Privacy
Beheld is designed to work on your iPhone. Your movement history is used to write your journal and is not uploaded to Beheld servers. On supported devices, Apple Intelligence features run on device. Purchases are processed by Apple through the App Store.
This policy covers both the Beheld iPhone app and the beheld.day website.
Health data
With your permission, Beheld reads a small set of movement data from Apple Health: step count, walking and running distance, and flights climbed — plus, for wheelchair users, push count and wheelchair distance. Beheld only reads this data; it never writes to Apple Health.
Beheld does not upload your movement history to Beheld, to an ad network, or to any third-party server. Whether your Apple Health data also syncs across your devices is governed by your Apple Health and iCloud settings, which you control — not by Beheld.
Writing
Where Apple Intelligence is available, your journal text is generated on your device using Apple's Foundation Models framework. When Personalization is enabled, your movement data is included in the prompt that runs locally — the prompt is not sent to Beheld.
Postcard images
Where Image Playground is available, milestone postcard images are generated on your device. Generated images are stored locally on your iPhone in your Beheld journal. When on-device generation is not available, Beheld uses bundled illustrations.
Storage and backups
Your journal — its entries and images — is stored on your iPhone. Beheld does not upload it. As with any app's data, your journal may be included in your encrypted device backups if you use iCloud Backup or back up to a computer. Those backups are handled by Apple and controlled by your settings, not by Beheld.
Purchases
The one-time Personalization purchase is processed by Apple through StoreKit and the App Store. Beheld checks your purchase status on your device using StoreKit; it does not run its own server and sends no purchase information anywhere. Beheld never receives your payment card details, billing address, or other payment information.
No account
Beheld does not require you to create an account or sign in. The app has no Beheld profile, no sync server, and never asks for your email address. If you choose to email support, those messages and your email address are used only to reply — the app itself collects neither.
No analytics
Beheld does not use any external analytics SDK, attribution SDK, or tracking pixel, and it does not measure feature usage on remote servers.
The only diagnostic information the developer may see is the aggregated, anonymized crash and performance data Apple itself provides through App Store Connect — and only if you have turned on sharing with app developers in your iOS settings. That data comes from Apple, is not linked to you, and is never collected by Beheld.
Your choices and data deletion
You decide what movement data Beheld may read. To change or revoke that access at any time, open Settings → Privacy & Security → Health → Beheld on your iPhone and turn off the categories you do not want shared. Without that data, Beheld simply stops writing new entries about your movement.
To delete everything Beheld has stored, delete the app from your iPhone. Your journal and any generated images live in a local store inside the app, so removing the app erases them from that device. There is no account to close and no server-side copy to request, because Beheld keeps neither.
Website and email
The beheld.day website is a set of static pages served by Cloudflare. Cloudflare keeps short-lived technical logs (such as IP address and browser type) to deliver the pages and protect against abuse. The site sets no advertising or analytics cookies.
Emails you send to [email protected] — whether for help or to hear about the launch — are received and used only to reply. You are not added to a mailing list without asking, and you may request deletion of your messages at any time by writing to the same address.
Contact
For questions about this policy, email [email protected].