1. Introduction

Beside is a consumer chatbot that appears as a contact in your Messages app, operated by Loki Labs ("Loki", "we", "our"). You text Beside like a friend and, when you share your live location, it watches the map around you and texts you when something you care about is near. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy applies to the Beside service and to the beside.chat website.

2. Data Controller

For the purposes of the EU General Data Protection Regulation (GDPR), the Polish Personal Data Protection Act, and the UK GDPR, the data controller is:

Loki Labs
Warsaw, Poland
Email: privacy@lokimessages.com

The supervisory authority in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), uodo.gov.pl.

3. Information We Collect

Contact information

The phone number or iMessage handle you text Beside from, which is how Beside reaches you
Any name or details you choose to share in conversation

Messages and metadata

The messages you send to and receive from Beside, including photos and other attachments
Message timestamps, delivery and read receipts, and reactions
The standing watches and preferences you ask Beside to keep

Location

Coarse and, with your permission, precise live location, shared through Apple's location sharing in Messages
Location is used to give location-aware recommendations and to run the standing watches you set up. You can stop sharing at any time.

Billing information

Payment method details are processed by Stripe; we store only a token reference and the last 4 digits of the card
Credit balance, invoice history, usage metrics, and tax identifiers

Technical data

IP address, user agent, device identifiers
Cloudflare and Sentry logs for security and reliability

4. How We Use Information

To deliver, operate, and improve Beside
To run your standing watches and send location-aware recommendations
To protect against abuse and keep the Service secure
To bill you and comply with tax and accounting obligations
To send you the messages and alerts you asked for
To respond to support requests
To comply with legal obligations and enforce our Terms

We do not sell personal information, and we do not use your messages to train third-party AI models.

5. Legal Bases for Processing (GDPR)

Under the GDPR and the UK GDPR, we process personal data on the following legal bases:

Contract (Art. 6(1)(b)): to provide the Beside service you asked for
Legitimate interests (Art. 6(1)(f)): to secure the Service, prevent fraud and abuse, and improve reliability
Legal obligation (Art. 6(1)(c)): to retain records required by tax, accounting, or communications law
Consent (Art. 6(1)(a)): where required, for example for precise location sharing

6. AI Model Providers

Beside routes your messages to third-party AI model providers (such as Anthropic) to understand what you ask and to generate a reply. These providers process the message text needed to generate a response under their own privacy and data-retention terms. Where supported, we use the providers' zero-retention or no-training endpoints.

7. Sharing

We share information only with:

Service providers: Cloudflare (hosting and email), Apple (iMessage delivery), Stripe (billing), Sentry (error monitoring), PostHog and Google Analytics (website analytics), mapping and place-data providers (such as OpenStreetMap and Google Maps), and the AI model providers described above
Legal disclosures: when required by law, subpoena, or to protect rights and safety
Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you

8. Retention

We retain your information while your number is active with Beside and for a reasonable period afterward to satisfy legal and audit obligations. You can ask Beside to delete your conversation and data at any time, or email privacy@lokimessages.com. Backups are purged on a rolling basis (typically within 30 days).

9. Security

We use industry-standard controls including TLS for data in transit, encryption at rest for our Cloudflare storage, ES256-signed session tokens, and least-privilege access for personnel. No system is perfectly secure; please report suspected vulnerabilities to security@lokimessages.com.

10. Your Rights

To exercise any right below, contact privacy@lokimessages.com. We may need to verify your identity before responding and will reply within the timeframes required by applicable law.

EU / EEA / UK residents (GDPR, UK GDPR): you have the right to access, rectify, erase, restrict, and object to processing of your personal data; the right to data portability; and the right to withdraw consent at any time (withdrawal does not affect the lawfulness of prior processing). You also have the right to lodge a complaint with your national supervisory authority. In Poland, this is the President of UODO (uodo.gov.pl).

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it, to opt out of any sale or sharing, and to limit our use of sensitive personal information (including precise location). We do not sell personal information. Authorized agents may submit requests on your behalf with proper documentation.

Other jurisdictions: you may have similar rights under local law. We honor substantive rights on a global basis where operationally feasible.

11. Children

Beside is not directed to children. You must be 18 or older to use Beside, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact privacy@lokimessages.com and we will delete it.

12. International Transfers

We operate primarily on Cloudflare's global edge network, which means your data may be processed in countries outside the EEA (including the United States). Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards under Chapter V of the GDPR, such as the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or processor commitments under the EU to U.S. Data Privacy Framework where applicable.

13. Cookies and analytics

beside.chat uses PostHog, a privacy-friendly product-analytics service, together with Google Analytics, to understand how the site is used so we can improve it. With your consent, these services store analytics identifiers in cookies and in your browser's local storage; they are used only to count and understand visits — never to sell your data. In the EU, EEA, UK and Switzerland, analytics loads only after you accept it in the consent banner; elsewhere you are given notice and can decline at any time. Declining stops analytics and clears the identifiers.

A single strictly necessary cookie may also be used to keep you signed in if you open a billing or account portal; it is exempt from consent under the ePrivacy Directive. We do not use advertising cookies or third-party advertising trackers.

14. Changes

We may update this policy from time to time. Material changes will be communicated by text or on beside.chat at least 30 days before they take effect.

15. Contact

Loki Labs
Warsaw, Poland
Privacy requests: privacy@lokimessages.com
General: loki@beside.chat