Privacy Policy

Effective date: October 26, 2026 · Last updated: October 26, 2026

The short version

To write your affirmations, Being sends your chosen area and the words you type to our server and to our AI provider, kie.ai, which runs AI models from Google. We ask your permission before anything is sent.
Your answers can reveal things about your health or faith (for example, if you choose Anxiety, Pregnancy or Growing closer to God). We treat this as sensitive data, use it only to write and deliver your affirmations, and never sell it.
No account, no location, no microphone, no contacts, no photos. The voices you hear are AI voices; we never record your voice.
We don't track you, show ads, or sell or share your personal information.
App usage events and crash reports (Google Firebase), app settings (Firebase Remote Config), your subscription and purchases (RevenueCat) and notifications (Apple) also involve service providers. Usage analytics never include your area or anything you write. In the EEA, analytics and crash reports run only if you allow them.
Washington and other US state residents: see also our Consumer Health Data Privacy Policy.
Questions or requests: support@being.training.

1. Who we are

Being (the "App") is provided by Core App Labs Limited, Room 5003, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong ("we", "us"). We are the controller of the personal data described in this Policy.

Contact for all privacy matters: support@being.training.

2. What we collect and why

Your answers in onboarding and in the App: the area you want to work on (for example Money, Anxiety or Faith), the words you type about what you need (up to 120 characters), the moments you need support, the parts of the practice you choose (Affirmation, Future Self, Sleep Mode), the voice you pick, your schedule (daily time, reminder window and days), your notification choices, and the starter affirmations you mark with ♡. We use them to write, voice and deliver your affirmations.

Content we create for you: affirmation texts, Future Self messages, audio read in the voice you chose, and cover images.

Your practice: streaks, how many affirmations you created today, and your plan (free, PRO or PRO+).

Sensitive information. Your chosen area and the words you type can reveal information about your physical or mental health (including pregnancy, sleep, anxiety, grief) or your religious or spiritual beliefs. We process this information only with your explicit consent, only to write and deliver your affirmations, and we never use it for advertising, profiling or sale.

What you share. When you share an affirmation card, it goes to the iOS share sheet and you choose where it goes. What you post is then public under that service's rules.

The App does not use location services, the microphone, the camera, your photos, contacts or Apple Health.

3. How AI writes your affirmations

What is sent: your area, the words you typed, the affirmations you liked, the tone and the practice type, and a random request ID. For audio, the text to be read and the voice you chose. We do not send your name, email, Apple ID, advertising identifier, location, App ID, IP address or device details to our AI provider.

How a request travels: the App → our server (run by our hosting provider in the USA) → kie.ai (NEXUSAI SERVICES LLC, Denver, Colorado, USA) → AI models from Google LLC (USA) for text, images and voice. We choose the model for each request and may switch between models available through kie.ai. The developers whose models we may use, and the countries where they process data, are listed on our AI Providers page at https://being.training/ai-providers, which forms part of this Policy.

Daily affirmations. To write a new affirmation for you every day, our server keeps your answers and schedule while you use the App and sends a new request to the AI provider each day.

No human review. We do not read your answers or affirmations, unless you send them to us in a support request or the law requires it. The AI models may use automated safety systems that block some requests.

Starter affirmations shown while your first affirmation is being written are prepared in advance and are not generated from your answers.

4. Your permission

Before anything is sent to our AI provider, the App explains on its second onboarding screen that your answers, including anything about your health or faith, are sent to a third-party AI service to write your affirmations. You give permission by tapping Agree & Continue and ticking the box that confirms you agree to the use of your health and faith details.

If you don't give permission, the App can't write personal affirmations for you. Because every affirmation is written from your answers, you can't continue past this screen without it.

You can withdraw your permission at any time by tapping Settings → Delete my data. Withdrawing does not affect processing that happened before.

5. What leaves your device

Writing and delivering affirmations — our server

Why: to store your answers and schedule, request your affirmations from the AI provider, deliver them to you and send your notifications.
Data: your answers (section 2), generated affirmations, App ID, push token, IP address, App version and device model.
Legal basis: EEA, UK and Switzerland — your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR) and performance of our contract with you (Art. 6(1)(b)). Elsewhere — your consent given in the App and our contract with you.
Kept for: your answers and settings while you use the App, and deleted within 30 days after you tap Delete my data or after 12 months without opening the App. Generated affirmations are delivered to your device; server copies are kept for up to 48 hours. Server logs (IP address, request time, request ID, no answers or affirmations) are kept for 30 days.

Writing affirmations — kie.ai (NEXUSAI SERVICES LLC, USA)

Why: to run the AI models and return your affirmation, cover and audio.
Data: the request content described in section 3. kie.ai does not receive your App ID, IP address or device details.
Legal basis: as for our server.
Kept for: according to kie.ai's published retention rules, uploaded files are deleted 24 hours after upload, generated files after 14 days, and task logs (text and metadata, which can include your words) after 2 months. kie.ai's own terms apply to this processing; they allow kie.ai to use submitted content to operate and improve its services.

Writing affirmations — the AI model developer (Google LLC, USA)

Why: to generate the text, cover image and audio.
Data: the request content passed on by kie.ai.
Legal basis: as for our server.
Kept for: only as long as needed to generate the result, and for any abuse-monitoring period set in the developer's terms with kie.ai.

Usage analytics — Google Firebase Analytics

Why: to understand how the App is used and improve it.
Data: usage events (screens viewed, buttons tapped, features used, purchases started), app instance ID, device model, iOS and App version, language, approximate country or region (inferred by Google from your IP address), session and first-open times. Never your area, the words you type, your affirmations or anything else about your health or faith.
Legal basis: EEA — your consent; UK — legitimate interests (you can turn it off).
Kept for: 14 months.

Crash reports — Google Firebase Crashlytics

Why: to find and fix crashes.
Data: stack trace, device model, iOS and App version, crash ID, Firebase installation ID.
Legal basis: EEA — your consent; UK — legitimate interests (you can turn it off).
Kept for: 90 days.

App settings and service notices — Google Firebase Remote Config

Why: to deliver App settings, offers shown in the App and important service notices without an App update.
Data: Firebase installation ID, App version, device language and country.
Legal basis: performance of our contract with you.
Kept for: not stored by us; Google processes it only to deliver the settings.

Subscriptions and purchases — RevenueCat

Why: to manage your subscription and one-time purchases, check which offers you can get, and keep a record of the terms you agreed to.
Data: a random user ID generated by the App and stored in your Keychain; purchase history and subscription status received from Apple (product, dates, renewal status, offers used); country of your App Store account; the version of the terms shown to you when you bought.
Legal basis: performance of our contract; compliance with legal obligations.
Kept for: while you use the App, then as required by law (up to 7 years for transaction records; at least 3 years for subscription consent records).

Notifications — Apple Push Notification service

Why: to deliver your daily affirmation, tell you when a new affirmation is ready, and send plan updates you turned on; and, only if you allow them separately, offers. Reminders through the day and streak and bedtime reminders are scheduled by the App on your device and don't pass through our server.
Data: device push token, App ID, the text of the notification and your daily affirmation time.
Legal basis: your consent.
Kept for: until you turn notifications off or delete the App.

Support requests — our email service provider

Why: to answer your questions.
Data: your email address, your message and anything you choose to attach.
Legal basis: legitimate interests; performance of our contract.
Kept for: 24 months after the conversation ends.

We never see your name or payment card details. Apple processes payments under its own terms.

We have configured Firebase not to collect the advertising identifier (IDFA), with Google Signals and ad personalization turned off, and without sharing data with Google for Google's own purposes.

Outside the EEA and UK, we rely on our legitimate interests for usage analytics and crash reports, and you can turn them off at any time.

6. How long we keep your data

On your device: your affirmations, audio, covers, streaks and settings stay until you delete the App or tap Delete my data.
On our server: your answers and settings while you use the App, deleted within 30 days after Delete my data or after 12 months without opening the App; generated affirmations up to 48 hours; server logs 30 days.
At kie.ai: uploaded files 24 hours, generated files 14 days, task logs 2 months.

7. What we don't do

We don't track you. The App does not use the advertising identifier, does not show ads and does not ask for App Tracking Transparency permission.
We don't sell personal information, and we don't share it for cross-context behavioral advertising, targeted advertising or profiling.
We don't use information about your health or faith for anything other than writing and delivering your affirmations, and we never include it in analytics.
We don't record your voice and we don't create biometric identifiers.
We don't use your answers or affirmations to train AI models.
We don't read your answers or affirmations (see section 3).
We don't collect precise or approximate location from your device, and we don't use geofencing.
We don't use your data for automated decisions with legal or similarly significant effects.

8. Permissions

Each permission is optional. You can change permissions at any time in iOS Settings.

Notifications — your daily affirmation, reminders, streak and bedtime reminders and plan updates. Offers are asked for separately. Without notifications, your affirmations stay in the App but nothing arrives on its own.

Widgets show your affirmations on your Home and Lock Screen without any extra permission. Anyone who can see your screen can see them.

9. Your consent choices

AI processing, including health and faith details (everyone): asked on the second onboarding screen. Withdraw by tapping Settings → Delete my data.

Offers (everyone): off unless you allow them. Turn off in the App's notification settings or in iOS Settings → Notifications → Being.

Usage analytics and crash reports: in the EEA, we ask when you first open the App; they stay off until you allow them. Everyone can turn them on or off at any time in Settings → Usage analytics. Withdrawing consent does not affect processing that happened before.

10. Service providers and international transfers

We share data only with the providers listed in section 5. They process it to provide their services to us. Where we have data processing terms with a provider, it acts as our processor on our instructions.

Our hosting provider, servers in the USA (runs our server)
NEXUSAI SERVICES LLC (kie.ai), USA
Google LLC, USA (AI models; Firebase Analytics, Crashlytics, Remote Config)
Other AI model developers available through kie.ai, listed on our AI Providers page
RevenueCat, Inc., USA
Apple Inc., USA (Apple Push Notification service)
Our email service provider (support emails only)

These providers may process data in the United States and other countries. We are based in Hong Kong. For transfers from the EEA, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. For transfers of your answers to kie.ai and the AI model developers, which are not covered by these mechanisms, we rely on your explicit consent (Art. 49(1)(a) GDPR and UK GDPR), which you give in onboarding after we tell you that the USA may not protect data to the same standard as your country. For transfers from the UK, we rely on the UK Extension to the Data Privacy Framework or the UK International Data Transfer Addendum. For Switzerland, we rely on the Swiss-US Data Privacy Framework or the Standard Contractual Clauses as adapted for Swiss law.

We may also disclose data if required by law, to protect the safety of users or others, or in a merger or acquisition. In that last case we will tell you first.

11. Your rights

The App has no accounts, so we find your data by your App ID, shown in the App's Settings. Please include it when you write to us.

Everyone can ask us to access, correct or delete their data by emailing support@being.training, or delete it directly by tapping Settings → Delete my data. We reply within 30 days, or sooner where the law requires.

European Economic Area, Switzerland and United Kingdom: you also have the rights to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. You can complain to the data protection authority where you live or work. In the UK, this is the Information Commissioner's Office (ico.org.uk).

United States (California and other states with comprehensive privacy laws): you have the right to know what we collect, to access, correct and delete it, and to opt out of sale, sharing, targeted advertising and profiling. We don't sell or share personal information and don't do targeted advertising or profiling, so there is nothing to opt out of. We process sensitive data (health and religious or spiritual beliefs) only with your consent and only to provide the affirmations you ask for, so California's right to limit its use does not need a separate link. You can appeal a refusal by replying to our answer; if we deny the appeal, you can contact your state Attorney General. You can use an authorized agent. We will never treat you differently for using your rights.

Washington, Nevada and Connecticut consumer health data: see our Consumer Health Data Privacy Policy.

Categories collected in the last 12 months (California): identifiers (IP address, app instance ID, Firebase installation ID, App user ID, push token); commercial information (purchase history and subscription status); internet or other electronic network activity (App usage events, crash reports); approximate geolocation (country or region inferred from IP address); sensitive personal information (health and religious or spiritual beliefs revealed by your answers); preferences you give us (your area, words, voice and schedule). Sources: you and your device. Purposes and retention periods are listed in sections 5 and 6.

Canada: you can access and correct your data and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d'accès à l'information.

Australia and New Zealand: you can access and correct your data. If you are not satisfied with our answer, you can complain to the OAIC (Australia) or the Office of the Privacy Commissioner (New Zealand).

Hong Kong: you have the right to access and correct your data under the Personal Data (Privacy) Ordinance.

12. Deleting your data

Settings → Delete my data deletes your answers, settings and affirmations from your device and our server, and stops new requests to our AI provider. We delete server data within 30 days and ask kie.ai to delete what it still holds.
Deleting the App removes everything stored in the App on your device. Your answers on our server are deleted after 12 months without opening the App, or sooner if you ask.
Data held by Firebase and RevenueCat: tap Contact Support in the App or email support@being.training with your App ID. We will delete it within 30 days, except records we must keep by law.
Deleting data does not cancel a subscription. Cancel in iOS Settings → [your name] → Subscriptions → Being → Cancel Subscription.

13. Age

The App is for adults aged 18 and over. We don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has used the App, email us and we will delete the data. Where the law requires, we use age information provided by Apple only to comply with that law.

14. Security

Data is encrypted in transit. We limit access to our server and provider dashboards to people who need it and use two-factor authentication. No method is 100% secure. If a breach affects you, we will notify you and regulators as the law requires.

15. Changes

If we change this Policy materially, for example to add a new AI provider or a new kind of data, we will tell you in the App before the change applies. If we start using an AI model developer based in a country not listed on our AI Providers page, we will update this Policy and tell you in the App before your answers are sent to it. The date at the top shows the latest version.

16. Contact

Company: Core App Labs Limited

Address: Room 5003, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong

Email: support@being.training