Last updated: August 3, 2026
This Privacy Policy describes how Bes ("Bes," "we," "us," or "our") collects, uses, and protects information when you use the Bes mobile application and related services (the "Service").
Bes is a personal safety application. Please read the separate Terms of Service, especially the safety disclaimer, before relying on the Service in an emergency.
encrypted; a separate one-way hash is kept only to check for duplicate accounts, not to recover the address.
cryptographic hash (bcrypt) and cannot recover your original password.
Messaging (see below). Stored encrypted, with a separate one-way hash used only to match you against a trusted contact's saved number.
one-way hash of each phone number is also stored so the Service can privately check whether that contact also uses Bes, without either of you learning anything else about each other's account.
stored encrypted.
Monitoring in Emergency Settings, Bes continuously accesses your GPS location even when the app is closed or not in use, so an accurate location can be shared with your trusted contacts the moment an emergency is triggered. This is used only to provide that safety feature, is never used for advertising, and can be turned off at any time in Emergency Settings.
our storage and retrievable only via short-lived, single-purpose links generated for your account.
contacts, and whether that attempt succeeded, partially succeeded, or failed.
before we ever see them, using a key pair generated and stored on your device. We cannot read the contents of your covert messages, and we do not have access to the private key needed to decrypt them. We store only the resulting encrypted image file and metadata about who it was sent to and when.
can send you encrypted messages.
request timestamps, IP address as part of standard server logs).
We use the information above to:
voice call, when you activate an emergency.
past emergency events.
sessions and revoking them).
We do not sell your information, and we do not use it for advertising.
locations) are encrypted at rest using AES-256-GCM.
text.
XSalsa20-Poly1305 authenticated encryption) — encryption and decryption happen only on your device and the recipient's device.
stolen or reused refresh token causes all of your active sessions to be revoked.
(HTTPS/TLS).
No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.
enabled, your trusted contacts' phone numbers and a notification message (including, if available, your location) are sent through Twilio's SMS and voice-calling infrastructure to reach them. Twilio's handling of that data is governed by Twilio's own privacy policy.
Railway (or successor infrastructure), which processes data on our behalf under its own terms.
We do not share your information with any other third party except as required by law or with your explicit direction.
We retain your account and emergency-event data for as long as your account is active. You may request deletion of your account and associated data at any time (see Section 7). [ADD: any specific retention period you intend to enforce, e.g. "recordings older than X days are automatically deleted."]
contacts, and phone number directly in the app.
data (trusted contacts, emergency history, recordings, and covert messages) at any time from Profile → Delete Account, after confirming your password. This immediately and permanently removes your data; it cannot be undone or recovered by us. You can also reach us at support@bes-app.com with deletion questions.
Messaging key pair from your profile at any time; this does not delete messages already sent or received.
If you are located in a jurisdiction with statutory privacy rights (e.g., GDPR, CCPA), you may have additional rights; contact us at the address above to exercise them. [Attorney should confirm which regimes actually apply based on where you operate and where your users are located.]
Bes is not directed to children under 13, and we do not knowingly collect information from children under 13. [Attorney should confirm the correct minimum age given the app's target audience and any state-specific rules for safety/support services used by minors.]
Please review the Terms of Service for important limitations on the emergency-notification, recording, and Covert Messaging features. In particular: Bes is not a substitute for calling 911 or your local emergency number, and delivery of alerts to your trusted contacts is not guaranteed.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, through an in-app notice.
Questions about this Privacy Policy or your data can be sent to: support@bes-app.com