Who we are
BeatSocial is operated by AskAutomator (“we”, “us”). This policy covers the BeatSocial mobile app and beatsocial.app. For anything in it, write to support@beatsocial.app.
The short version
- What’s on your screen and your browsing activity are processed on your phone and aren’t sent to us.
- Your account, coins, streaks and commitments are stored on our servers so they follow you across devices.
- Your block lists are stored on our servers in encrypted form.
- We don’t sell your data, and the app contains no advertising.
- You can delete your account and data at any time. Here’s how.
What stays on your device
This information is used by the app on your phone and isn’t uploaded to our servers:
- Screen content read through the Accessibility permission, including the current app, and web addresses and search text in supported browsers.
- Your day-to-day app usage history and screen time statistics.
- Recently visited website domains, kept to show your statistics and suggest sites to block.
- The list of apps installed on your phone, used so you can choose what to block.
- Your fingerprint, if you use it for App Lock. It’s handled by Android, and we never receive it.
What we store on our servers
| Data | Why we need it |
|---|---|
| Name, email address, password (stored only as a hash), time zone, and profile photo if you add one | To create and run your account |
| Commitments: name, schedule, limits, control type and number of blocked items | To enforce and restore your commitments, and to work out coins |
| Your block lists: apps, websites and keywords, encrypted, along with one-way hashes of blocked apps and websites | To restore them on a new device and check that coins were earned fairly |
| For usage-limit commitments, your usual daily minutes for the selected apps | To check that your limit is a real reduction and calculate coins |
| Coins, stakes, streaks, daily results and leaderboard position | To run the rewards and leaderboard features |
| Passcodes, recovery email and one-time codes | To protect commitments and let you recover access |
| Your Beatmate’s name and email address, if you add one | To send them the passcode (see below) |
| Device identifier, platform, app version, notification token and settings, last active time | To link your devices, send notifications, and prevent abuse of signup bonuses |
| Subscription status, product and purchase token from Google Play | To verify Premium. We never see your card details |
| Server logs: IP address, requested path, status and timing | To keep the service secure and fix problems |
Information about your Beatmate
If you add a Beatmate, you give us a friend’s name and email address. We use them only to verify that friend and send them passcodes for your commitments. Please get your friend’s agreement first. A Beatmate can ask us to remove their details by writing to support@beatsocial.app.
What other users can see
Unless you turn it off in Leaderboard Settings, the leaderboard shows your name, profile photo, streak and weekly coins to other users.
Accessibility and other sensitive permissions
We use Android’s AccessibilityService API only to provide blocking and the protections you turn on yourself. We don’t use it to collect your messages, passwords or other personal content. Our permissions page describes each permission in full.
Who processes your data for us
We use these service providers, and only for the stated purpose:
- Google Firebase: sign-in, email verification and push notifications.
- Google Play: subscription billing and verification.
- Cloudinary: storing profile photos.
- Resend: sending emails such as passcodes and one-time codes.
- Our cloud hosting provider, which runs our servers and database.
We may also disclose information if the law requires it, or to protect our users or service from fraud and abuse. If the business is ever sold or merged, your data may transfer with it under this same policy, and we’ll tell you first.
Our providers may process data outside your country. Where they do, we rely on the safeguards they offer for those transfers.
How long we keep it
We keep your account data until you delete your account. Deleting it permanently removes your account and every record linked to it from our database, and your profile photo from our image storage. Server logs and backups are kept for a limited time and then removed. Details are on the account deletion page.
Security
Traffic between the app and our servers is encrypted in transit, and block lists are also encrypted at rest. Passwords are stored only as hashes. No system is perfectly secure, so please use a strong password and tell us straight away if you suspect a problem.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to withdraw consent, to object to certain uses, or to complain to a regulator. You can edit your profile in the app and delete your account yourself. For anything else, email support@beatsocial.app from your account’s address.
You can withdraw permission at any time in your phone’s settings. Blocking won’t work without the permissions it depends on.
Children
BeatSocial isn’t directed at children under 13, and they may not use it. If you’re under 18, or below the age of adulthood where you live, you need a parent or guardian’s permission. If you believe a child has given us data without that permission, contact us and we’ll delete it.
This website
This website uses no advertising, analytics or tracking cookies. If you use the contact form, it opens your own email app, and we only receive what you choose to send.
Grievance Officer
In line with the laws of India, you can raise complaints about how we handle your data with our Grievance Officer, at support@beatsocial.app.
Changes to this policy
We’ll update the date at the top when this policy changes, and tell you in the app if a change significantly affects your data.