Belo is invite-only. It predicts what you are about to want and then handles it for you. To do that it reads a small number of things you connect to it.
This page says exactly what Belo reads, why, what it keeps, and how to switch it off. It is written to be read, not survived. Where the answer is unflattering, it says so.
Your name, your email address, your mobile number, and the invite code you joined with. Your name is how Belo addresses you. Your mobile number is how Belo sends you a sign-in code.
You can also tell Belo about the people you spend time with. Belo keeps the names you give it.
When you connect Google, Belo receives your name and email address from your Google profile, so it knows whose calendar it is reading.
Belo asks Google for read-only access to your calendars. It can read. It cannot write. Belo never creates, edits, moves or deletes anything on your calendar, and it never adds itself as a guest.
Belo reads the calendars on your Google account. Here is every field it reads and what it does with each.
| What Belo reads | Why | What Belo keeps |
|---|---|---|
| Start and end times | Whether you are free when a suggestion would land, and what your week looks like | The times |
| Event titles | To tell a dinner from a dentist appointment, so Belo suggests the right kind of thing | A category. The title itself is cleared once the event has passed |
| Event locations | Roughly where you will be, so Belo does not offer you a table across town | The city only. Belo shortens every location to a city before storing it and does not keep street addresses |
| Guests on an event | Whether you will be with other people, and how many | A number, and a scrambled code for each guest. See below |
| Whether you accepted | A meeting you declined is not somewhere you will be | Your reply |
| How often an event repeats | Your weekly rhythm: when you are reliably out, reliably home | The pattern |
| Working location | Google marks some events home, office or elsewhere | That value |
| Your calendars' names and identifiers | To tell a work calendar from a personal one, and to know which calendar to read | The name and the identifier |
| Your time zone | So nothing arrives in the middle of your night | The time zone |
When you first connect, Belo reads your main calendar from about three months back to a month ahead. After that it reads every calendar on your account from two weeks back to six weeks ahead, each time it refreshes.
Two things worth being precise about, because we would rather say them than have you find them.
Google identifies a calendar by an address, and that address is often an email address, usually yours, sometimes a colleague's on a calendar shared with you. Belo stores those identifiers because without them it cannot read the calendar at all. It does not use them to contact anyone and does not build a contact list from them.
For each person who appears as a guest on your events, Belo keeps a scrambled code rather than their details, so it can recognise that the same person keeps showing up without being able to read who they are. Belo does not learn anyone's name from your calendar. Where you have told Belo about someone yourself, Belo can tell that this is a person you are often with.
Belo uses your location to notice the places you actually spend time. Those places are one of the things it predicts from.
These are two different things and we keep them apart.
Your camera roll. Belo reads your camera roll on your phone, to learn where you have been and what you did there. The photos are read on the device and the images are not uploaded. What leaves your phone is what Belo concluded, not the picture it concluded it from.
Photos you submit. A photo you take for a City Hunt, or upload when creating something, does leave your phone. It is checked by an AI model against the rules of that hunt or that post, and it is kept. These photos remain after you delete your account.
Belo connects to your accounts through Plaid. Belo never sees or stores your bank login, and the connection is read-only. Belo cannot move money.
From it Belo reads the merchant, amount and date of your transactions, and uses them to learn what you buy and how often. That is the foundation of every prediction it makes.
Payments are processed by Stripe. Your card details are entered with Stripe directly. Belo never receives or stores your full card number.
What Belo keeps is what Stripe gives it back: a token that stands in for the card, the card brand, and the last four digits, so you can tell which card is saved.
Orders, payments, refunds and tips are kept as records of what happened.
Which suggestions Belo showed you, what you did with each, whether you handled it, saved it, said not now or said it was wrong, and how long you took. This is the only way the predictions improve.
Plus the ordinary technical record of a working app: device type, app version, error reports.
Belo texts you a sign-in code when you sign in. As Belo's prediction and confirmation messages begin, they come to the same number and under the same terms as everything below.
Text messaging opt-in data and consent will not be shared with third parties, excluding aggregators and service providers.
On the House is Belo's promotion. Entering involves information the rest of this page does not cover.
Entering. A free entry asks for your name, your email address and your mobile number. One free entry per person per weekly entry period, checked against a verified mobile number. The full set of entries is recorded at the moment entries close, before any winner is chosen.
Winning. A list of winners is published inside the Belo application and stays there for at least 30 days. It shows a winner's first name, last initial, and how the entry was received, and nothing else.
Claiming. Before a prize can be spent, the winner signs an affidavit and publicity release inside the application. That form collects their full legal name and street address, and Belo records the date, the time and the account used at the moment of signing.
Belo will not publish a winner's street address, telephone number, email address or photograph without their separate written permission.
Tax. Where a winner's prizes reach $600.00 in a calendar year, Belo requires a completed IRS Form W-9 before issuing any further prize, and reports the total on IRS Form 1099-MISC.
Records. Entries, drawings, winners and tax forms are kept for as long as tax law and promotional record keeping require, which is longer than the rest of your data, and they are not removed when an account is deleted.
Belo requests these Google permissions and no others:
https://www.googleapis.com/auth/calendar.readonly, to read your calendars as described aboveopenid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile, for your name and email address, so Belo knows whose account it isBelo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Belo uses your Google data only to provide and improve the features described on this page. It does not transfer that data to anyone except the service providers listed below, as needed to run the service, to comply with law, or as part of a merger or acquisition. It is not used for advertising. It is not sold. No person at Belo reads the contents of your calendar.
Belo uses AI models for a few narrow jobs. Every one of these calls is made by Belo's own servers. Nothing is sent to a model from your phone.
No calendar event, title, time, place or guest count is ever sent to a model. Your email address, your account identifier and your phone number are never sent to a model. Your location is never sent to a model. Your camera roll is never sent to a model.
The models are Google Gemini, and OpenAI for checking notes.
Belo runs on other companies' infrastructure. These are the ones that handle your information:
Each is bound by contract to use your data only to provide its service to Belo.
Text messaging opt-in data and consent will not be shared with third parties, excluding aggregators and service providers.
Belo keeps what it has read for as long as your account is open.
Calendar events are not deleted when they pass out of the window Belo reads. Event titles are the exception: a title is cleared once the event has passed, and the category Belo learned from it stays.
Location records are kept for as long as your account is open.
You can delete your account in Belo, under Settings. Belo releases your bank connections, removes your records, and blanks your name, phone number and photo.
Some things remain, and we would rather name them than imply otherwise:
Your data is encrypted in transit and at rest. Connections to Google and to your financial institutions use tokens you can revoke. Belo never stores a password to another service.
Belo is for adults. It is not offered to anyone under 18, and Belo does not knowingly collect anything from them.
If what Belo collects or what it does with it changes, this page changes first, and Belo tells you, by email or in the app, before the change takes effect. The effective date at the top always reflects the current version.
privacy@meetbelo.com
Revi Technologies, Inc.