Last updated: 28 September 2026
This policy explains what personal data Beta Family processes, why, and what rights you have. It applies to everyone who uses betafamily.com: testers, people at the companies that test their apps, and visitors.
In short:
- We collect what's needed to run tests, pay testers and bill companies, and nothing is sold.
- Companies see some information about the testers on their tests, such as name, age, country and device.
- Our database is in the EU. Some of our providers are in the US and are covered by the EU–US Data Privacy Framework or standard contractual clauses.
- Before a tester's first payout, Stripe verifies the tester's identity with an ID document and a selfie. We only get the result.
- Google Analytics only runs if you accept statistics cookies.
- Accounts that haven't been used for 2 years are deleted, and we email you first.
1. Who is responsible
The controller is The B Family AB, company registration number 556926-5746, Sweden ("Beta Family", "we"). Contact us about your personal data at info@betafamily.com.
2. What we collect
Account. Name, email address, password (stored encrypted, we can't read it), whether you are a tester or a company, and for companies the company name.
Tester profile. Birth year, gender, country and, if you add them, a profile picture and your answers under "About you": how many adults and children live in your household, whether you attended college or university, your employment, and your testing and technical experience. Your email choices (newsletters and test invitations), and which test invitations we have emailed you. The devices you add to your profile: model and OS version, and for iPhones and iPads added with SuperUDID also the UDID. Your level, the tests you've done and the ratings companies have given your reports.
Tests and reports. The device and OS version you test on, your answers, your reports and when you submitted them, and the bugs, notes, screenshots, files and videos you send with a report. Screenshots and videos can show what's on your screen, so leave out anything private. For companies, the tests you create and the ratings you give.
Messages. Messages between testers and companies in the Service. Beta Family's administrators can read them when needed to give support or to deal with misuse.
Payments from companies. What you've ordered and paid, and your billing details. Card details are handled by Stripe; we never see them.
Payouts to testers. Your PayPal email address, your balance, your rewards and your payouts.
Identity verification. Before a tester's first payout, our provider Stripe checks the tester's identity with a photo of an ID document and a selfie. Stripe keeps the pictures and the details from the ID. We receive the result (verified or not, and why not). We may also receive whether the name on the ID matches the name in your profile, and a one-way code calculated from your name and date of birth. With that code we can see if the same person has several accounts, without storing the name or the date of birth themselves.
SuperUDID. If you use SuperUDID to find your device's UDID, your device sends us its UDID, model and iOS build when you install the profile. We show it to you and delete it within 24 hours. You don't need an account. If you're logged in as a tester and choose to save the device, it's kept on your profile until you remove it. If you ask us to email you the link instead of scanning a QR code, we use your email address only to send it and keep a one-way code of it for 24 hours, to stop the form being used to spam people.
SuperSend. When you send a build with SuperSend, we store the file, what we read from it (app name, version and, for iOS, the UDIDs of the devices the build allows), your message and the email addresses you send it to. For each recipient we record when they downloaded it, so you can see it. Everything is deleted after 30 days, or sooner if you delete the build.
Technical data. IP address, browser, device and the pages you visit. This data appears in logs when you use the Service, and in Google Analytics if you accept statistics cookies.
3. Why we use it, and our legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Running your account and the Service: creating tests, carrying out tests, delivering reports, messages | Account, profile, tests and reports, messages | Contract (Article 6(1)(b) GDPR) |
| Matching tests with testers (a company's target group: country, age, gender, kids at home) and showing reports to companies | Profile, tests and reports | Contract. Companies only see how many testers roughly match, never who. |
| Taking payment, keeping credits, paying out rewards | Payments, payouts | Contract |
| Bookkeeping | Payments, payouts | Legal obligation (Article 6(1)(c)), the Swedish Bookkeeping Act |
| Verifying testers' identity before payouts | Identity verification | Legitimate interest in preventing fraud and one person having several accounts (Article 6(1)(f)). The selfie comparison uses biometric data, which Stripe only processes with your explicit consent (Article 9(2)(a)). You can ask us for another way to verify instead. |
| Showing your UDID in SuperUDID | SuperUDID | Legitimate interest in providing the tool you asked for |
| Sending builds with SuperSend and showing who has downloaded them | SuperSend | Contract with the sender; legitimate interest for the recipients, who get the build because the sender asked us to send it |
| Preventing fraud and misuse, and keeping the Service secure | Account, technical data, identity verification | Legitimate interest |
| Improving the Service, for example with statistics on how it's used | Technical data, anonymised test data | Legitimate interest. For Google Analytics: consent (Article 6(1)(a)) |
| Emails about your account, tests and payments | Account | Contract |
| Newsletters and news about Beta Family | Account | Legitimate interest for existing customers and testers. You can unsubscribe at any time. |
| AI summaries of reports, when a company asks for one | Reports | Legitimate interest in giving companies a clear overview |
We don't use your data for automated decisions that have legal or similarly significant effects on you. Your level is calculated automatically from the number of tests and your ratings, but the ratings themselves are given by people.
4. Who we share it with
Companies whose tests you take. With each report, the company sees your name, profile picture, age, gender, country, device, level, rating and answers, as well as your messages with the company. If you choose to share a device's UDID on an iOS test, the company also sees that device's model, iOS version and UDID, until you stop sharing. The company may only use this to evaluate the test, and is itself responsible for how it handles the data. If the company's app collects data from you while you test, the company is responsible for that.
Public tests. A public test's name, the company's name, the app's icon and description and the company's introduction are shown publicly on Beta Family. They contain no data about testers.
Our providers, who process data on our behalf and only according to our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, login and file storage | EU (Ireland) |
| Vercel | Hosting the website | EU and US |
| Stripe | Card payments, subscriptions and identity verification | EU and US |
| PayPal | Payouts to testers | EU and US |
| Anthropic | AI summaries of reports | US |
| Google Analytics, if you accept statistics cookies | EU and US |
Stripe and PayPal are also responsible for some of the data themselves, for example to meet their own legal obligations and to prevent fraud. You can read about it in their privacy policies.
Authorities, if the law requires it, for example the Swedish Tax Agency or the police.
If Beta Family is sold or merged, the data may go to the new owner, who must follow this policy.
We don't sell your personal data.
5. Transfers outside the EU
Some of our providers are based in the US or can process data there. Where that happens, the transfer is protected by the EU–US Data Privacy Framework, which the provider is certified under, or by the European Commission's standard contractual clauses.
6. How long we keep it
| Data | How long |
|---|---|
| Devices on your profile, UDID included | Until you remove the device or your account is deleted |
| Your account and profile | Until you close your account, or until it has been unused for 2 years. We email you at least 30 days before we delete an inactive account. |
| Reports you've submitted | The company keeps the reports it has received. When your account is deleted, your name, picture and contact details are removed from them, so the reports no longer show who wrote them. |
| Messages | As long as the test they belong to exists, and at most until your account is deleted |
| Payments, payouts and invoices | 7 years after the end of the financial year, as the Swedish Bookkeeping Act requires |
| Identity verification | As long as your account exists. Stripe keeps its data according to its own policy; you can ask us to have it deleted. |
| SuperUDID lookups | 24 hours |
| SuperSend builds, recipients and downloads | 30 days, or until you delete the build |
| Logs | Up to 90 days |
| Google Analytics | Up to 14 months |
7. Your rights
You have the right to:
- access the data we have about you, and get a copy of it;
- correct data that's wrong;
- have your data deleted, unless we need to keep it, for example for bookkeeping;
- restrict how we use your data;
- move data you've given us to another service (data portability);
- object to processing based on our legitimate interest, and always to direct marketing;
- withdraw your consent, for example to cookies, at any time.
As a tester you can change your details and email choices, and delete your account, yourself under Settings. For anything else, email info@betafamily.com. We answer within a month.
If you think we're handling your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the data protection authority where you live. We'd be glad if you contacted us first, so we can try to put it right.
8. Cookies
We use two kinds of cookies:
Necessary cookies keep you logged in, protect the Service and remember your settings. They are needed for the Service to work, and don't need your consent.
Statistics cookies from Google Analytics tell us how the site is used, for example which pages are visited, so we can improve it. They are only set if you accept them in our cookie banner. You can change your choice at any time using the link at the bottom of every page.
We don't use cookies for advertising.
9. Security
Data is sent encrypted (HTTPS) and stored with providers that protect it technically and organisationally. Access within Beta Family is limited to the people who need it for their work, and every change an administrator makes is logged. Card details and ID documents never pass through our servers.
10. Age limit
Beta Family is for people who are 18 or older. We don't knowingly collect data about children.
11. Changes
We update this policy when the Service changes. If a change is important, we tell you by email or in the Service before it takes effect. The date at the top shows when the policy was last changed.