Privacy
What we don't collect
Bead has no accounts, no sign-in, no analytics, no crash reporting, and no advertising or tracking SDKs. Your lists, tasks, notes, attachments and settings stay in private on-device storage and go when you uninstall it. We operate no server for Bead, so there is nowhere for any of it to be sent.
Network use
Bead works entirely offline and makes no network connections of its own — there is no sync, no account check and no telephone-home. The Android build ships with Google's Cast component for a future feature; it stays switched off in this build, with no receiver configured, so the framework is never started, discovers nothing and contacts nothing.
Notifications
Bead never sends one, on either platform. There is no push service, no notification permission, no alarm and no background worker in it — which also means there is no device token, no push identifier and no delivery record anywhere.
Your lists, and moving phones
On Android, Bead's database and settings ride Android's own backup and transfer to your next phone, so your lists arrive without an account; a direct phone-to-phone transfer carries the attachment files as well. On iPhone the same files sit in the app's own storage and travel in whatever backup you have turned on. That backup is between you and Google or Apple under their policies — Bead itself uploads nothing and receives nothing.
Photos and files you attach
Attachments arrive through the system pickers, which hand the app exactly what you selected and nothing else. Bead keeps a copy in its own private storage, the original stays where it was, and removing an attachment deletes only Bead's copy.
Permissions
Bead never shows you a runtime permission prompt on Android — the kind the phone raises mid-use to ask for your camera, microphone, location, contacts or files. Bead asks for none of those. Its own manifest declares no permissions at all.
Google Play's store listing has a separate section headed “This app has access to”. That lists install-time entries declared in the app's manifest: they are granted when the app is installed and never prompt you. Bead's come from the bundled Cast component described above, and are:
- Full network access and view network connections — required by that component. Bead opens no connections; with the component switched off, nothing in the app uses them.
- A foreground service entry belonging to the same component, kept inert: the media session and its notifications are disabled, so that service is never started. Notification-free is not negotiable here.
None of these read, collect or transmit anything personal.
This website
No accounts, no sign-ups, and no advertising or tracking SDKs. Page loads are counted anonymously — the published counter stores no IP addresses and no identifiers.
Our web server keeps a short-lived request log — the page requested, the time, the result, the browser's user-agent string, and the IP address the request came from. We use it to keep the site running and to look into abuse such as scraping or flooding. It is not used for advertising, profiling or analytics, is not linked to any account, and is deleted after 30 days.
The site is served through Cloudflare, which is covered by its own privacy policy, not this one.
Children
Bead is a general-audience app. It collects nothing from anyone, including children.
Changes
Material changes appear on this page with a new date.
Contact
Published by Zone7 Studios Pty Ltd (ABN 36 700 457 147), a company registered in Australia.