Privacy Policy
Last updated: August 3, 2026
This Privacy Policy explains how Behold, published and operated under the name Behold in Québec, Canada (“Behold,” “we,” “us,” or “our”), collects, uses, stores and discloses information when you use the Behold Android application and related support pages (the “Services”).
1. Information we process
Account information
When you create an account, we process your first and last name, email address, Firebase user identifier and authentication information needed to sign you in. Password authentication is handled by Firebase Authentication; Behold does not receive your password in readable form.
Favorites and preferences
If you are signed in, Behold stores the affirmations and visualizations you mark as favorites so they can be synchronized with your account through Cloud Firestore.
Subscription information
If you interact with Behold Premium, we process subscription status, product identifier, entitlement status, purchase or restoration events and an app-user identifier through Google Play Billing and RevenueCat. We do not receive or store your full payment-card number. Payment credentials are handled by Google Play.
Technical information
Our service providers may process limited technical information needed for authentication, database, subscription, security, fraud-prevention and diagnostic functions. Depending on provider configuration, this may include device or app identifiers, IP address, operating-system information, timestamps, transaction identifiers and diagnostic events.
Information not intentionally collected
Behold does not currently request access to precise location, contacts, photos, camera or microphone. We do not record your voice or intentionally collect medical records or clinical health information through the app.
2. How we use information
- Create, authenticate, maintain and secure your account.
- Display your profile and synchronize favorites.
- Provide, verify, restore and manage Premium access.
- Respond to support, privacy and deletion requests.
- Maintain, troubleshoot, protect and improve the Services.
- Comply with legal obligations and enforce our Terms.
3. Service providers and disclosures
We use Google Firebase Authentication, Google Cloud Firestore, Google Play Billing and RevenueCat. These providers process information on our behalf or as described in their own policies. We may also disclose information where reasonably necessary to comply with law, respond to lawful requests, protect users or the Services, investigate fraud or security incidents, or complete a business reorganization with appropriate safeguards.
We do not sell personal information and do not use it for third-party targeted advertising.
4. Legal bases
Where applicable law requires a legal basis, we process information to provide the Services you request, manage our relationship with you, pursue legitimate interests such as security and service improvement, comply with law, and obtain consent where required.
5. Retention and deletion
We retain account information and favorites while your account is active and for a limited period afterward when reasonably necessary for security, disputes, fraud prevention, legal compliance or reliable processing of a deletion request. Subscription and transaction records may be retained by Google Play, RevenueCat or us for financial, fraud-prevention, support or legal purposes.
When deletion is completed, we delete or de-identify account-linked data under our control unless retention is legally required or reasonably necessary for the purposes above.
6. Security
We use reasonable administrative, technical and organizational safeguards, including access controls and security capabilities provided by Firebase, Google Cloud, Google Play and RevenueCat. No system can be guaranteed completely secure.
7. International processing
Providers may process information in Canada, the United States and other countries where they or their subprocessors operate.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict or obtain a copy of certain personal information, and withdraw consent where applicable. You may manage or cancel Premium through Google Play. Cancelling does not delete your Behold account. For deletion, see our Account Deletion page.
9. Children
Behold is not directed to children under 13 or a higher minimum age required by local law. We do not knowingly collect personal information from children below the applicable minimum age.
10. Changes
We may update this policy as Behold or legal requirements change. We will post the revised policy here and update the date above.