Privacy policy

Last updated October 31, 2026

Draft: this page is still being completed and reviewed.

Beavr is a shared organizer for a household: calendar, groceries, kids' chores and pet care. This policy says what we collect, why, who helps us run the service, how long we keep things and what you can do about it. We don't show ads, we don't sell or share your data for advertising, and we don't track you across other apps or websites.

Who we are

Beavr is run by Beavr LLC, an Arizona limited liability company, 4539 N 22nd St #8247, Phoenix, AZ 85016, USA ("we"). We decide how your data is used (the "controller" under EU and UK data protection law). Contact us about privacy at privacy@beavr.me.

TODO-LEGAL: EU and UK representative, if required

What we collect

Your account:

• Your email address and name, from Sign in with Apple, Google or the email you sign in with. With Sign in with Apple you can hide your email; we then get Apple's relay address.
• An account ID that the sign-in service gives us.

What you and your household put in Beavr:

• Calendar events: title, time, repeat, who they're for, and a location and notes if added. Events you import from a calendar file come in with their own titles and times, and with their locations and notes only if you choose to include them.
• Grocery items, chores, tokens, rewards and reward requests, and who did or approved what, when.
• People in the household: names, roles (admin, partner, helper) and colors. Kid profiles: a name, a color, tokens and chore history.
• Pets: names, type, care routines and who checked them off when, plus care notes and an emergency contact if you add them for a sitter.
• Invites (the invitee's name and role) and sitter links (the sitter's name, which pets and which dates).
• Your settings: which alerts you get, quiet hours, time zone and calendar views.

From your devices and the stores:

• A push notification token for each phone where you allow notifications (up to 10 phones per account).
• Whether your household has a subscription, its product, renewal and expiry, as the App Store or Google Play reports it through RevenueCat. We never see your card or payment details.
• Technical logs when something goes wrong on our servers (for example, the error, when it happened and which request and household it concerned).

We don't collect your location, contacts, photos, health data or advertising identifiers, and the app has no advertising code. Usage data and crash reports are covered in their own section below: they are off unless you turn them on.

Usage data and crash reports

In Profile > Privacy choices you can switch on two things, each on its own. Both are off until you do, you can turn them off again at any time, and the choice is stored on your phone only. Nothing is collected in Kid mode except that Kid mode was opened. Until a provider is set up to receive them, switching them on sends nothing.

Anonymous usage data counts things that happen, so we can see what works. It can include:

• that the app was opened, and whether it was a fresh start or a return;
• that a household was created, a first event was added, a second adult joined, and whether all three happened within a day;
• that an event was added, and about how long it took, in a range such as "under 5 seconds";
• that the language was changed, from which language to which, and how;
• that someone opened "Report a translation issue", with the language;
• that the subscription screen was viewed (and the household's plan state), a trial started or a subscription was bought (monthly or yearly);
• that notifications were allowed or declined, or an alert type was turned off, with the app's language;
• that Kid mode was opened.

Crash reports are sent when Beavr crashes or an error stops a save. A report holds the kind of error, where in the app it happened and a technical trace, after names, titles, email addresses, ids, tokens and phone numbers are removed from it.

We never put these in usage data or crash reports: names, email addresses, event, item or reward titles, notes, anything else you type, household, member or account ids, your location or your IP address. We don't use them for advertising, and we don't link them to your account. If a provider needs a random per-install number to tell phones apart, it is created on your phone, is not sent to our servers and is replaced when you sign out.

TODO-LEGAL: name of the company that receives usage data and crash reports, where it stores them, and its privacy terms (no provider is chosen yet, so nothing is sent)

Why we use it, and on what basis

• To run Beavr for you and your household: sign-in, keeping everyone's phones in sync, reminders and alerts, invites, sitter links and subscriptions. Basis: our contract with you (the terms of use).
• To keep Beavr secure and working: rate limits, abuse prevention, fixing errors. Basis: our legitimate interest in a safe, reliable service.
• Push notifications, only after you allow them on your phone. Basis: your consent, which you can withdraw in your phone's settings or Beavr's alert settings.
• To meet legal obligations, such as tax records for purchases (kept by Apple and Google) or answering lawful requests.

Some of what you add is about other people: your kids, other adults in the household, a sitter, an emergency contact. We process it to provide Beavr to your household (our contract with you, and our legitimate interest in running the service you asked for). The adult who adds it is responsible for being allowed to, and for keeping it to what the household needs.

We don't use your data for advertising, we don't sell it, and we don't "share" it for cross-context behavioral advertising as California law defines it. We don't make automated decisions about you that have legal or similar effects.

Who sees what in a household

A household is shared on purpose. Everyone in it sees groceries, chores and pets. Admins and partners see every calendar event. A helper sees the events they added, events they are on and events shared with them, with their location and notes. An event saved before we added per-event sharing stays visible to helpers until an adult chooses who sees it. Admins and partners also manage people, rewards, tokens and sitter links. Helpers (for example, a grandparent or a nanny) don't see the token history, reward requests or sitter links. Alerts reach only the person they're for.

A sitter link lets anyone who has it see the chosen pets' routines, care notes and emergency contact, the household's name, and the first names of people who checked tasks off, for the dates you chose. It doesn't need an account, so anyone it is forwarded to can open it too. Share it only with your sitter, add an emergency contact only with that person's agreement, and turn the link off in Pets when you no longer need it.

Invite links work once, for 72 hours, and we store only a scrambled (hashed) form of them. If a link is lost, a parent makes a new one and the old one stops working.

Children

Beavr is for adults. Children don't get accounts and don't use Beavr on their own devices. A parent or guardian can add a kid profile (a name and a color) and hand their phone over in Kid mode, which shows only that kid's chores and rewards and is locked by a PIN kept only on that phone. In Kid mode a child can mark their chores done and ask for a reward; that is recorded on the kid profile. We collect information about children only from their parent or guardian, who provides it by creating and managing the profile, and we use it only to run Beavr for that household. Kids never receive notifications, and alerts about a kid don't show their name on a lock screen.

Parents control kid profiles: they can change or remove them at any time, which also removes them from chore rotations. We suggest using a first name or a nickname.

Where EU or UK law applies, we process kids' profiles to provide Beavr under our contract with the parent, not on the basis of a child's consent.

If you believe a child has given us personal information, contact us at privacy@beavr.me and we will delete it.

Who helps us run Beavr

These companies process data for us, under contracts that limit what they can do with it:

• Amazon Web Services (United States, us-east-2 region): our servers, database, sign-in (Amazon Cognito), sign-in emails (Amazon SES) and logs.
• Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging): deliver push notifications to your phone. They get your phone's push token and the notification's text.
• RevenueCat (United States): records subscriptions from the App Store and Google Play. It gets a random customer number for your household (not its Beavr ID) and the store's purchase records, not your name or email.
• Apple and Google: sign-in if you choose them, the app stores and purchases, under their own privacy policies.

We may disclose data if the law requires it, to protect people's safety, or as part of a merger or sale of the business, in which case this policy keeps applying to your data.

International transfers

Our servers and these providers are in the United States. If you live in the EU, the UK or elsewhere, your data is transferred there. TODO-LEGAL: transfer mechanism for data sent to the US (for example, the EU Standard Contractual Clauses and the UK addendum, or the Data Privacy Framework).

How long we keep it

We keep your account and household data until you delete your account or the household closes, even if you stop opening the app. Some things are removed sooner:

• Alerts: 60 days.
• Pet check-off stamps: 14 days. "Needs doing" ticks on events: 90 days.
• Something you delete: a marker stays up to 30 days so your household's other phones remove it too.
• Someone who leaves or is removed: their name stays on past activity for up to 90 days, then shows as "Former member". If they delete their account, it changes at once.
• Invite links: 72 hours. Sitter links: the dates you chose (at most 14 days, ending within 30 days) and 12 hours after the last day.
• A closed household (its last admin left with no partner, or deleted their account): everything is erased 30 days after it closes, including its subscription record at RevenueCat.
• Server logs: at most 30 days. Database backups: up to 35 days, after which deleted data is gone from them too.

The app also keeps a copy of your household on your phone so it works offline. Signing out removes it.

Your rights and choices

You can see and change most of your data in the app, and delete your account in Profile (see "Deleting your account" below). Depending on where you live, you also have the right to:

• get a copy of your data in a common format (JSON), so you can move it to another service (see "Downloading your data" below);
• correct it;
• have it deleted;
• object to or restrict how we use it;
• withdraw consent (for notifications) at any time;
• complain to your data protection authority (in the UK, the Information Commissioner's Office).

To ask for any of these, write to privacy@beavr.me. We answer within one month, and may ask you to confirm it is your account. We won't treat you differently for using your rights.

Downloading your data

You can download a copy of your data yourself, in Profile > Download your data. It comes as one JSON file, a common format that other services and spreadsheets can read.

• "My data", for anyone: your account (its ID and email), your settings and the phones you use Beavr on (without their push tokens), and in each household you're in your profile and what is about you: events you added, are on or ticked, grocery items you added or checked, chores you reviewed, token changes you made, your pet check-offs, sitter links you made and the alerts addressed to you. It holds only what you can already see in the app.
• "Household data", for the household's admin: everything the household holds that the admin can see in the app (calendar, lists, chores, tokens, rewards, pets, sitter links, people and the subscription state) and the admin's own alerts. It never includes anyone's login details, other people's alert or calendar settings, invite or sitter link addresses, push tokens or store purchase IDs.

Each can be downloaded once every 10 minutes, and not in Kid mode. If a household is too large to download in the app, or you can't use the app, write to privacy@beavr.me and we will send you the file, usually within a few days and at the latest within the time the law gives us.

TODO-LEGAL: confirm that the in-app download plus email requests meet access and portability duties (GDPR Articles 15 and 20, US state laws), and that giving the household admin a copy of other members' shared household records is acceptable as described

California and other US states

In the last 12 months we have collected these categories of personal information, from you, your household and the app stores, for the purposes above: identifiers (name, email, account and device IDs), commercial information (subscription status), and the content you add (which can include information about your kids). We keep each as long as described above.

We do not sell or share personal information, as those terms are defined in California law, and we have no actual knowledge of selling or sharing the information of anyone under 16. We don't use sensitive personal information to infer things about you.

Depending on your state, you can ask to know, get a copy of, correct or delete your information, and appeal if we say no, by writing to privacy@beavr.me. We answer within 45 days. You can use an authorized agent; we will verify the request.

Deleting your account

Profile > Delete account explains, for each household you're in, what will happen, then deletes your account when you type "delete". The full steps are at beavr.me/account-deletion.

Security

Data travels encrypted (HTTPS) and is encrypted where we store it. Invite links are stored only in hashed form, sitter links expire, and Kid mode's PIN never leaves the phone. Anyone you invite into a household can read its shared data according to their role, and anyone with a sitter link can see what it shows. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Changes to this policy

If we change this policy, we will post the new version here with a new date. For a significant change we will tell you in advance, by email or in the app.