BeenThere Privacy Policy

Last updated: 5 November 2026. Contact: [email protected]

In short: BeenThere keeps your data on your phone. By default it never connects to the internet, and we cannot see your data.

What the app stores, and where

Your office attendance, goals, holidays, places, visits, ratings and notes are stored only in the app's private storage on your phone. The app does not back them up to any cloud.

Location

If you turn on Automatic check-in, BeenThere asks for location, including "all the time" (background location), only to notice when you arrive at or stay at a place you saved, even when the app is closed. Matching happens on your phone using Google Play services geofencing, which runs under Google's own terms. BeenThere does not send your location to us or anyone else. Extra locations you add for a place (for example a second office) are stored only on your phone, in the same way. You can turn this off in Settings or in your phone's system settings.

Calendar

If you choose Holiday suggestions, BeenThere reads one calendar you pick, only on your phone, to offer "Mark today as a holiday?". It never changes your calendar and never sends it anywhere.

Notifications, widget, app lock

Reminders and the home-screen widget are generated on your phone. App lock uses your phone's own screen lock.

Backups you make

"Back up" writes a file where you choose, optionally encrypted with a passphrase you set. If you use Online features, you can choose to include your online recovery code in an encrypted backup; it is never written into a backup that is not encrypted. We cannot recover a lost passphrase.

Optional Online features

Online features are off until you turn them on. Then BeenThere connects to the BeenThere server (beenthere.online, or an address you enter).

• Your phone creates an anonymous online identity. The keys stay on the phone; the recovery code is yours alone.
• You prove your organisation with an email address. We send a one-time code. We keep only a scrambled fingerprint of the email and its domain, never the address itself. The code email is sent through our email provider (Brevo).
• An email fingerprint belongs to one online identity at a time. If you verify the same email again from a new identity (for example after losing your phone), the verification moves to the new identity and the earlier one is no longer marked as verified. Anyone who can receive a code at that address can do this, which is why a code is always required.
• Server logs record technical events, such as that sending a code failed or that a rate limit was hit, without email addresses, codes, group content or account details.
• Traffic to the server passes through Cloudflare, which hides the server's address and filters attacks. Cloudflare can see connection details (network address, timing, request sizes and the short-lived sign-in token) but not group content, which is encrypted on your phone before it is sent.
• Groups: names, plans, answers and the status you choose to share are encrypted on your phone. The server stores only unreadable data, who is in which group, sizes and timing, and sees your network address while you are connected. Shared items are deleted automatically about 60 days after their month.
• Sharing your office status is off by default. If you turn it on, group members see only "In office" or "Not in office" per day, never the reason, your location, goals or places.
• Group members can read what members share with the group.

Sharing and advertising

No ads, no analytics, no trackers, no selling or sharing of data.

Your choices and deletion

You can go offline at any time. To delete your online data (account, shared items, and groups you own) use Settings > Online features > Go offline, with "Also delete my online data" switched on. See how to delete your account. Uninstalling the app deletes everything stored on the phone. Backup files you created are yours to delete.

Children

BeenThere is not directed at children.

Changes

We will update this page and the app's Privacy screen before any change in how data is handled.