BePal
Privacy policy
Last updated: 27 October 2026. This policy covers the bepalapp.com website and the BePal waitlist. The app has its own privacy policy.
Who we are
ZafirAI Services S.L. (NIF B27638980, address: Calle General Palafox 8, Local, 08860 Castelldefels, Barcelona, Spain) is the controller of the data collected on this website. Contact: info@zafiraiservices.com.
What we collect
When you join the waitlist: your email address, the language you chose (English or Hungarian), whether you have confirmed your signup, the time you signed up and confirmed, the version of the consent text you agreed to, and the random codes used in your confirm and unsubscribe links.
We don't ask for your name on this website and we don't collect any health data here.
To stop abuse, we briefly keep a scrambled (hashed) form of your IP address together with the hour, to count signups. It is deleted automatically after about two hours.
Our hosting provider keeps standard technical request logs (including IP addresses) for up to 30 days to run and protect the service.
Why, and on what basis
We use your email address to confirm your signup and to email you once, on release day, with the waitlist offer. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
The abuse counter and the technical logs rely on our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
We don't send newsletters, and we don't sell or share your data.
How long we keep it
Unconfirmed signups are deleted automatically after 30 days.
Confirmed addresses are kept until the launch email has been sent, and deleted within 3 months after that.
If you unsubscribe, your address is deleted straight away.
Who processes it
Google (Firebase Hosting, Cloud Functions, Firestore): the website and the waitlist data are stored in the European Union, in Belgium.
Resend (Resend, Inc., USA) sends our emails from its infrastructure in the EU (Ireland). As a US company, any transfer is covered by the Standard Contractual Clauses in its data processing agreement.
Both act only on our instructions, under data processing agreements.
Cookies
This website uses no cookies, stores nothing in your browser, and has no analytics, advertising or tracking tools.
Your rights
You can ask for access to your data, and to correct, delete or restrict it, object to its use, or receive it in a portable format. You can withdraw your consent at any time with the unsubscribe link in our emails or by writing to us.
You can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the authority where you live; in Hungary that is NAIH (www.naih.hu).