Privacy

Beffi OS is operated for a single private household. Members sign in with an email and password and join by invitation. Passwords are stored as salted password hashes; the app stores a session token in the device Keychain.

Google Calendar

Members choose which connected Google calendars to share with the household. Beffi OS can add and edit events with Google permission. It stores event snapshots and recent changes to detect updates and sends calendar change alerts through Apple Push Notification service to members who enable notifications.

Google access covers event editing and reading the calendar list. Only selected calendars are shared. Initial connection and resynchronization do not send historical change alerts. Google refresh tokens remain encrypted in the Beffi OS database and are never sent to the iPhone or iPad app. Existing connections can be disconnected through the household API.

Other household data

Beffi OS stores shopping and to-do items for household sharing. The household owner can open the transaction category inbox and save category decisions to the finance project. Other household members can see only posted EUR transactions marked reviewed and included in analysis, along with spending totals calculated from those same transactions. Beffi OS does not store transaction records or bank credentials in its database, and the finance API token stays on the server. The app may keep local copies of lists. Beffi keeps shared list activity (additions, completions, reopening, renaming, and deletion) to understand household usage and future recurring-item suggestions. Shopping check-offs are signals of purchases, not bank-confirmed purchases. For voice entry, the device sends a temporary recording to the private Worker. The Worker sends it to OpenAI for transcription, then sends the transcript to OpenAI to extract list items or prepare a calendar event draft for review. Beffi OS stores the extracted items, not the recording or transcript. Notification device tokens are stored on the server and removed when notifications are disabled or the device signs out. Event details may appear in calendar notification previews. Beffi OS does not send transaction notifications.

Contact

Members can contact the household owner through their usual family channel for questions or data removal.

Beffi OS · Privacy