Privacy Notice and Terms of Use
Last updated: 31 August 2026
Who is responsible for your data
The controller of the personal data described here is bit platform, Sixmastraat 15, 8932 PA Leeuwarden, Netherlands, reachable at [email protected] or +31684207362. If you have a question or a concern about how we handle your data, contact us and we will look into it. You also have the right to lodge a complaint with your data protection supervisory authority.
What we hold, why, and for how long
Your account - the e-mail address or phone number you sign in with. Everything else on your profile is optional and entirely up to you: a display name, a picture, and if you want them, your gender and date of birth. You can add, change or clear any of it at any time, and the app works the same without it. If you set a password, turn on two-factor authentication or register a passkey, we hold what is needed to check it. We hold all of this to give you the service you asked for (performance of a contract). It lives as long as your account does; an account that is never confirmed is deleted automatically after 48 hours.
Your sessions - for each device you sign in on: the IP address, the country and city our CDN reports for it, a description of the device and browser, your language, the app version, and the times you signed in and were last active. We hold this to keep you signed in, to show you where your account is in use and let you sign a device out remotely, and to investigate abuse (legitimate interests). Each session is deleted 14 days after it was last used, and immediately when you sign that device out.
Your profile picture, if you upload one. Location data and other metadata are stripped from the image on upload. It is served from an address derived from your account identifier and may be held briefly by our CDN. Kept for as long as your account (contract).
Your organisation memberships - which organisations you belong to or have been invited to, and whether you accepted (contract). Kept while the membership exists.
Push notification registrations - a device identifier and the address your device's push service delivers to, so we can notify you (consent, given by enabling notifications). A registration expires one month after it was last renewed.
Messages we send you - sign-in codes, confirmation links and similar. While a message is queued for delivery, its recipient address and its content sit in our job queue (contract). The entry is deleted within a day of the message being sent, and within a day of us giving up on one that could not be sent.
Technical logs - records of errors and requests, which carry your account identifier, your session identifier, the IP address, the page you were on, and your device, time zone, language and app version. We hold these to keep the service working and secure (legitimate interests). We keep them only as long as they are useful for diagnosing problems and keeping the service secure, and they are not used to build a profile of you.
Your conversations with the AI assistant, including anything you type or attach to them, which are sent to the AI provider named below to produce a reply (legitimate interests in offering the feature). Do not put anything in a chat that you would not want leaving our systems. What that provider keeps, and for how long, is governed by its own terms.
We do not sell your personal data, and we do not use it to make automated decisions that have legal or similarly significant effects on you.
Who else receives your data
Running this service means other companies process parts of your data on our behalf. Each of them is bound by a contract that limits what they may do with it. Some are based outside the EEA, in which case the transfer relies on the safeguards permitted by Chapter V of the GDPR.
Cloudflare - sits in front of this service, so every request passes through it. It also tells us the approximate country and city of your IP address, and caches some responses at its edge.
Our e-mail provider - delivers the messages we send you.
Our SMS provider - delivers text messages, where you gave us a phone number.
Our hosting and storage providers - run the servers and store the files.
Firebase Cloud Messaging (Google) and Apple Push Notification service - carry push notifications to your device.
The AI provider configured for this deployment - receives the content of your conversations with the assistant, and any audio or images you send it.
Azure Application Insights (Microsoft) - receives error reports and, only if you agree to usage analytics, telemetry about how the app is used.
Google reCAPTCHA - checks that sign-ups come from a person rather than a script.
Google advertising - serves ads, and only after you have agreed to advertising.
Cookies and what we store on your device
Some of what we store on your device is required for the app to work at all, and needs no permission. Everything else waits until you agree to it.
Sign-in - keeps you signed in. Strictly necessary; cleared when you sign out.
Language and appearance - remembers the language, theme and accent colour you chose, so the app looks the same next time. Strictly necessary for the preference you asked us to remember.
Usage analytics - lets us recognise your device between visits so we can see which pages are used. Only after you agree, and you can withdraw at any time. Error reporting does not depend on it and does not identify your device.
Advertising - identifiers set by the advertising script. Nothing is loaded and nothing is stored until you agree, and you can withdraw at any time.
You can change these choices whenever you like under Privacy settings. Withdrawing is as easy as agreeing was, and it does not affect anything we did while your agreement was in place.
Your rights
Get a copy of your data. Download everything we hold about you as a file, from Privacy settings. It is machine-readable, so you can take it elsewhere.
Correct it. Your profile, e-mail address and phone number are editable in Profile and Account settings.
Delete it. Deleting your account from Account settings removes your account and everything held under it. Two things survive it for a while: messages already queued for delivery, and technical logs, both of which age out on the schedules above.
Object, or ask us to restrict what we do with data we hold on the basis of legitimate interests. Write to us and we will answer.
Withdraw consent at any time, for anything you agreed to.
We answer requests within one month. If a request reaches us by e-mail rather than through the app, we may need to establish that it really is your account before we act on it.
Changes to this notice
When this notice changes we update the date at the top. If a change matters to you - a new recipient of your data, a new purpose, a longer retention - we tell you before it takes effect rather than leaving you to notice.
End-User License Agreement
This agreement is between you (the "user") and bit platform, Sixmastraat 15, 8932 PA Leeuwarden, Netherlands, phone +31684207362, for the use of this application (the "Software"). By using the Software you agree to it.
License grant
You are granted a non-exclusive, non-transferable licence to use the Software for the term of this agreement.
Ownership
bit platform retains all rights, title and interest in the Software, including all intellectual property rights in it.
Restrictions
You may not: (a) copy the Software, except as necessary to use it as intended; (b) distribute, rent, loan, lease, sell, sublicense or otherwise transfer the Software or any part of it; (c) reverse engineer, decompile, disassemble, modify, translate or attempt to discover the source code of the Software, or create derivative works from it; or (d) remove any proprietary notices or labels.
No warranty
The Software is provided "AS IS", without warranty of any kind, express or implied, including the warranties of merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Software will be error-free or that its use will be uninterrupted.
Limitation of liability
We are not liable for any damages arising out of the use of, or inability to use, the Software, including direct, indirect, incidental, special or consequential damages, even if we were advised of the possibility of them. Nothing here limits liability that cannot be limited by law.
Termination
This agreement remains in effect until terminated. Upon termination you must stop using the Software and destroy any copies in your possession. Your rights over your personal data survive termination.
Contact
Questions about this notice, this agreement, or your data: [email protected], +31684207362, bitplatform.dev/contact-us, or write to bit platform, Sixmastraat 15, 8932 PA Leeuwarden, Netherlands.