Belay

Legal

Privacy Policy

Last updated 7 August 2026

Belay helps you break large tasks into small steps. This policy explains what the app does with your information, in plain terms.

The short version. Belay has no accounts and no server that stores your data. Almost everything stays on your phone. The exception is the AI coach: when you ask Belay to break down a goal, plan your day, or help you when you are stuck, the text of that request is sent to Google's Gemini API to generate the reply. Please read section 3 — it explains what Google may do with it.

1. Who is responsible

Belay is developed and operated by the developer listed on its App Store page, who is the data controller for the purposes of KVKK and the GDPR. The contact address is hello@belay.today, also given in section 9.

2. What stays on your device

The following never leaves your phone. It is stored in the app's own private storage, and it goes no further unless your own device backup includes it:

way, and the coaching tone you chose

variability, resting heart rate and workout minutes read from Apple Health or Health Connect, with your permission

before it refreshes

There is no Belay account, no login and no profile of you on any Belay server.

3. What is sent to the AI coach ⚠️

To generate a decomposition, a daily plan, or "I'm stuck" guidance, Belay sends the request through its own server to Google's Gemini API.

What is sent:

connected a calendar — so the coach can plan around them

What is never sent: any health information. Sleep, heart-rate variability, resting heart rate and workout minutes stay on your device. Belay's server refuses them outright if anything ever tries to send them.

No identifier of you is sent to Google. Belay's server attaches a random identifier to limit how often a single installation can make requests, and that identifier is not passed on to Google. Google receives the text of the request and nothing that names you.

⚠️ 3.1 What Google may do with it

Belay currently uses Google's free Gemini tier. Under Google's Gemini API Additional Terms, on that tier:

improve and develop Google's products, services and machine-learning technologies.**

Google states that it disconnects the content from the account, API key and project before human review.

We are telling you this plainly rather than burying it, because it is the single most important thing to understand about the coach. Do not type anything into Belay you would not want handled that way. In particular, be aware that if you connect a calendar, the *titles* of today's events are included — if your calendar contains medical appointments or anything else you consider private, consider not connecting it, or removing the connection in Settings.

Google's terms: https://ai.google.dev/gemini-api/terms

If Belay moves to Google's paid tier, that changes — on the paid tier Google does not use the content to improve its products. This policy will be updated if and when that happens.

3.2 Belay's own server

Requests pass through a Cloudflare Worker operated for Belay, which holds the API key and the coach's instructions. It stores nothing — it forwards the request, returns the reply, and keeps no copy.

4. Calendar

If you connect Google Calendar, Belay asks for permission to read and to create events. It reads today's events to plan around them, and — if you tap "Add today's plan to my calendar" — creates events for your plan blocks. It removes only events it created itself.

If you connect your device calendar instead, the same happens locally and nothing is transmitted.

You can disconnect either at any time in Settings. Disconnecting deletes Belay's cached copy of your events.

5. Health data

With your permission, Belay reads sleep, heart-rate variability, resting heart rate and workout data from Apple Health or Health Connect, to show you trends and a productivity score.

This information is used only inside the app, on your device. It is not transmitted anywhere, not shared with anyone, and never used for advertising, marketing or data mining. You can revoke access at any time in your device's system settings.

6. Subscriptions

Purchases are handled by Apple. Belay uses RevenueCat to check whether a subscription is active. RevenueCat receives the transaction and an anonymous identifier it generates; Belay sends it no name, no email address and none of your content.

7. What Belay does not do

8. Deleting your data

Settings → Reset all data erases your goals, plan, profile answers, water log, cached calendar events, health snapshot and preferences from your device.

One value is deliberately kept: a random string used to limit request rates. It contains no name, no history and nothing that could describe you, and clearing it would only reset a rate limit.

Because there is no account and no Belay server holding your data, deleting the app removes everything else.

Content already sent to Google is subject to Google's terms and retention practices, which Belay does not control.

9. Your rights and contact

Under KVKK and the GDPR you have the right to ask what personal data is processed about you, to have it corrected or erased, and to object to processing. Since Belay holds nothing on a server, most of these are exercised directly through the app (section 8). For anything else, write to hello@belay.today and expect a reply within 30 days, which is the period KVKK and the GDPR allow.

10. Children

Belay is not directed at children under 13, and no part of it is designed for them.

11. Changes

If this policy changes materially, the date at the top changes and the updated version appears at this address. The most likely change is the one described in section 3.1.

Back to Belay