Privacy Policy

Last updated: 2 November 2026

Bella is a personal memory assistant: you tell it things to remember, and it reminds you — out loud, at the right time or place. This page says plainly what data that involves, where it goes, and what never happens to it.

What we store

• Your account — email address (or Google sign-in identity) and settings such as what "morning" and "evening" mean to you.
• Your memories — the reminders you save: the sentence you said, the title, the time, and the short spoken line Bella reads to you.
• Places you pin — for a place reminder, the point and distance you chose on the map (or the shops Bella found for it), saved with that reminder so it comes back if you change phones.
• Your questions — what you ask Bella in chat, and her answers, so your conversation history works.
• Which reminders come back — when you save a reminder, Bella notes whether it is the kind that repeats (like a monthly bill) and how often, so she can offer next time's reminder if you forget to set one. That note is saved with the reminder.

What stays on your phone only

• Where you are, minute to minute. Place reminders are watched by your phone's own operating system. To work while Bella is closed, this happens in the background, and only if you allow it (“Allow all the time” on Android, “Always” on iPhone). You can take that back in your phone's settings at any time. Bella is not tracking you, and your continuous location never reaches us.
• Your calendars. If you connect them, Bella reads only the calendars you tick, directly on your phone, and never changes them. Your events are not uploaded to us or stored by us.
• Spoken audio for reminders — kept on your device once it has been made (see Google Cloud Text-to-Speech below).
• Snoozes, and a full offline copy of your reminders — so Bella works with no signal.
• Suggestions — when a repeating reminder is due again, and what you answered (“Not this time”, “Stop suggesting this”), are worked out and kept on your phone. Bella never saves a suggested reminder unless you confirm it.

The one time location does leave your phone

When you ask Bella to find shops that sell something — "buy a cake whenever I'm free" — it has to ask a map where those shops are. At that moment, and only then, your phone sends an approximate location to our server, which asks Google Places. The coordinates are deliberately rounded to about a kilometre before they are sent, because a shop search across 30 km does not need to know which street you are on.

That approximate point is never written to our database. It is held in the server's memory for up to a day, together with what was searched for, so that the next person asking the same question about the same neighbourhood does not cost another lookup. It is not linked to your account, and it disappears when the server restarts.

Everything after that is on your phone: which shops became reminders, when you pass them, and whether you were free at the time.

How we measure the app

The Android app uses Google's Firebase tools — Google Analytics, Crashlytics and Performance Monitoring — so we can see how Bella is used and fix problems. They receive:

• App activity — which screens you open, and actions such as saving, completing or snoozing a reminder, or asking a question, including whether a reminder was spoken, typed or made in chat. Never the words you said or typed, reminder titles, names or places.
• Crash and performance data — crash reports and error details, how long the app takes to start, and how long requests to our server take.
• Device information — phone model, Android version, app version, language, and an approximate country and city that Google works out from your connection.
• Identifiers — an app-instance ID created by Firebase, and your Bella account's random ID, so that a crash can be matched to your account if you report a problem. Not your name or email address.

We do not collect your phone's Advertising ID, this data is not used for advertising, and Google signals (Google's demographics and interests) is turned off. Google processes this data for us as a service provider and keeps it for up to 14 months; see Google's privacy policy.

Google Calendar data

If you choose to connect Google Calendar, Bella asks Google for read-only access to your calendars (the calendar.readonly permission). On iPhone, Bella connects to Google Calendar directly; on Android, it reads the calendars already on your phone. With that access, Bella:

• Reads the list of your calendars, so you can pick which ones Bella follows, and the upcoming events on the calendars you pick (title, start and end time, location) for about the next month.
• Uses them for one thing only: to remind you before your events, by showing them in Bella's calendar view and scheduling spoken reminders on your phone.
• Never creates, changes or deletes an event, and never reads a calendar you have not picked.
• Keeps them on your phone. The access token Google gives Bella is kept in your phone's secure storage. Your events are not uploaded to our database.
• Shares one thing only: to speak an event's reminder, the short sentence Bella will say (which includes the event's title) passes through our server to Google Cloud Text-to-Speech to be turned into audio. It is not stored by us.
• Is never sold, never used for advertising, and never used by us to develop or train AI models.

You can disconnect at any time from Bella's Calendars screen, or remove Bella's access in your Google Account at myaccount.google.com/permissions. Signing out of Bella deletes everything Bella kept on your phone.

Bella's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect your data

• Encrypted in transit. Every connection between the app, our server and the services we use goes over HTTPS (TLS).
• Encrypted at rest. Our database (Supabase) encrypts everything it stores (AES-256).
• Each account sees only its own data. The database enforces row-level security, so one account can never read another account's reminders, places or messages.
• Google Calendar access stays on your phone. The access token Google gives Bella is kept in your phone's secure storage (the iOS Keychain), and your calendar events are never stored on our servers.
• Limited access on our side. Only Bella's developers can reach the servers, each with their own account. Passwords and service keys are kept in our hosting provider's secret storage, never inside the app.
• Only what is needed. We keep the data Bella needs to work, and nothing is sold or used for advertising.
• Deletion. Deleting your account in Settings removes your data from our database. A reminder you delete is kept in Trash for 30 days, then removed for good.

Third parties we rely on

• Supabase hosts the database and sign-in. Your data is protected by row-level security: each account can only ever read its own rows.
• Google Gemini turns your sentences into structured reminders, notes whether a reminder is the kind that repeats, and transcribes voice notes. Recordings are sent for transcription and are not used by us for anything else.
• Google Cloud Text-to-Speech gives Bella her voice. The short sentence she will say — for a calendar event, its title and how soon it starts — passes through our server to be turned into audio. It is not stored by us; only the finished audio is kept, on your phone.
• Google Places answers "which shops sell this, near here", using the approximate location described above. It is asked by our server, never by your phone directly.
• OpenStreetMap answers the same question when Google is unavailable or not configured. It receives the same approximate area and nothing that identifies you.
• Google Firebase (Google Analytics, Crashlytics, Performance Monitoring) measures how the app is used and how it performs — see “How we measure the app” above.

What never happens

• Your data is never sold and never shared with advertisers.
• There is no ad tracking: we never collect the Advertising ID, and our analytics never see what you write or say.
• Nobody at Bella reads your memories except if you ask us to while debugging a problem for you.

Your controls

• Export everything — Settings → Your data gives you a complete file of everything we hold.
• Delete everything — deleting your account removes your account and every memory, reminder and chat, permanently.
• Deleted reminders sit in Trash for 30 days, then are gone for good.

Step-by-step instructions, and what to do if you cannot open the app, are on the account deletion page.

Backups

Encrypted backups of the database are kept for 30 days so a technical failure cannot destroy your reminders. They are protected by the same access rules and expire automatically.

Contact

Questions or requests: husnainkhalid626@gmail.com