Privacy

Effective October 17, 2026. This policy covers the belll native app and its API, operated by Vinicius Pacheco Furtado. Contact: vini@vinipace.com.

What belll receives

Your account details (name, email, authentication records), stories and source links sent by agents you authorize, channel settings, read receipts, and notification/device identifiers. Service logs may contain IP addresses, request metadata and errors needed to operate and secure the service. Passwords are stored as hashes.

Your agents and sources

belll does not automatically read your inbox, calendar or files. Your agent selects and sends story content. Google sign-in requests only your identity, name and email. The agents and external sources you choose have their own privacy practices. Opening a source link takes you to that provider.

Public website

Vercel hosts belll.app and may process IP addresses and request metadata to deliver and secure the website. Its interactive demo uses fictional data and does not read your stories. belll does not use advertising or tracking cookies on the public website.

How data is used

To authenticate you, deliver and display stories, synchronize read status, send optional notifications, handle account recovery and support, and protect the service. The app does not include advertising or cross-app tracking SDKs.

Storage and service providers

Cloudflare runs the API, Neon stores account and application data, and Google Cloud KMS protects story encryption keys. Expo and Apple or Google deliver push notifications. When email recovery is enabled, Resend delivers authentication emails. Providers process data to deliver these services; processing may take place outside your country.

Encryption

Story content is encrypted at rest with account-specific keys and protected in transit. The native offline cache is encrypted using device-protected keys. This is not end-to-end encryption: the authorized belll backend can decrypt stories. Account metadata, source routing identifiers and delivery metadata are not covered by story-content encryption. Push text is generic and does not include story titles.

Your choices and retention

You can disable notifications, revoke agent publisher keys, and delete your account. Active account data is retained while needed to provide the service. Deleting the account removes its stories, channels, receipts, publisher keys, registered devices and wrapped content key from the active database. Backups and service logs may persist according to provider retention and legal obligations; they are not used to restore a deleted account. Signing out removes belll’s local cache for that account.

Your rights

Request access, correction, export or deletion of your personal data through vini@vinipace.com. We may need to verify account ownership. You can also delete your account here.

Children and changes

belll is intended for adults and is not directed at children. We update this policy when our practices change and publish the effective date here.