Privacy
Last updated 15 August 2026.
The short version: Be I/O has no account, no analytics and no user data. There is nowhere for your information to be collected, because there is nothing to collect it into.
Health data stays on your device
Be I/O reads heart rate, workouts and workout routes from Apple Health, with your permission, to work out how much air you moved and where you were when you moved it.
None of it is ever sent to Be I/O’s servers. It’s used on the device and stored there. If you use iCloud, your profile — your ventilation curve, your guideline, how much outdoor air gets into your home — syncs between your own devices through your own iCloud account, which nobody but you and Apple can read. That’s a choice you make in iOS, not one the app makes for you.
Revoking Health access in Settings stops it immediately. The rest of the app carries on working.
Location stays on your device too
If you ask for the nearest public monitor, the app uses your location to find one. The coordinates are snapped to a coarse grid before they leave the phone — about five kilometres — so the request says roughly which neighbourhood you’re in and never where you are. The precise position stays on the device and is used only to rank the monitors that come back.
Location is never requested unless you tap something that says it will be.
What the servers see
Be I/O runs a small proxy so that manufacturers’ API keys don’t have to ship inside the app. It receives:
- a sensor or monitor identifier
- a grid-snapped bounding box, for a nearby search
- a subscription receipt, so it knows a request is paid for
It keeps no logs tying those to a person, because it has no idea who a person is — there are no accounts and no identifiers beyond Apple’s own subscription receipt.
Sensors on your own network are read directly by your phone. Those readings don’t pass through Be I/O at all.
Subscriptions
Purchases are handled by Apple. Be I/O never sees your payment details, your name, or your Apple ID. It sees only Apple’s signed receipt, which it checks to confirm a subscription is current.
Third parties
Readings come from PurpleAir and AirGradient, whose own privacy policies cover the data they hold about their sensors. Be I/O shares nothing with them beyond the identifier of the sensor being read.
There is no advertising, no tracking, and no analytics SDK in the app.
Children
Be I/O isn’t directed at children and collects nothing from anybody, so there is nothing specific to say here beyond that.
Changes
If this policy changes, the date at the top changes with it. Material changes will be noted in the app’s release notes rather than only here.