that restart after 30 minutes of inactivity. These identifiers do not prove a person’s identity. We do not send your email, selfies, generated photos, form contents, or private gallery links to Google Analytics, and advertising personalization is disabled.

Website usage measurement is enabled by default. We respect a Global Privacy Control or Do Not Track signal in your browser. Essential authentication, payment, delivery, and abuse-prevention records remain necessary to operate your shoot.

When you submit a delivery email at checkout or to find galleries, we may retain a private, keyed representation of that email with the submitting browser and session. It helps us compare activity associated with the same submitted address; it is unverified and does not merge accounts or change gallery access. These optional connections, checkout-measurement links, and daily website Analytics exports are retained in our restricted Google Cloud project without a scheduled expiration, unless removed in response to a valid deletion request or a later retention policy. To request removal of website usage data, contact support; known browser identifiers are included in our analytics deletion process.

8. Children

BeAnywhere is intended for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has used the App, contact us and we will delete the information.

9. Security

We use reasonable technical and organizational measures (including encrypted transport and access controls through our service providers) to protect your information. No system is perfectly secure, but we limit what we collect and how long we keep it specifically to reduce risk.

10. Where data is processed

BeAnywhere is operated from the United States, and your information is processed in the United States. If you use the App from outside the U.S., you understand your information will be processed in the U.S.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the effective date and, where appropriate, notify you in the App. Continued use after changes means you accept the updated Policy.

12. Contact us

Questions or requests about your privacy? Email us at support@beanywhere.app.