Beside Privacy Policy

1. Who We Are & Scope of This Policy

Beside is developed and operated by Nanoologi Ltd. ("Nanoologi," "we"). This Privacy Policy applies to the Beside mobile applications, any companion widgets or watch apps, the invite pages on nanoologi.com, and related backend services (collectively, the "App"). It applies to all users of the App regardless of country of residence, subject to the governing law provisions below.

2. The Core Rule: Location Only While the Switch Is On

Beside reads your device location only while a session is active, that is, from the moment you turn the switch on ("Stay beside me") until you turn it off ("Turn off"), or until an SOS you raised is resolved. When no session is active, the App does not read, record or transmit your location, in the foreground or in the background.

The App asks for "Always" location permission so that sharing keeps working while your phone is locked or the App is in the background during a session. The permission does not change the rule above.

3. Data We Collect

3.1 Account data

• Sign-in identity: the account identifier, name and email address provided by Sign in with Apple or Google Sign-In. With Sign in with Apple you may choose to hide your email; we then receive a relay address. Where sign-in with an email address and password is offered, we store the email address you enter and ask you to confirm it; your password is handled by Firebase Authentication and we never see or store it.
• Profile: the display name you choose and, if you add them, a profile photo and a phone number. The phone number is optional and is used only so that your circle members can call you.
• Settings: your in-app preferences, such as default circle members, check-in interval, theme and language.

3.2 Circle data

• Invites: an invite code, who created it, when, its expiry (7 days) and who accepted it.
• Relationships: who is in whose circle, when the invite was accepted, and a copy of each member's display name, profile photo and phone number (if they added one).

3.3 Session data (only while a session is active)

• Location points: latitude, longitude, accuracy and speed, recorded at intervals while the session is active.
• Device state: battery level and a movement class (still, walking or in a vehicle) derived from the device's motion sensors.
• Session record: who started it, which circle members it notifies, when it started and ended, where it was started from (phone, widget or watch), check-in prompts and answers, SOS events, "no signal" events, and which members acknowledged it.

3.4 Health data (only from watch-started sessions)

Health data, such as heart rate, is read only when you start a session from a supported watch, only while that session is active, and only after you grant the operating system's health permission. It is shared only with that session's circle members and is deleted together with the session's location points. Sessions started from the phone or a widget never include health data. Health data is never used for advertising, marketing or analytics, and is never sold. This feature is not available in every version of the App.

3.5 Notification and device data

• Push tokens: the token your device's push service (Apple Push Notification service or Firebase Cloud Messaging) issues, so that we can deliver session, SOS and circle notifications to you.
• Diagnostics: device model, operating system and App version, crash reports, and an attestation that requests come from a genuine copy of the App.
• Usage analytics: pseudonymous usage events linked to a random app-instance identifier, such as "session started" or "invite accepted", with counts and durations. Analytics never contain location, names, email addresses or text you type.

We do not collect your contacts, photos (other than a profile photo you choose), microphone audio, camera images or browsing history.

4. Who Can See Your Data

• Your circle members for a session can see that session's live location, battery, movement class, check-in and SOS state while it is active, and the session's route until it is deleted. Members you did not select for a session do not see it.
• Circle members can see your display name and profile photo and, if you added one, your phone number, so that they can call you. No one outside your circle can see your phone number.
• You see exactly what your circle sees for your own sessions.
• Nanoologi personnel access data only when strictly necessary to operate, secure or support the App, or when legally required.

5. How Data Is Used

Data collected under Section 3 is used exclusively to:

• Show your live position to the circle members you chose for an active session.
• Send session, SOS, check-in, "no signal" and circle notifications.
• Maintain your account, circle and preferences.
• Diagnose and fix technical failures, and protect the service from abuse.
• Comply with legal obligations where legally compelled.

We do not use your data to build advertising profiles, and we do not use it to train third-party AI or machine-learning models.

6. Legal Basis & Consent

We process your data to provide the service you asked for and on the basis of your explicit consent, given when you grant location, notification and (where applicable) health permissions and each time you start a session. You can withdraw consent at any time by turning the switch off, revoking permissions in your device settings, leaving a circle, or deleting your account. Withdrawing consent disables the related features.

7. Sub-Processors

We do not sell your data. We share data only with the following service providers, each bound by contractual confidentiality and data-protection obligations:

• Google Firebase (Google LLC): authentication, database, cloud functions, file storage for profile photos, push delivery, crash reporting, analytics, configuration and app attestation.
• Apple: Sign in with Apple and the Apple Push Notification service.
• Map provider: map tiles shown to you and your circle; the map provider receives the map area being viewed, not your account identity.
• Legal & regulatory authorities: where disclosure is required to comply with a valid legal process, protect our legal rights, or respond to an imminent threat to someone's life.
• Successors in a corporate transaction: if Nanoologi is involved in a merger, acquisition or asset sale, subject to this policy or one offering materially equivalent protections.

8. No Selling, No Advertising

Beside will never sell, lease, rent or otherwise monetize your location, health data or personal data, and does not show advertising.

9. Data Retention

• Location points and health data are deleted automatically 24 hours after the session ends.
• Session records (times, state, acknowledgements, without location) are kept while your account exists so that you and your circle can see recent activity, unless you delete your account.
• Invites expire after 7 days; expired invites are removed.
• Account, profile and circle data are kept until you leave the circle or delete your account.
• Crash reports and analytics are kept for the periods set by our providers, and contain no location.

10. Deleting Your Account

You can delete your account at any time from the App's settings. Deletion is immediate and irreversible: it removes your profile, profile photo, push tokens, invites, circle relationships (your circle members are told you left), sessions and any remaining location points and health data from our active systems. Residual copies in encrypted backups are purged on our routine backup-rotation schedule. If you cannot access the App, contact us (Section 15) and we will delete your account on request.

11. Your Rights

Subject to applicable law, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (available instantly via in-app account deletion).
• Withdraw consent to location, notification or health permissions at any time via your device settings.
• Object to or request restriction of certain processing.
• Lodge a complaint with the Israeli Privacy Protection Authority or another competent supervisory authority in your jurisdiction.

To exercise any right not available directly in the App, contact us using the details in Section 15.

12. Children

You must be at least 16 years old to use Beside. Beside is not directed at children under 16. If we learn that an account belongs to someone under 16, we will delete it.

13. Security & International Transfers

Data is encrypted in transit (HTTPS/TLS) and at rest. Access rules ensure that a session's location can be read only by its owner and the circle members chosen for it. No system is perfectly secure; in the event of a data breach affecting your personal data, we will notify affected users and regulators as required by the Protection of Privacy Law, 5741-1981, and any other law that applies to you.

Our providers may process data in countries other than your own, including outside the European Economic Area, the United Kingdom and Israel, under standard contractual safeguards.

14. Platform Compliance & Changes

Beside does not track you across other companies' apps or websites and does not use Apple's App Tracking Transparency framework because it does no such tracking. This policy is between you and Nanoologi, not Apple Inc. or Google LLC. We may update this policy; material changes will be announced in the App or via the "Last updated" date above. Continued use after changes take effect means you accept the revised policy.

15. Governing Law & Contact

This Privacy Policy is governed exclusively by the laws of the State of Israel, and any dispute arising from it is subject to the sole and exclusive jurisdiction of the competent courts located in the Center District, Israel.

For privacy questions, data access requests or account deletion help, contact us at custumer.support@nanoologi.com.