Built to be trusted.
Honest about what's not finished yet. Here's where your data lives, what we never do with it, how to take it back, and what isn't built.
Where your data lives
Your meetings, transcripts, raw audio, and local databases stay on your Mac. They are never uploaded.
Your retrieval index, the vector search that lets cross-tool memory work in milliseconds, syncs to a private database we run. It's isolated per user, encrypted in transit and at rest, and reachable only by your account credentials and the AI tools you've authorized.
What we never do with your data
Never sold. Never used to train AI models. Never shared with anyone you didn't authorize.
If we ever change that posture, you'll know about it before it happens, not after.
Secrets, keys, and sensitive data
ODSR (On-Device Secret Redaction) redacts API keys and secrets from all major providers (Anthropic, OpenAI/Codex, Stripe, AWS, GitHub, Slack, Supabase, Fly.io), plus JWTs, private keys, labeled Social Security numbers, and payment-card numbers, before storage and before embedding. Unknown-shape high-entropy tokens are flagged, not redacted. The screen runs on every write path, including writes that hit the database directly. A nightly check plants a decoy secret and fails loud if the raw value survives.
ODIT (On-Device Identity Tokenization) covers names (employee or client), worker IDs, and exact compensation. We do not detect those by scanning text. Accounts with the gate on send unmarked ingest to a sealed quarantine that has no embedding column, so a subprocessor never sees it. The row is not deleted. A signed-in owner approves the device on the account page. Meeting audio and verbatim transcripts stay on your Mac.
Synced vault text that passes those gates is encrypted in transit and at rest, but it is not encrypted with a key only you hold. That is the same honest split as the rest of this page.
Export and delete
Your memory is already plain Markdown files on your Mac, copy them anywhere, anytime. That's the format Becki stores in, by design.
Delete a single entry from the Settings panel, or wipe your account entirely. When you delete, it's gone from Becki's database too, we don't keep copies. Want it in writing? Email hello@becki.io and we'll confirm.
Teams and admins
Becki is single-user today. Team workspaces and admin controls are on the roadmap for the quarter after public launch.
If team support is a hard requirement for you, email hello@becki.io so we can scope it against a real use case.
What this page does not claim
- No SOC 2, HIPAA, or other compliance badges, we won't claim certifications we don't hold yet.
- No "end-to-end encrypted" claim, the architecture is hybrid (local source of truth + a cloud retrieval index), and we describe it honestly above.
- No team or admin features beyond what's on the roadmap.
- No claim that we detect every name (employee or client) in free text. ODIT requires a paved path, or the row is sealed, not guessed.
Questions about any of this? Email hello@becki.io, a real human answers.