HeyBean privacy notice
Cookie Notice
Effective date: August 13, 2026
HeyBean uses a small number of first-party cookies and similar browser-storage technologies to keep the service secure, remember choices, support sign-in, and understand whether our pages work.
| Category | Examples and purpose | Typical duration |
|---|---|---|
| Strictly necessary | Session, security, request-forgery protection, rate limiting, and account authentication. The service may not work correctly without these. | Session-based or the configured security lifetime. |
| Preferences | Theme, calendar display, active workspace, onboarding voice preference, and other choices stored in cookies or local storage. | Until expiration, replacement, sign-out, or browser clearing. |
| First-party measurement | After you allow measurement, a random visitor identifier, bounded page path, referring origin, campaign parameters, platform and app version, response status, and a one-way hash of IP address used for aggregate product and conversion measurement. Form values, task and calendar content, notes, and Bean conversations are excluded. | The visitor cookie is configured for up to one year. Related server records follow our retention criteria. |
| Local account storage | If you choose “Remember me,” the web app may store an authentication token in local storage; otherwise it uses session storage. Dashboard caches and cursors improve continuity and performance. | Until expiration, sign-out, account deletion, or browser clearing. |
No advertising cookies
HeyBean does not currently use third-party behavioral-advertising cookies, sell personal information, or share personal information for cross-context behavioral advertising. Embedded providers may receive ordinary network information when you actively use their feature, such as payment, calendar, bot-protection, map, or voice services.
Your controls
The web app asks before it starts optional measurement. Choose “No thanks” to continue without it. In the mobile app, use Settings → Account → Help improve HeyBean to stop or restart measurement. Turning measurement off clears queued mobile events; browser and device controls can also clear stored choices. Blocking necessary storage may still sign you out, reset preferences, or prevent security and voice features from working.
Because HeyBean does not currently sell or share personal information for targeted advertising, a Global Privacy Control signal does not change those practices. We treat a recognized signal as an opt-out request when applicable law requires it. If our practices change, we will update this notice and provide the controls required by law.
Changes and contact
We may update this notice when storage technologies or legal requirements change. Questions may be sent to bean@heybeanapp.com. See the Privacy Policy for the complete description of our data practices.