Privacy Policy

1. Who is responsible

This policy covers the Bleep app and bleep.talk. The operator named below is responsible for deciding how personal data is used. “We”, “us”, and “Bleep” refer to that operator.

2. Information we process

• Account and profile. Your account identifier, handle, profile name, avatar, public profile link, passkey public credentials, and account status. Your passkey provider keeps the private authentication key; we do not receive your Face ID or Touch ID data.
• Bleeps. Message text, photos and voice notes, together with sender, recipient, delivery information and related timestamps. Profile pictures and generated artwork are processed separately.
• Connected Agents. If you link an Agent, it can send Bleeps to you. If you also approve receiving, it can open Bleeps you send to it. An Agent can process or save the content it receives.
• Connections and calls. Information about who connects with whom, readiness, call and conversation identifiers, timing, duration, delivery outcomes, and network quality.
• Device and security information. Registered-device identifiers, operating-system and app versions, push tokens, App Attest evidence, session records, IP addresses, network endpoints, and security events.
• Usage and diagnostics. Feature-use events, connection and performance measurements, errors, diagnostic traces, and feedback. These records can be linked to your account or device. A problem report can also contain the text you choose to send.
• Optional phone discovery. Your own phone number and verification information when you choose to make yourself discoverable. When you choose Find friends, Bleep can process phone numbers from your contacts on its servers to find people who have chosen to be found. The connection is encrypted. Contact names and other details stay on your device.
• Blocking and abuse reports. We store blocked-account relationships, report reasons, the description you submit, and review outcomes. If you choose to include your latest incoming Bleep, its delivery details and any available text are shared for support review. Photos, voice notes and live audio are not included. Reports are available to the operator for review and are not shown to the reported person.
• Website and support. Your email and your choice of iPhone and iPad early access or Android availability notifications when you join the waitlist, correspondence you send us, and technical request information such as IP address, browser information, request time, and page requested.

3. Live audio and stored content

Live voice is encrypted on the sending device and decrypted on the receiving device. When a relay is needed, it forwards encrypted audio. Bleep does not keep recordings of your live conversations.

New Bleep messages, photos and voice notes are end-to-end encrypted before upload. Only you and the recipient can open them. The iOS app checks photos on your device before sending them and before showing received photos.

Profile artwork, contact discovery, delivery information and diagnostics are processed separately. You can choose to share available message text with support when reporting abuse. A recipient can keep or record information you share using their own device.

Read how encryption works.

4. Why we use information

We use information to create and secure accounts, authenticate devices, find participating friends, deliver Bleeps and notifications, connect live conversations, display profiles, and provide support. We also use operational and usage information to diagnose failures, measure reliability and feature use, prevent abuse, and improve Bleep.

We use waitlist emails to manage early access and contact people about their request. The waitlist service also sends the operator a signup notification.

Where a legal basis is required, we rely on performance of our agreement for the service you request; consent for processing that requires it, such as optional permissions and communications; legitimate interests for proportionate security, reliability, and service improvement; and legal obligations when applicable. You can withdraw consent without affecting processing that was lawful before withdrawal. A device permission does not authorize unrelated uses of your data.

5. Who receives information

Other users receive the information you share with them. Your handle, profile link, name, and profile artwork can be visible to people who find your profile. Public artwork can be delivered through a content delivery network. Private Bleep attachments use authenticated access.

We use service providers for specific parts of Bleep:

• Google Cloud and Firebase: website and backend hosting, supporting infrastructure, and operational logs.
• Cloudflare: image object storage, public artwork delivery, and network connectivity services.
• Bird: phone-number verification and waitlist/contact messaging. Bird receives your own phone number for verification or your email for the waitlist.
• Apple: push delivery, passkey platform functions, and installation-integrity verification.
• OpenAI: optional avatar generation and prompt processing. When you request a generated avatar, the selected or custom motifs and derived prompts are sent to this provider. Do not put confidential information or someone else’s personal information in a prompt.
• Google and Cloudflare STUN services: network requests used to establish direct connections. These services receive the source IP address and port of those requests.

Image-processing services also receive uploaded image data for transformations and safety checks. Authorized operators can access stored information when needed for support, security, and operation. Direct voice connections can expose your network address to the other participant’s device.

We may disclose information when required by law, to protect people or the service, or in a business transfer subject to applicable data-protection requirements. Bleep does not sell personal data or use it for cross-app targeted advertising.

6. Permissions and your choices

You control microphone, camera, photo-saving, contacts, local-network, and notification permissions in your device settings. Microphone access supports live speech. Camera access supports QR scanning and photos. The photo picker lets you choose images without giving Bleep general access to your photo library.

Phone discovery is optional. The app asks before sending phone numbers from your contacts. You can skip this step. You can remove your number through the app’s Find friends settings. Removing the number does not delete your Bleep account. Revoking Contacts access stops future address-book access but does not automatically remove information already processed or an existing relationship.

The website does not use advertising cookies or a third-party marketing analytics SDK. The app stores local settings, session credentials, caches, and a bounded queue of operational events. Uninstalling the app does not itself delete server-side data.

7. How long information remains

Account, profile, relationship, and stored-content records remain while needed to provide the service, resolve a request, maintain security, or meet a legal obligation. Different records have different lifetimes; there is no single expiry period for all Bleep data.

Product-event records are configured to expire after 13 months. Detailed media-observation records use a 30-day cleanup cutoff. Expiry makes records eligible for backend cleanup; it does not mean every copy disappears at that exact instant. Some public image revisions remain while referenced by the service. Unreferenced revisions have a seven-day cleanup grace period.

Other logs, support correspondence, provider records, and backups require separate retention handling. Copies held by recipients cannot be recalled by Bleep. A deletion response should identify any data that must be retained and explain the reason.

Safety records

Blocks remain until you unblock the person or an affected account is deleted. Abuse reports can remain after account deletion where needed to investigate abuse and protect users. The operator reviews open reports and removes resolved reports through the retention process after 90 days. Account suspension and minimal action records can remain while needed to enforce safety restrictions.

8. Your rights and deletion requests

Depending on where you live, you may have rights to access, correct, receive a copy of, delete, or restrict use of your personal data; object to processing based on legitimate interests; and withdraw consent. You may also complain to your local data-protection authority, including the Swiss Federal Data Protection and Information Commissioner if applicable.

Contact the operator listed above to make a privacy request or ask to leave the waitlist. Identify your Bleep handle or waitlist email and the request. Do not send a passkey, verification code, session token, or identity document unless a secure and necessary verification process has been agreed.

We may need to verify that the request concerns your account before disclosing or deleting data. In app versions that include this feature, open Profile, choose Delete Account, and confirm with your passkey. The account becomes inaccessible when deletion is accepted. Profile data, Bleeps, relationships, credentials, and associated live-service records are removed. Image storage and public-cache cleanup may continue afterward; the app shows a pending state until that cleanup finishes. Signing out alone does not erase the account. You can also request account deletion without the app by emailing hello@bleep.talk with the subject “Bleep account deletion” and your Bleep handle. We will verify account ownership before acting. Do not send your passkey or verification codes. Minimal receipt, security, withdrawal, and retired-identity records may remain to prevent replay, complete removal, and stop old interactions from attaching to a new account. Backups and service-provider records follow the retention described above. We cannot remove copies another person saved outside Bleep.

9. International processing and security

Bleep uses infrastructure and providers in more than one country. Information may be processed outside your country, including in Europe and the United States. Media relays currently include Switzerland and Mexico. A storage-region preference is not a guarantee that all processing stays in that region.

Where applicable law requires safeguards for an international transfer, the operator must establish an appropriate transfer mechanism, such as an adequacy decision or approved contractual safeguards. You can ask the operator about the safeguards applicable to your information.

We use access controls, authenticated requests, encrypted connections, and the end-to-end encryption described above. No service can guarantee complete security. Keep your devices and passkey provider secure.

10. Children

Bleep is intended for people aged 16 and older. If the operator learns that a child below the applicable minimum age has provided personal data, the operator will address the account and data under applicable law. A parent or guardian can contact the operator with a concern.

11. Changes to this policy

We will publish updates on this page and change the date. Material changes will receive additional notice where required. A policy update does not by itself grant consent to a new use that requires consent.