Privacy policy

Updated on 11 November 2026

BeBack is designed to know as little about you as possible. No account, no sign-up, no advertising. Your rules, your time slots, your hours and your reports stay on your iPhone.

This page details everything the app processes, why, and by whom.

Who is responsible

NAELO SAS (Naelo Studio), publisher of BeBack (see the legal notice). Contact: aurelien@naelostudio.com.

Your rules and the time you win

The apps you choose, your time slots, your places, your openings and your reports (time won today, this week, your record) are stored in the app, on your iPhone. They are sent neither to Naelo Studio nor to any provider.

The pause goes through Apple's Screen Time. The list of apps comes from Apple's selector and stays on your iPhone. BeBack does not receive your Screen Time history.

If you create a rule by place, your location is used only, on the iPhone, to know whether you are in the chosen place. It is neither stored nor sent.

Your photo and your face data

To sculpt your statue, you can take or choose a photo of yourself. Before it is sent, a screen asks for your consent, with the box unticked by default. Without consent, no photo: you choose a statue from our library.

The photo is sent once, encrypted in transit, to our server function (hosted at Supabase). That function passes it to the Seedream image model via OpenRouter, in “zero data retention” mode: neither OpenRouter nor the model keeps it. Our function does not store it either. Only the generated image comes back to your iPhone, where it stays.

So we keep neither your photo nor any print of your face. One generation a month per user, with a cap per device.

The statue image is AI-generated, and the app says so. It may not look like you. A button in the app lets you report it.

Under 18

If you state that you are under 18, no photo is requested or sent. Your statue comes from a library of images we prepared in advance.

Purchases

Payments are processed by Apple. Naelo Studio sees neither your name, nor your email address, nor your payment details.

To validate and restore your purchases, the app uses RevenueCat, Inc. RevenueCat receives an anonymous identifier generated by the app, Apple purchase receipts and technical data (iOS version, storefront country). RevenueCat's policy.

Crash reports

If the app crashes, an anonymous technical report is sent to Sentry (Functional Software, Inc.): device model, iOS and app version, error trace. It contains neither your rules, nor your photo, nor your statue. Sentry's policy.

Usage statistics

To learn which features are used and where the app gets stuck, BeBack sends anonymous usage events to PostHog, Inc. (for example: rule created, Ultra strict enabled, offer chosen), with a random identifier linked neither to your identity nor to your Apple account. Never the names of the apps you pause, nor your photo. PostHog's policy.

BeBack does not use the iPhone's advertising identifier and does not track you across apps.

Notifications and permissions

Reminders (a bubble starting, the day before the trial ends) are local notifications, scheduled on your iPhone: nothing goes through a server.

Screen Time access is used to pause your apps. The camera and photo library are used for the statue photo. Location is used for rules by place.

Legal bases and retention

Sending the photo rests on your consent, which you give on the dedicated screen and may refuse. Purchases rest on the performance of the contract; crash reports and statistics on Naelo Studio's legitimate interest in running and improving the app.

The photo is not kept. Crash reports are kept for 90 days at most, usage statistics for 24 months at most, then deleted. Purchase data is kept as long as needed to restore your purchases and meet accounting obligations.

These providers may process data outside the European Union, with the safeguards provided by the GDPR (the European Commission's standard contractual clauses).

What BeBack does not do

  • No account, no email address requested.
  • No advertising, no ad tracking.
  • No sale or rental of data.
  • No retention of your photo or your face.
  • No cookies on this site.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability provided by the GDPR. As the data processed is anonymous, we usually cannot link it to you; write to us and we will do what we can with what you are able to tell us.

Contact: aurelien@naelostudio.com. You may also lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

Changes

If this policy changes, the new version is published on this page with its update date.