Bīj Privacy Policy

1. Who is responsible for your information

Bij Life Inc., a Canadian corporation, is responsible for personal information under its control, including information processed by service providers on its behalf.

For privacy questions, access, correction, consent-withdrawal or deletion requests, and complaints, contact:

Privacy Officer
Bij Life Inc.
350 Bay St, Suite 1300B
Toronto, Ontario M5H 2S6, Canada
info@bijapp.ca

The current policy is available at https://www.bijlife.ca/privacy-policy. A separate Consumer Health Data Privacy Notice supplements this policy where applicable: https://www.bijlife.ca/consumer-health-data.

2. Privacy at a glance

• You can explore available practices without creating an account. Saving member content requires the applicable account and membership access.
• In version 1.1.2, new reflections and edits to reflections already saved on your device stay on that device. Older hosted written entries and edits to them remain in our hosted journal service.
• Voice Reflection audio stays on your device. Bīj does not upload it or automatically transcribe it.
• Photo attachments in version 1.1.2 stay on your device. Bīj does not provide cloud backup for reflections, voice recordings or these photos.
• Your journals, recordings and attached photos are not public or shown to other members.
• Account, purchase, practice and service-usage information is processed as described below. Guest activity is pseudonymous and must not be treated as anonymous or impossible to link to an account.
• We do not sell your personal information or use your reflection writing, recordings or attached photos for advertising.

3. Information we handle and its sources

Accounts and preferences. We receive information you provide, such as your name, email address and settings, together with account identifiers and authentication/session information. A supported sign-in provider, such as Apple, supplies the identifiers and profile details needed to complete your chosen sign-in.

Practice history and personal features. We handle practice type, dates, measured duration, completions, return days, totals and details you choose to save in personal features such as Your Unfolding. These records can reveal information about wellness practices.

Reflections, recordings and photos. These include journal names, entry titles and text, dates, drafts, recordings and associated details, and photos you select. What you choose to include can be sensitive. Sections 5 and 6 explain the differences between device storage and hosted records.

Purchases. We receive membership status, product and transaction identifiers, purchase/renewal information and identifiers used to connect purchases with member access. Apple handles App Store payments; we do not receive your full payment-card details or Apple Account password from Apple. If a separate website purchase is offered, the checkout identifies its payment provider and the information required before purchase.

Forest accounting. We handle account or purchase identifiers, qualifying activity, practice duration, commitment/award references, dates and reconciliation records. We do not use journal text, recorded speech or attached photos to calculate tree commitments. Public Forest figures summarize community activity.

Support, website forms and communications. We receive what you choose to send in an email, contact form, founding-list/newsletter registration or other request, including contact details and the message. Please avoid sending journal content or sensitive documents unless needed for your request. Marketing choices are separate from service messages.

Technical information. Our hosting and delivery providers receive information needed to serve requests, potentially including IP address, request time, app/browser/operating-system details, errors and device identifiers. RevenueCat may receive Apple's identifier for vendor with purchase-related requests.

Practice activity and presence. Signed-in practice requests are associated with your account. Certain signed-out requests, such as music-started and field events, carry a random identifier kept on your device; the service uses a one-way hash for guest activity accounting. A separate short-lived presence token may be held in memory while the app is open.

In-app usage events. In the App Store release of version 1.1.2, Bīj does not send optional navigation, engagement or practice-usage events, whether or not you are signed in. A limited set of these events stays only on the device while you are not signed in; Bīj does not send them later, including after you sign in. Earlier versions sent these events for signed-in members with the account identifier. Records sent by earlier versions are not automatically erased by an update. These events are distinct from the automatic provider analytics described below.

Device-identifier linkage. In version 1.1.2, signed-in presence and completion requests omit Bīj's guest identifier. One exception remains: if a Sunlight or Grounding mark cannot be saved to the account, its fallback reference includes that identifier. Earlier versions stored the guest identifier with signed-in event records, allowing guest-era activity from the same device to be linked to an account. Those historical records are not automatically erased by an update. Devices holding practice history from versions before 1.0.9 may also send a legacy history identifier at sign-in to associate that history with the account.

Provider-added identifiers. Base44's software adds the in-app screen address to requests; those screen addresses do not include reflection text. Requests without a sign-in token also carry its separately generated anonymous identifier, which persists across sign-in and sign-out. The label “anonymous identifier” does not guarantee that the information cannot be linked.

Earlier automatic analytics. Before version 1.1.2, Base44's software automatically recorded screen paths, session-start/duration signals and periodic app-open signals. Those signals could be account-associated, and a previously signed-in identity could remain associated after logout. Automatic SDK analytics is disabled in version 1.1.2. This does not stop the separate service requests described above, which the app's features need.

4. Purposes, consent and choices

We use information to operate accounts, provide the features you request, maintain personal history, verify membership and purchases, deliver media, calculate and reconcile Forest commitments, provide support, protect services and meet legal obligations. Earlier versions also used limited usage information to understand navigation and reliability; optional usage analytics are off in the App Store release of version 1.1.2.

We identify purposes and seek the form of consent required by applicable law. Agreeing to Terms of Use is not blanket consent to unrelated or optional uses of personal information. Where required, sensitive or optional processing requires a separate choice. We may process information without consent only where law permits or requires it.

You can decline optional recording, photo selection, location and notification features. Contact the Privacy Officer to ask about or withdraw consent for other processing, subject to lawful restrictions. We will explain any consequence for a service that needs the information. Withdrawal does not make earlier lawful processing unlawful and does not automatically remove records we must retain.

We do not include third-party advertising in the app, sell personal information, or use your reflection content to advertise. Website cookies and external services are addressed separately below.

5. Written reflections, photos, backups and exports

Device reflections in 1.1.2. New reflections, drafts and edits to reflections already stored on the device are kept in Bīj's protected app storage. Bīj does not upload those reflections. A “Saved on this iPhone” message is not a cloud-backup confirmation.

Older hosted entries. Some older written entries remain in the hosted journal service operated through Base44. Opening them retrieves them from that service; editing or deleting them sends the change there. Custom journal names are also hosted. Provider access to these records is needed to operate that service.

Earlier synchronization attempts. Version 1.1.1 and earlier private review builds sent device-reflection text and details to our application provider during attempted synchronization. A voice entry could include recording-reference details and duration, but not the recording audio. Those attempts returned errors. We have not confirmed whether the provider retained request records or content. Version 1.1.2 stops those synchronization requests; earlier installed versions may continue attempting them until updated.

Photo attachments in 1.1.2. You may add up to three selected photos to an eligible reflection. Apple's photo picker shares selected items with Bīj rather than granting access to your whole photo library. Bīj stores resized copies on the device and removes location, camera and capture-time metadata from those stored copies. The image itself can still reveal personal information. Photos are not uploaded or backed up by Bīj.

Backups and loss. Your Apple device backup, whether iCloud or a computer backup, may include local app data depending on its settings. Bīj does not control that backup. Removing the app, erasing or losing the device, or deleting local data without a restorable backup can permanently remove local reflections, recordings and photos.

Exports. Written-entry text/PDF exports omit voice recordings and attached photos, with an omission notice where applicable. Available audio-export controls let you share a recording separately. Exported copies are controlled by the destination you choose; deleting the original does not delete those copies. These convenience exports do not replace any statutory access or portability right.

If we introduce reflection cloud backup or a materially different use of your content, we will explain it before it applies and obtain any consent required. Neither this policy nor our Terms of Use itself activates a backup service or authorizes uploading previously queued local content.

6. Voice Reflections and microphone access

Voice Reflections are optional. iOS requests microphone permission before recording; you may refuse or change it in Settings. You initiate and stop recording through the controls. Browsing journals or playing existing recordings does not itself activate recording.

Audio remains in Bīj's app storage on your device. Bīj does not upload it, provide automatic transcription or send it to a transcription service. In version 1.1.2, a recording's associated local reflection details also stay on the device, subject to the older hosted-entry exception in section 5.

If cloud audio storage or transcription is introduced later, we will explain the processing and obtain required consent before using recordings for that purpose. Device backups and exports remain subject to sections 5 and 7.

7. Website cookies, communications and device permissions

Website hosting and cookies. Our website is hosted by Squarespace. Hosting receives connection and usage information needed to deliver pages. Cookies or similar storage may support security, preferences, site features and traffic measurement. You can manage cookies through your browser; blocking essential cookies can affect functionality. Where prior consent is required for optional cookies, we ask before enabling them and provide a way to refuse or change that choice. This policy is not itself consent to optional cookies.

External links or embedded services may receive request information when you use them. Their own notices apply to their processing. We do not treat visiting an external site as agreement to unrelated marketing.

Email and founding-list choices. We use contact details for the request or registration you make. Promotional messages require the consent or other permission required by law and include an unsubscribe method. Unsubscribing from marketing does not stop necessary account, purchase, security or legal notices. Account creation alone does not grant blanket marketing permission.

Sharing. You choose where to export or share content. Copies in Files, Photos, another app or another person's possession are outside Bīj's storage and follow that destination's settings.

Photos access. Saving a quote image can request add-only Photos access. Selecting reflection attachments uses Apple's picker. These are different actions and do not imply whole-library access.

Location. If you choose the Sunrise music sleep timer, Bīj can request location while in use to calculate sunrise on the device. Bīj does not send those coordinates to its services. A fallback is used if you decline.

Notifications. A practice reminder can request notification permission for scheduling on your device. You can change permissions in iOS Settings. Permission for one feature is not consent to unrelated collection.

8. Providers and disclosures

Providers supporting the services include:

• Base44: accounts, application backend, older hosted written entries, journal names, practice/service records and related requests.
• Cloudflare: Worker/D1 infrastructure for Forest accounting, relevant identifiers, qualifying events and reconciliation. Local reflections, voice audio and photo attachments are not sent there by Bīj.
• RevenueCat: purchase validation, entitlements, account association and transaction events.
• Apple: App Store purchases, subscriptions, refunds, sign-in where chosen, and device services, under Apple's own terms.
• Squarespace: website hosting, forms and website analytics where enabled.
• Media-delivery and communications providers: delivery of app media, website content and messages, with the information necessary for those services.

We require service providers processing on our behalf to protect information consistently with this policy, applicable law and our agreements. Apple and other independent providers may also process information under their own notices; not every provider acts solely on our instructions.

Restoration partners receive project and aggregate commitment information rather than your journal writing, recordings or attached photos.

We may disclose information as you direct, where law requires or permits, for service security/fraud response, or in a business transfer subject to lawful notice and safeguards.

9. Processing locations and safeguards

Bij Life Inc. is based in Canada. Providers may process information in Canada, the United States and other countries where they operate. Foreign laws and lawful-access powers can differ. Contact us for information about relevant providers and processing locations.

We remain accountable for processing on our behalf and apply appropriate contractual and organizational measures. Where required, cross-border processing requires an assessment and suitable agreements before transfer.

Safeguards include authenticated access, account-owner controls and protected network connections. Local security also depends on your device, passcode and backup settings. No system guarantees absolute security. Bīj does not describe its journals as end-to-end encrypted.

10. Privacy governance and incidents

The Privacy Officer coordinates privacy requests and complaints, access restrictions, retention/deletion practices and provider inquiries. Access to hosted member content is limited to legitimate service, support, security or legal needs.

We assess changes to information handling and conduct privacy assessments where required. If an incident occurs, we investigate, limit harm, maintain required records and make notifications required by applicable law. A change in policy does not resolve or erase historical processing.

To complain, email the Privacy Officer with the concern and a way to contact you. We will investigate, seek relevant facts and respond within the applicable legal period.

11. Retention and deletion

We use purpose-based retention rather than promising a single period for every record:

• Local reflections, drafts, recordings and photos remain until removed through available controls, confirmed account cleanup, app removal or device-data removal, subject to separate device backups.
• Hosted account and practice records are kept as needed to provide the service and handle requests, then deleted or anonymized subject to lawful retention.
• Purchase, accounting, fraud/security and dispute records may need longer retention.
• Support messages, operational logs and restricted provider backups follow the purposes and applicable retention requirements for those systems. Contact us for the current backup-retention procedure; no fixed backup-expiry period is promised here.
• De-identified historical restoration commitments can remain in collective totals after account deletion.

You can delete available entries or request account deletion in Profile → Settings → Delete Account. You may also contact info@bijapp.ca. We may verify identity and retain only information lawfully needed to process the request.

In version 1.1.2, the app is designed to clear that account's local reflections, drafts, recordings, photo attachments and other account data after the deletion service confirms the request, while keeping another Bīj account's data on the same device. If confirmation or cleanup fails or is interrupted, the app provides status and retry handling. Do not treat an unconfirmed request as completed deletion.

Signing out is different from deletion. Exports and personal device backups must be managed separately. Provider-controlled payment records may have separate legal retention requirements.

Deleting a Bīj account does not cancel an Apple subscription. Cancel any active Monthly or Annual subscription through your Apple Account if you want billing to stop; you need not wait for it to expire to request deletion.

12. Access, correction and other rights

Depending on applicable law, you may request access, correction, deletion, a copy in an available portable format, consent withdrawal, or an objection/restriction. You may also have rights concerning sensitive or consumer health data.

Send requests to info@bijapp.ca. We verify identity proportionately, explain any lawful refusal or limitation and respond within the applicable deadline. You may ask us to review a refused request and use any appeal process provided by applicable law. Exercising protected rights will not itself result in unlawful discrimination.

If unresolved, you may contact the competent privacy regulator, including the Office of the Privacy Commissioner of Canada, Québec's Commission d'accès à l'information, or the relevant authority where you live. The separate Consumer Health Data Privacy Notice explains additional rights where applicable.

13. Age and sensitive content

Bīj is intended for adults aged 18 or older. When you create an account, we ask you to confirm that you are 18 or older. We do not ask for your date of birth, we do not ask for government identification, and we do not infer or verify your age. If we learn information was provided contrary to that restriction, we take appropriate action.

Your writing, recordings and photos may contain sensitive information you choose to include. Consider other people's privacy before sharing or recording information about them.

Bīj supports contemplative wellness practice. It is not a medical service and does not monitor reflections or recordings for emergencies. Do not rely on it for emergency assistance.

14. Policy changes

We update this policy when practices change. The revision date identifies the latest version. We provide appropriate notice of material changes and seek additional consent where required. Posting this policy does not itself supply consent for a new optional or sensitive use.

Contact: info@bijapp.ca