Privacy & Safety
What BellTide is, what it is not, and how it keeps you safe.
What BellTide does
BellTide calls you at the times you schedule — typically a short 30–45 second
check-in to ask whether you've completed a planned activity. That's it. It is a
simple, outbound accountability tool. Morag is the default voice persona.
- You set a schedule of activities in the app.
- BellTide calls your mobile number at each checkpoint time.
- You say yes (done) or no (not done). The call ends.
- You can skip a day, delay a call, or stop the schedule via the app or by SMS.
What BellTide does not do
BellTide does not store what you say. Morag does not build a memory of your calls, track your emotional state over time, or reference previous conversations. Each call is a fresh, bounded interaction.
- No transcript storage. The only text captured is your final response in a call — used briefly to classify "done" or "not done", then not retained.
- No relationship history. Morag does not know what you said last Tuesday. Calls are stateless from the AI's perspective.
- No profiling. BellTide does not analyse your patterns, infer your mood, or build a behavioural model.
- No data sales. Your data is never shared with or sold to third parties for any purpose.
- No recordings. Calls are not recorded or stored as audio.
What we store
We store the minimum necessary to operate the service:
- Your name, email address, and phone number.
- Your schedule — the activity names and times you set.
- Call outcomes: "done", "not done", "no answer" — plus the time and date.
- Your app preferences (theme, timezone, notification choices).
Your phone number is used only to place calls and send SMS check-ins you have
opted into. It is never displayed in logs or error messages.
If you are struggling
BellTide is an accountability tool, not a mental health service. If you are
in distress or having thoughts of harming yourself or others, please reach
out to a friend, a loved one, or an emergency service — not BellTide.
BellTide listens for distress signals during calls. If it detects that you may
be struggling, Morag will acknowledge your feelings warmly, direct you to seek
support, and end the checkpoint without asking you to complete tasks. No content
of what you said is stored.
The admin is notified that a concern was detected so they can follow up with you
directly — but is never told what you said.
Designed for neurodivergent users
BellTide is built with ADHD and neurodivergent adults in mind. Short calls,
predictable structure, and multiple escape mechanisms (passphrase, SMS delay,
skip day) are built in specifically to reduce anxiety rather than add to it.
You are always in control of when and how BellTide reaches you.
Infrastructure and security
- Hosted on Hetzner Cloud (EU, Germany/Finland). Databases are encrypted at rest.
- All web traffic is HTTPS-only.
- Backups run nightly and are stored in EU-region object storage.
- Voice calls are routed through Twilio (US). This is a pragmatic vendor choice — no credible EU equivalent exists for this call type at this scale.
- Voice synthesis uses ElevenLabs (US). Voice data is not linked to your personal identity — it is used only to generate the audio you hear.
- AI responses during complex calls use Anthropic's Claude API (US). No personally identifiable information is included in API requests.
Your rights
- Access. You can view all your data in the app at any time.
- Delete. You can delete your account and all associated data by contacting us. Your data is removed within 30 days.
- Opt out. You can stop calls, SMS, or email notifications from within Settings at any time.
- Export. Schedule export will be available in a future version of the app.