Privacy policy

Effective July 10, 2026

The short version: your bedroom photo is graded, then deleted — we keep the letter grade, not the picture. Which apps you lock stays on your phone; we never learn their names. No ads, no trackers, no selling anything to anyone.

What Beddy collects

Your account. When you use Sign in with Apple on iOS or Google Sign-In on Android, we store the stable account identifier that provider gives us and — only if the provider shares them — your name and email. We never receive your Apple or Google password.
Your device identifier. Before sign-in, Beddy creates a random app-specific identifier so your anonymous streak belongs to this installation and can be moved into a new account when you sign in. It is not an advertising ID and does not identify anything else on your phone.
Your grades. Letter grade, score, Beddy's verdict, streaks, freezes, overrides, and which wardrobe items he's wearing. This is the product.
Your reference photo (optional). If you use "Set your standard," that one photo of your perfectly made bed is stored so future grades compare against your bed. You can replace it anytime, and deleting your account deletes it too.

What happens to your daily photo

Each morning's photo is sent over an encrypted connection to our server, passed to our AI provider (Anthropic) to produce the grade, and immediately discarded. We do not store it, back it up, or look at it. Under Anthropic's API terms, photos are not used to train their models.

Morning Lock on iPhone and Android

Morning Lock is optional. On iPhone it uses Apple Screen Time (Family Controls). On Android it uses an Accessibility Service, with your explicit permission, to detect when an app opens and show Beddy’s blocker when that app is in your locally stored selection.

App choices stay on your phone. iPhone stores Apple’s anonymous selection tokens; Android stores selected package names in Beddy’s private app storage. App identities are not sent to our servers or analytics. Shared app screens receive only a selection count.
Android observes foreground package names locally. This is sensitive app-activity data used only to decide whether to open the Morning Lock screen. The service is configured not to retrieve window content. Beddy does not read messages, passwords, typed text, notifications, or screen content.
It's yours to switch off. Pause or disable Morning Lock in Beddy anytime, revoke Screen Time on iPhone, or disable Beddy Morning Lock under Android Accessibility Settings. Android’s immediate ten-minute pause works offline.
Android is best effort. Force-stop, permission revocation, battery restrictions, OS updates, or manufacturer behavior can interrupt detection. Morning Lock is bypassable and is not a security boundary.
Not a monitoring tool. Morning Lock only works on your own device, for yourself. It sends no reports to anyone.

What Beddy doesn't do

No advertising, and no third-party ad or analytics trackers.
No selling your data or sharing it for advertising. The services needed to run Beddy are Anthropic for grading, Apple or Google for sign-in, RevenueCat for subscription status, Apple App Store or Google Play for purchases, and the hosting providers named below.
No reading anything else on your phone. The camera is used only when you take a photo; reminders are scheduled on your device.

Subscriptions and payments

If you subscribe, the Apple App Store or Google Play processes your payment and RevenueCat validates the purchase and entitlement. We receive subscription status, product and transaction identifiers, purchase dates, and store environment; we do not receive your full card or bank details.

Where data lives

Grades and account data are stored with our database provider (Supabase, hosted in the United States) and our application host (Railway). Your preferences — tone, reminder time — stay on your device.

Deleting your data

Use Delete account inside Beddy for an immediate account-data deletion request, or email hello@getbeddy.app and we'll delete your account and every grade within 30 days. Beddy will be dramatic about it, but he'll comply.

Full instructions, including how to request deletion without the app installed, are on the account deletion page.

Changes

If this policy changes materially we'll say so in the app before the change takes effect. The current version always lives at this address.

"I judge beds, not people." — Beddy