Kebijakan Privasi

Effective: 5 October 2026

Isi dokumen ini hanya disediakan dalam bahasa Inggris. Terjemahan apa pun di bagian lain situs ini hanya untuk kemudahan — versi bahasa Inggris adalah teks hukum yang berlaku.

BetaSuite ("we", "us") provides the BetaSuite mobile app ("the App") for iPhone, iPad and Android. There is no account or sign-in. Your projects, sessions, notes, markers, photos and videos are stored on your device. A few features send data off the device. This policy lists each one, what is sent and where it goes.

When you use one of those features, data goes from your device to the service that provides it, and that service handles it under its own privacy policy, which we link below. We process your personal information in accordance with applicable privacy and data-protection laws in your country of residence.

BetaSuite is based in South Australia, Australia, and handles personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you use BetaSuite from the European Economic Area (EEA), the United Kingdom, California, or another region with its own data-protection law, the additional information and rights in section 9 also apply to you. For the limited personal information BetaSuite itself handles, BetaSuite is the data "controller" for the purposes of the EU and UK General Data Protection Regulation (GDPR).

In short

• No account, no ads, no tracking and no product analytics of our own. We don't sell or share your personal information.
• BetaSuite has no server that stores your projects, recordings or notes.
• Photos and videos are also saved to your camera roll by default. You can turn that off.
• Cloud AI is used only for the features you allow. On supported iPhones and iPads, Apple Intelligence runs on the device.
• Weather and place-name lookups send coordinates, not your name or any ID, to the services named in section 3 (they still see your IP address, as with any web request). Besides the stamps, they also run when you open Overlay Settings and when you import a photo or video that has GPS data, whatever your settings.
• Crash reports are off unless you turn them on.
• Anything you post to the feedback board is public. In version 1.3.5 and earlier, a company name the App doesn't recognise is also posted there automatically as a brand suggestion, except while Confidential Mode is on for everything or for the project you're working in (section 5).

1. What stays on your device

Feedback entries, notes, voice memos, photos, videos, screen recordings, projects, sessions, markers, test-protocol results, and the device details the App adds to them (model, OS and app version; battery and network state only if you turn that on). None of it is stored on a BetaSuite server.

• Encrypted database. Entries, notes, transcripts, sessions and project data are kept in a database encrypted with AES. The key is created on your device and held in the iOS Keychain or Android Keystore.
• Media files. Photos, videos and recordings are ordinary files in the App's own folder (on iPhone and iPad you can see them in the Files app). Your device's own encryption protects them; the App does not encrypt them separately.
• Location. The App uses your phone's location services only after you allow location access: for the weather and location stamps, the weather snapshot at the start of a session, the automatic season label and the live preview in Overlay Settings. Coordinates stamped on a capture stay in that file unless you share it. Weather and place names for an imported photo or video come from the file's own location data, without using location services (section 3).

What we never collect

BetaSuite has no server that stores your projects, recordings or notes. The only online service BetaSuite operates is a small Cloudflare Worker for the public feedback board and upvote counts (section 5). We never see your AI requests or the files you save to a folder. We do not sell or trade personal information, run ads, or track you across other apps or websites. The App contains no product-analytics SDK and sends us no feature-usage or behavioural events (on Android, Google's ML Kit barcode scanner sends Google its own diagnostics; see section 3).

2. Saving and sharing files

Camera roll (on by default)

New photos and videos are saved in the App and, by default, also to your device's photo library (camera roll). If your photo library syncs to iCloud Photos, Google Photos or another service, those copies sync too, under that provider's terms. You can untick this during setup, or turn it off at any time in Settings → Save Destinations → Camera Roll. Save Destinations is hidden while Confidential Mode is on, so change it before you turn Confidential Mode on. Reports are never saved to the photo library.

A folder you choose

In Settings → Save Destinations → Custom Folder you can pick a folder with the system file picker, and captures and reports are copied there too. On iPhone and iPad that can be iCloud Drive or a folder on the device (Google Drive, OneDrive and Dropbox folders usually can't be picked there); on Android, any folder the picker shows, including Drive, OneDrive or Dropbox. That provider's own app syncs the folder. There is no in-app cloud sign-in: BetaSuite never signs in to those services and never sees the files.

Sharing and exporting

Reports, backups and other exports leave the App only when you share, save or email them yourself, through the system share sheet or your own mail app. Where they go after that is up to you and the app or service you pick.

3. Weather, place names, dictation and crash reports

Weather

The weather stamp on captures and the weather snapshot at the start of a session are on by default and work only if you allow location access. The App then sends your coordinates, with no identifier, to a weather service while the camera is open and when a session starts. Opening Settings → Camera & Recording → Overlay Settings also looks up your current location and weather for its live preview, whatever your stamp settings (if you haven't decided on location access yet, it asks). When you import a photo or video that contains GPS data and a date, the App always looks up the weather for that place and time, whatever your settings and even if you haven't allowed location access. For anything taken more than two days ago it sends the coordinates and capture date to Open-Meteo's historical-weather service, on every device. For anything newer it uses the services below.

• On iPhone and iPad: Apple Weather (Apple's WeatherKit service) first.
• Otherwise, including on Android: Open-Meteo. The App can also use OpenWeatherMap, but only in builds set up with an OpenWeatherMap key; current releases are not.

Wherever weather appears in the App, the source's attribution is shown with it: for Apple Weather, the Apple Weather symbol, the "Weather" wordmark and a link to Apple's data-source page. Turn the weather stamp and the session snapshot off in Settings → Camera & Recording → Overlay Settings. That doesn't stop the preview lookup or the lookups for imported photos and videos. Each weather service sees your IP address, as with any web request.

(Weather) Apple Weather — lihat sumber data (terbuka di tab baru)

• Apple Weather privacy notice
• Apple Weather data sources (legal attribution)
• Open-Meteo terms
• OpenWeatherMap privacy policy

Place names

The App asks your phone's built-in geocoding service to turn coordinates into a town, region and country in three cases. While the camera is open, if the location stamp is on (it is off by default; Settings → Camera & Recording → Overlay Settings → GPS / location). Whenever you open Overlay Settings, for its live preview, whether or not the location stamp is on. And whenever you import a photo or video that contains location data, whatever your settings. On iPhone and iPad that is Apple's service; on Android it is the one supplied with your device, usually Google's. It receives the coordinates under its own privacy terms.

Dictation

The microphone button on text fields uses your phone's own speech recognition: Apple's on iPhone and iPad; on Android, the one supplied with your device, usually Google's. Depending on your device, language and settings, the audio may be processed on the device or on that company's servers, under its terms. Nothing is sent unless you tap the microphone. Dictation is separate from AI transcription (section 4) and is not switched off by Confidential Mode, so type instead if you need to. Apple Siri, Dictation & Privacy.

Barcode scanning

You can scan a product's barcode or QR code into a project's serial-number field. The image and the code stay on your device. On iPhone and iPad the scan uses Apple's on-device frameworks. On Android it uses Google's ML Kit, which, according to Google, sends Google technical data about the scanner (device and app information, performance metrics and a per-installation identifier) for diagnostics and usage analytics. ML Kit terms.

Crash reports (off by default)

Crash reporting uses Firebase Crashlytics (Google) and is off until you turn it on. It is offered unticked during setup and can be switched on or off at any time in Settings → Data → Crash reporting. When it is on, a crash report contains technical details: the error and where in the code it happened, the device model and its state (such as free memory and storage), the OS and app version, and a random installation ID created by Crashlytics. The App does not add your projects, captures or notes to crash reports, although an error message can occasionally include a file or folder name, which may contain a project or session name.

If crash reporting is off and the App closes unexpectedly, the next launch may ask you once whether to send the report(s) waiting on your device or delete them. Either choice leaves the setting off. This question is never shown in Confidential Mode or on the China mainland storefront.

App integrity check

When the App starts, it connects to Google Firebase, which BetaSuite Assist and crash reporting use. Firebase App Check asks Apple App Attest (iPhone and iPad) or Google Play Integrity (Android) to confirm that requests come from a genuine copy of the App. This exchange carries device-attestation data, not your projects, captures or notes.

• Firebase privacy and security
• Google privacy policy

4. AI features

AI features are switched on by default, but nothing is sent to a cloud AI service until you allow that feature (see "Your permission" below). You can change provider, change your permissions or turn AI off at any time in Settings → AI Features.

Which service handles your request

• BetaSuite Assist (the default). On iPhone and iPad models that support Apple Intelligence (iOS or iPadOS 26 or later, with Apple Intelligence turned on), Assist uses Apple's on-device model first for text features such as summaries, reports and polish, and the text is processed on your device. When Apple Intelligence isn't available (older iPhones and iPads, and Android) or fails, Assist sends the text to Google Firebase AI (Gemini) in the cloud. We do not see or store these requests.
• Apple Intelligence only. Choose it to keep text features such as summaries, reports and polish on your device. Transcription and reading protocols from documents still work as described below.
• BetaSuite Default (Pollinations). A free AI service that needs no key, used only if you choose it. Prompts go directly from your device to Pollinations.
• Your own API key. With your own key for Anthropic Claude, OpenAI, Google Gemini or DeepSeek, prompts go directly from your device to that provider under its privacy policy and terms (DeepSeek processes data in China). Your keys are held in the iOS Keychain or Android Keystore and are never sent to us.

What each feature sends

• Polish and suggestions: the text you ask the App to improve or classify, such as a description, a photo caption, or a bug's title and description when it proposes repro steps.
• Session summaries: when you finish a session, the App writes a short summary from that session's markers, notes and transcripts. With a cloud provider this happens only if you have allowed summaries. The summary stays on your device and goes into a report only if you generate one.
• Reports: the AI sections of a report are written from the project name, the test dates, and the notes, findings and summaries of the sessions in that report, and translated if you pick another report language.
• Transcription: voice memos, voice notes on markers and feedback, and the sound of a video when you tap Transcribe (or turn on automatic video transcription). On iPhone and iPad the App tries Apple's speech recognition first. It runs on the device where your device and language support that; otherwise Apple may process the audio on its servers. If Apple's speech recognition is unavailable or fails, and always on Android, the audio is sent to Google Firebase AI (Gemini). An optional tidy-up of the transcript then uses Apple Intelligence or BetaSuite Assist.
• Guided photo checklist: only the type of device you pick (for example "robot vacuum").
• Test protocols: drafting a protocol sends the sentence you type to your provider. Reading a protocol out of a PDF or photo sends that file to Google Firebase AI (Gemini), because there is no on-device path. Importing a protocol written in another language may send its text (not your results) to your provider for translation. Building a protocol by hand sends nothing.

Your permission

Before a feature first sends anything to a cloud AI service, the App asks your permission for that feature, naming the service and the kinds of data it sends (for example session notes, marker notes or audio; never your tester name). You can allow or decline each feature, and change your choices at any time in Settings → AI Features → Manage AI permissions. Apple Intelligence runs on your device and doesn't need this permission. For transcription, iOS also shows its own Speech Recognition permission, which you can change in iOS Settings → Privacy & Security → Speech Recognition.

Confidential Mode and regional limits

Confidential Mode (section 6) blocks every cloud AI service: only Apple Intelligence on your device is allowed, and transcription and reading protocols from documents are switched off. Where local law requires it, for example on the China mainland storefront, the App offers only Apple Intelligence on the device, offers transcription only on devices with Apple's on-device speech recognition, and makes no cloud AI provider available.

• Apple Intelligence & Privacy
• Google privacy policy (BetaSuite Assist, Google Gemini)
• Pollinations
• Anthropic Claude privacy policy
• OpenAI privacy policy
• Google Gemini API additional terms
• DeepSeek privacy policy

5. Feedback board, brand suggestions and contact

Feature requests

The Feature Requests screen (Settings → Help & Feedback → Feature Requests) posts ideas to BetaSuite's public feedback board, a GitHub repository at github.com/brilt9/betasuite-feedback. Everything posted there can be read by anyone. You can browse and upvote without signing in.

• What is sent: the title, description and category you enter, plus the app version and OS version. No project, session, recording, photo, location, account or device identifier.
• Redaction first (best effort): before anything is sent, the App removes emails, phone numbers, IP addresses, links that look like they carry tokens, long codes and card numbers from your text. On iPhones and iPads with Apple Intelligence, an on-device model also removes names, addresses and employer references. On other devices, and only if you have allowed it, Google Firebase AI (Gemini) does that second pass. Redaction can miss things, so please leave personal details out.
• How it gets there: your device sends it to a Cloudflare Worker that BetaSuite operates. The Worker holds an access token limited to the feedback repository (the App contains no GitHub credential), runs its own redaction pass, and rejects a request that still contains obvious personal details. To limit abuse it counts requests per IP address; those counters are stored in Cloudflare and expire within about a day, and your IP address is never sent to GitHub.
• Reading the board: the App loads the board through the Worker or, if the Worker is unavailable, directly from GitHub, which then sees your IP address as with any web request.
• Removing a post: a posted request can't be deleted from inside the App. Ask us through Contact Us and we'll remove or change it in the repository.
• In Confidential Mode: posting still works after an extra confirmation, and the same data is sent.

GitHub privacy statement.

Brand suggestions

Project settings include a list of known company brands. When you enter a company that isn't on the list:

• From the version after 1.3.5: the App shows a "Suggest … for the brand list" button under the company name. Only if you tap it and confirm does the App post a public "Add brand: <name>" request to the feedback board. The App checks the name on your device first and doesn't post it if it looks like it contains personal details, such as an email address or phone number. The button is hidden while Confidential Mode is on, whether for all projects, for the project you're working in or for the project you're editing.
• Version 1.3.5 and earlier: the App posted that request automatically, shortly after you stopped typing the name, after the same redaction as feature requests. It didn't post while Confidential Mode was on for all projects or for the project you were working in, but editing the settings of a different project marked Confidential did not stop it.

Either way the request goes through the same Worker, which runs its own check, with only the app version and OS version; nothing else from your project is sent, and each name is suggested at most once per install.

Upvotes

The first time you upvote (or report) a request, the App creates a random ID and keeps it in the iOS Keychain or Android Keystore. It is sent to the Worker so each install's vote counts once, and the Worker stores it with the request number in Cloudflare. It is not your name, email, account or any identifier from your device's operating system, and it is never sent to GitHub. Wiping all app data deletes it from your device, and a new one is created the next time you upvote or report. On iPhone and iPad the iOS Keychain can keep it after you delete the App, so reinstalling may reuse the same ID; use Wipe all app data to reset it.

Reporting a request

The Report button on a public request sends us the request number and title, the reason you pick, any details you add (after redaction) and the random upvote ID. It goes by email through EmailJS, an email-delivery service that processes data in the United States. Reports are not posted publicly.

Contact Us and Report a problem

Settings → Help & Feedback → Contact Us (also opened by Report a problem and from some error messages) sends the name and reply email you enter (filled in from your profile if you set one), the category and your message to us through EmailJS, which delivers it to our support mailbox, hosted by Google. A bug report can include a diagnostics block: app version, device model, OS version, language, app mode, AI provider setting, whether Confidential Mode is on, recent error messages (with project and session names and obvious personal details removed) and, on iPhone and iPad, recent dual-recording diagnostics. You can read and edit it before sending, or untick it to leave it out. Nothing is sent until you tap Send. On the China mainland storefront the form opens your own mail app instead.

EmailJS privacy policy.

6. Confidential Mode

Turn Confidential Mode on for one project (in that project's settings) or for everything (Settings → Confidential Mode). While it is on, the App:

• blocks every cloud AI service. Apple Intelligence still runs on a supported iPhone or iPad; on Android, Confidential Mode means no AI. AI transcription and reading protocols from documents are off;
• warns you and asks you to confirm before you share, export or forward a report or file;
• hides the brand-suggestion button (for version 1.3.5 and earlier, see the exception in section 5), and asks for an extra confirmation before you post a feature request;
• skips the one-time crash-report question.

These keep working in Confidential Mode, so you can decide what else to switch off:

• saving to your camera roll (on by default) and to a folder you picked. If either syncs to a cloud service, turn it off in Settings → Save Destinations before you turn Confidential Mode on, or in that service;
• weather and place-name lookups, which send coordinates only. To stop them for what you capture, turn off the weather stamp, session weather and location stamp in Settings → Camera & Recording → Overlay Settings and don't allow location access. Opening Overlay Settings, and importing a photo or video that has GPS data, still look them up (section 3);
• crash reports, if you turned them on;
• dictation with your phone's own speech recognition (section 3);
• the app integrity check when the App starts, and any Contact Us message you choose to send.

Confidential Mode is best-effort enforcement of the App's data-flow paths. It is not a substitute for your own review of where data goes when you take a manual action (e.g. taking a screenshot, sharing via the system sheet after the dialog).

7. This website

This section covers the betasuite.app website, not the App.

• Hosting and security. The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address, browser details and the pages you request in order to deliver the site, protect it from abuse and report network errors. Its bot protection may run a small check in your browser and set a strictly necessary security cookie (for example cf_clearance). We use no cookies for analytics or advertising.
• Analytics. Cloudflare Web Analytics counts page views so we can see which pages get read. It sets no cookies and stores nothing in your browser. Each measurement reports the page address, the page or search you came from and page-load timings, along with the IP address and browser details that every web request carries. Cloudflare states it uses these only for aggregate figures, not to fingerprint or track individuals. None of it is connected to anything you create in the App.
• Contact form. The form on the support page sends your name, email, category and message from your browser to EmailJS, which delivers them to our support mailbox, hosted by Google.
• Stored in your browser. The site remembers your language choice and whether you dismissed the language suggestion, and the Protocol Builder keeps your draft, in your browser's local storage. That stays on your device; clearing this site's data in your browser removes it.
• Protocol Builder. It runs entirely in your browser, and nothing you type is sent to us. A share link carries the protocol itself in the web address (?code=…), so anyone with the link can read it, and opening the link sends that address to Cloudflare like any page request.
• Download links. The App Store and Google Play buttons on this site carry a short campaign label that names the page or button the link was on (for example home-hero or mower-guide-end). The label is part of the store link, so Apple or Google receives it when you follow the link, and it says nothing about you. Apple App Analytics and Google Play Console use it to show us how many store visits and downloads came from each label, as totals; they do not tell us who you are. What the stores themselves collect is covered by their own privacy policies.
• Nothing else. No ads, no third-party trackers and no embedded content from other sites; fonts are served from this site. Download links take you to the App Store or Google Play, which have their own privacy policies.

• Cloudflare privacy policy
• Cloudflare Web Analytics
• EmailJS privacy policy

8. International transfers

The services named in this policy operate from various countries. When you use one, the data you choose to send may be processed in a country whose privacy and data-protection laws differ from yours. Google, GitHub, Anthropic and OpenAI are based in the United States; EmailJS is based in Singapore and processes data on servers in the United States; and DeepSeek processes data in China. The BetaSuite Cloudflare Worker (section 5) and this website run on Cloudflare's global network, so a request may be handled in a data centre outside your country. Each service's privacy policy (linked above) describes how it handles transfers and what protections apply.

9. Legal bases, retention, and your rights

Legal bases for processing (where the GDPR applies)

For users in the EEA or the UK, the limited personal information BetaSuite handles is processed on these bases: performance of a contract (providing the App you purchased and the features you choose to use); your consent (cloud AI features, crash reporting, brand suggestions you choose to send, and any other optional flow that asks before it sends data off your device; you can withdraw consent at any time in Settings, without affecting processing already carried out); and our legitimate interests (keeping the App, the feedback board and this website secure and free of abuse, answering your messages, improving the App from redacted public feedback, the automatic brand suggestions in version 1.3.5 and earlier, and measuring aggregate audience on this website), balanced against your rights and freedoms.

How long we keep your data

• Data you create in the App stays on your device until you delete it, wipe all app data, or uninstall the App. You control retention, and BetaSuite keeps no copy.
• Feature requests and brand suggestions are public and stay on GitHub until you ask us to remove them.
• Upvote records (the random ID and the request number) stay in Cloudflare for as long as the board's vote counts are kept. Rate-limit counters expire within about a day.
• Crash reports, if you turned them on, are kept by Firebase Crashlytics under Google's policy.
• Messages you send through Contact Us, Report a problem, a community report or the website contact form stay in our mailbox only as long as needed to handle them. EmailJS handles them under its own policy.
• Website analytics measurements are kept by Cloudflare under its own policy and carry no identifier that lasts beyond a single page view.

Your rights — everyone

Because the App stores data locally, you can exercise most rights directly inside the App:

• View and edit any entry, recording, or project at any time.
• Delete an individual entry, recording, project, or session.
• Wipe all app data (Settings → Data → Wipe all app data, which can also remove the copies saved to your camera roll and folder) or uninstall the App.
• Withdraw consent for AI (Settings → AI Features → Manage AI permissions) or crash reporting (Settings → Data → Crash reporting).
• Export a portable backup (Settings → Data → Export all data, or Settings → Back up now) so you can take your data with you.

For data you have sent to a third-party service (a folder synced by its provider, an AI provider you used, your phone's geocoding or speech service, the public feedback repository), exercise your rights with that service directly using the contact channel in its privacy policy. To remove or change a feature request or brand suggestion, contact us through Settings → Help & Feedback → Contact Us and we'll act on your behalf in the public repository. For the limited data BetaSuite itself handles (messages you send us, crash reports if you enabled them, upvote records, short-lived rate-limit counters keyed to your IP address and website analytics measurements), contact us using the channel in section 11 and we will respond within a reasonable time, and within any period required by applicable law.

Australia (Privacy Act 1988 / APPs)

You may ask us to access or correct personal information BetaSuite holds about you, and you may make a privacy complaint to us via the contact channel in section 11. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

EEA / United Kingdom (GDPR)

You have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk). BetaSuite itself handles only a small amount of personal data (messages you send us, crash reports if you enable them, redacted public feedback, upvote records, short-lived rate-limit counters keyed to your IP address and aggregate website audience measurements), while almost everything else stays on your device or is sent directly to providers you choose. On that basis we consider BetaSuite's own processing of EEA/UK personal data to be limited and occasional, not to involve large-scale special-category data, and to be unlikely to result in a risk to your rights and freedoms within the meaning of GDPR Article 27(2), and we have not appointed an EU or UK representative. You can reach us through the contact channel in section 11.

California (CCPA / CPRA)

We do not sell or share your personal information, and we do not use it for cross-context behavioural ("targeted") advertising. Subject to verifying your request, California residents may ask to know, delete, or correct personal information, and will not be discriminated against for exercising these rights. Because almost everything stays on your device, you can exercise the know / delete / correct rights directly in the App; for anything BetaSuite itself handles, use the contact channel in section 11.

Automated decisions

BetaSuite's AI features draft summaries, transcripts, redactions, and reports to assist you, but they do not make automated decisions that produce legal or similarly significant effects about you. You review and control everything before it is used or shared.

10. Children

The App is not directed at children, and we do not knowingly collect personal information from a child. Because the App holds data locally, a parent or guardian can remove it directly via Settings → Data → Wipe all app data, or by uninstalling the App. For a public feature request posted by a child, contact us and we'll remove it on your behalf.

11. Changes and contact

We may update this policy from time to time. The effective date at the top of this page reflects the most recent revision. The App also contains a copy at Settings → About BetaSuite → Privacy Policy; if the two ever differ, this website version is the most recent.

If you are not satisfied with our response, you have the right to lodge a complaint with the data-protection authority in your country of residence.