Privacy Policy

Version: 2026-04-22

Last Updated: April 22, 2026

This Privacy Policy describes how Bear ("we," "us," or "our"), operated by Bear Labs Inc., collects, uses, stores, and shares information when you use our services at bear.flights (the "Service").

Information We Collect

Google Account Data

When you connect your Google account to our Service, we access the following information:

• Email address and basic profile information (name, profile picture) for account identification and authentication
• Gmail message content (limited scope) to provide our core service features

How We Access Gmail Data

We request permission to read a portion of your Gmail messages. This access is used solely to analyze email content and generate insights for you. We do not access your entire mailbox—only the messages necessary to provide the Service.

Gmail message content is processed only during an authenticated session and is not persisted to disk once processing completes. Bear's architecture is designed to pass data through without long-term storage ("zero data retention" for source message content). Only derived, non-reversible insights are retained.

How We Use Your Information

We use the information we collect to:

• Authenticate your identity and manage your account
• Process and analyze your emails to generate personalized insights
• Improve and develop our Service
• Communicate with you about your account or the Service

Data Storage and Retention

Email Content

• Original email content is not permanently stored. Email data is processed in real-time and cached temporarily during your active session only.
• Once processing is complete, the original email content is discarded from our systems.

Derived Insights

• We store insights, summaries, and other derived data generated from your emails.
• This derived data does not contain the original email content but represents processed information and patterns.
• Derived data is retained until you delete your account.

Account Data

• Your account information (email address, profile data) is retained until you delete your account.

Third-Party Services

AI and Machine Learning Providers

To provide our email analysis features, we send email content to third-party AI/LLM inference providers. These providers operate under contracts that:

• Require them to use your data only to respond to our inference requests.
• Prohibit training of any generalized or personalized model on your data. We use zero-data-retention offerings where available.
• Limit retention to what is necessary to return a response to the specific request.

Bear does not use Google user data (including Gmail content) to develop, improve, or train generalized or non-personalized AI or machine learning models.

Other Service Providers

We may use additional service providers for:

• Cloud hosting and infrastructure
• Analytics (aggregated, non-personal data only)

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Secure authentication mechanisms
• Access controls limiting who can access user data

Your Rights and Choices

Access and Deletion

You may:

• Request access to the personal data we hold about you
• Request deletion of your account and associated data
• Revoke Google access at any time through your Google Account permissions

To delete your account or request your data, contact us at privacy@bear.flights.

Revoking Access

You can disconnect your Google account from our Service at any time. When you revoke access:

• We will no longer be able to access your Gmail data
• Previously generated insights will remain until you request deletion
• You can request complete data deletion by contacting us

Data Sharing

We do not sell your personal information. We share data only as described in this policy:

• With AI/LLM providers for email processing (as described above)
• With service providers who assist in operating our Service
• If required by law or to protect our legal rights

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@bear.flights

Google API Services User Data Policy Compliance

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide and improve user-facing features
• We do not transfer Google user data to third parties except as necessary to provide the Service, as required by law, or with user consent
• We do not use Google user data for advertising purposes
• A human only reads Google user data if authorized by the user for support purposes, required for security/legal compliance, or the data is aggregated and anonymized