Privacy Policy

Effective date: May 31, 2026

Thank you for using Bekadoo at https://www.bekadoo.com, operated by the operator of Bekadoo (“we”, “us”).

This Privacy Policy (“Policy”) explains how we collect, use, disclose, and otherwise process “Personal Data” — information that identifies you or can reasonably be linked to you — when you use Bekadoo and the Services (as defined in our Terms of Use (“Terms”)).

By accessing or using Bekadoo, creating an Account, or otherwise using signed-in features, you acknowledge this Policy. If you do not agree, do not use Bekadoo or the Services.

Updates to This Policy

We may update this Policy by posting a revised version on Bekadoo with an updated effective date. Continued use after the effective date constitutes acceptance of the revised Policy, unless applicable law requires otherwise.

Legal Basis for Processing

Where Data Protection Laws require a legal basis (for example, under the GDPR or UK GDPR), we rely on one or more of the following, depending on the activity:

(a) providing the Services and performing our agreement with you;
(b) our legitimate interests that are not overridden by your rights, such as securing the Services and improving functionality;
(c) your consent, where required; and
(d) compliance with legal obligations.

1. Definitions

1.1 “Account” has the meaning given in the Terms.

1.2 “Data Protection Laws” means privacy and data protection laws that apply to our processing of Personal Data in your jurisdiction.

1.3 “Personal Data” means information about an identifiable individual.

1.4 “Process”, “Processing”, and “Processed” mean any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.

1.5 “Services” has the meaning given in the Terms.

1.6 Capitalized terms not defined here have the meanings given in the Terms.

2. What Personal Data We Collect

We collect Personal Data only as needed to operate the Services currently available on Bekadoo.

2.1 Personal Data you provide or generate while signed in

When you create an Account or use signed-in features, we may Process:

(a) Account and authentication information, such as your email address and authentication data handled by Supabase Auth. If you use Google sign-in, we may also receive profile information made available by Google, such as your name and profile photo.
(b) Focus session records, stored when you complete a focus session while signed in. These records may include task text, location, scene, duration, timezone, timestamps, and related session metadata.
(c) Custom audio links, if you add YouTube or Spotify links while signed in. We store the URL you submit, the provider type, and the title shown in the app.
(d) Focus generation inputs, such as location, scene, and task text you submit when generating a focus environment. If you include personal information in these fields, we Process it to provide the Service.

2.2 Public focus page data

When a signed-in user generates a focus environment, Bekadoo stores the resulting image and related metadata (such as location, scene, and task text) so it can be displayed on a public focus page. In our current implementation, these focus page records are not linked to your Account.

2.3 Personal Data collected automatically

When you use Bekadoo, we and our service providers may automatically collect:

(a) Device and network information, such as browser type, operating system, IP address, language settings, and referring URLs.
(b) Usage information, such as pages viewed, features used, and interactions with timers, audio controls, and focus pages.
(c) Log and diagnostic information, such as error and performance data generated by the site and its infrastructure.
(d) Analytics information, but only if Google Analytics is enabled on the site.

2.4 Personal Data from other sources

If you sign in with Google, we receive the Personal Data that Google makes available to Bekadoo according to your Google account settings and Google’s policies.

3. How We Use Personal Data

We Process Personal Data to:

(a) provide and operate the Services, including authentication, focus timers, audio features, focus image generation, and account-related features;
(b) store focus session records and custom audio links for signed-in users;
(c) store and display public focus pages generated through the Service;
(d) maintain, secure, troubleshoot, and improve Bekadoo;
(e) understand site usage when analytics is enabled;
(f) respond to requests you send us through the contact details published on Bekadoo; and
(g) comply with law and enforce our Terms.

We do not use Personal Data for paid advertising profiling based on the current implementation of Bekadoo.

We may disclose Personal Data to:

(a) Service providers that help us operate Bekadoo, including:
- Supabase for authentication, database storage, and image storage;
- Google for optional Google sign-in and optional Google Analytics;
- Third-party image generation infrastructure used to create focus images from your inputs; and
- Hosting and infrastructure providers that serve the Bekadoo website and process server logs.
(b) The public, through public focus pages that display generated focus content and related metadata.
(c) Third parties embedded by you, such as YouTube or Spotify, when you add or play custom audio links.
(d) Authorities or other parties, where required by law or to protect rights, safety, and security.
(e) A successor entity, if the Service is transferred as part of a merger, acquisition, or similar transaction, subject to applicable law.

We do not sell Personal Data.

5. Third-Party Links, Embeds, and Services

Bekadoo may link to third-party websites or embed third-party content, including YouTube and Spotify players when you choose to use those features. Those third parties Process information under their own terms and privacy policies.

When you use Google sign-in, Google Processes Personal Data under Google’s policies. Review those policies before connecting your account.

6. Cookies and Similar Technologies

Bekadoo uses cookies and similar technologies as part of:

Supabase Auth session management, to keep signed-in users authenticated; and
Google Analytics, if enabled through site configuration.

You can control cookies through your browser settings. Disabling cookies may affect sign-in and other features.

7. Your Rights and Choices

Depending on your location and applicable Data Protection Laws, you may have rights to access, correct, delete, restrict, or object to certain Processing of your Personal Data, or to receive a portable copy of it.

To exercise these rights, contact us using the contact details on Bekadoo. We may need to verify your identity before responding.

You can sign out of your Account through the site at any time. You may request deletion of Account-related data stored by us by contacting us through the contact details on Bekadoo.

8. Security

We use reasonable technical and organizational measures designed to protect Personal Data. No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your Account credentials.

9. Data Retention

We retain Personal Data for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When Personal Data is no longer needed, we delete it or anonymize it where feasible, subject to applicable law.

Public focus page records may remain available until removed by us or as otherwise required to operate the Service.

10. International Transfers

Our service providers may Process Personal Data in countries other than your own. Where required by Data Protection Laws, we use appropriate safeguards for cross-border transfers.

11. Children’s Privacy

Bekadoo is not directed to children under 13, or under the minimum age required by applicable local law. We do not knowingly collect Personal Data from children without appropriate authorization. If you believe a child has provided Personal Data to us, contact us using the contact details on Bekadoo.

12. Changes to This Policy

We may revise this Policy from time to time. The effective date at the top of this page shows when it was last updated.

13. Contact

Use the contact details shown at the bottom of this page.

Appendix — Additional Disclosures by Region

The sections below apply only if you are located in the listed region and only to the extent required by applicable law.

California residents

If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct Personal Data, and the right not to be discriminated against for exercising those rights. We do not sell Personal Data. To submit a request, contact us using the contact details on Bekadoo.

EEA and UK residents

If you are in the EEA or UK, you may also have the right to restrict Processing, object to Processing based on legitimate interests, receive Personal Data in portable form, and lodge a complaint with your local supervisory authority. Where Personal Data is transferred outside the EEA or UK, we use appropriate safeguards where required by law.