BeeYou

Privacy Policy

BeeYou · Operated by Geekit Labs LLC · Mansfield, TX · Last updated September 2026

1. Overview

BeeYou is practice management software for behavioral health practices, operated by Geekit Labs LLC, a company based in Mansfield, Texas. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using BeeYou, you agree to the practices described here.

2. Information We Collect

Account & Identity

  • Full name
  • Email address
  • Mobile phone number
  • Job title / role within your practice

Practice Information

  • Practice name, address, and contact details
  • Location and scheduling configuration
  • Client demographics and appointment records (entered by practice staff)
  • Billing, treatment plan and clinical note records (entered by practice staff)
  • Office supply and purchase order data

Usage & Technical Data

  • Log data (IP address, browser type, pages visited, timestamps)
  • Device information
  • Feature usage patterns for product improvement

3. How We Use Your Information

  • Authentication: Your email and phone number are used to verify your identity when you log in. We send one-time passcodes (OTP) via SMS or email.
  • Practice management: Client, appointment, clinical, billing, and supply data is used solely to operate the practice management features you or your administrators configure.
  • Appointment reminders: Your practice may configure BeeYou to send SMS or email reminders to staff or clients about scheduled appointments.
  • Product support: We use account information to respond to support requests and troubleshoot issues.
  • Service improvement: Aggregated, de-identified usage data helps us understand how BeeYou is used and improve the product.

4. SMS / Phone Number Usage

Your mobile phone number is collected for two purposes only:

  • Sending one-time passcodes (OTP) to verify your identity at login
  • Delivering appointment reminders and practice notifications configured by your practice

Your phone number is never sold, rented, or shared with third parties for marketing purposes.

You can opt out of SMS messages at any time by replying STOP to any message. After opting out, you may still log in using your email address. See our SMS Communications Policy for full details.

5. HIPAA Compliance

BeeYou is designed for use by behavioral health practices that are covered entities under the Health Insurance Portability and Accountability Act (HIPAA). As a service provider to those practices, Geekit Labs operates as a Business Associate and handles Protected Health Information (PHI) in accordance with HIPAA requirements. Where records are also subject to 42 CFR Part 2 (substance use disorder treatment records), the practice remains responsible for its Part 2 consent and disclosure obligations.

  • Client data is stored and transmitted using industry-standard encryption
  • Access to client records is restricted by role-based permissions within each practice
  • We do not use or disclose PHI for purposes beyond those specified in our Business Associate Agreement (BAA)
  • Practices may request a BAA by contacting support@beeyoutoday.com

6. Data Sharing

We do not sell your personal information. We share data only in limited circumstances:

  • Service providers: We use Supabase (database/auth hosting) and Twilio (SMS delivery). These providers are contractually obligated to protect your data and use it only to provide services to us.
  • Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of BeeYou users.
  • Business transfer: If Geekit Labs is acquired or merges with another entity, your data may transfer as part of that transaction, subject to the same privacy protections.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specific retention windows:

  • Account data: retained until you or your practice administrator requests deletion
  • Client and practice records: retained per your practice configuration and applicable law
  • Completed task records: automatically purged based on your configured retention window (default: 15 days)
  • Audit logs: retained for 2 years for compliance purposes
  • Login codes (OTP): expire within 10 minutes of issuance and are not stored after use

8. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your account and associated personal data. Practice-level client data deletion must be requested by a practice administrator.
  • Opt-out of SMS: Reply STOP to any SMS to opt out immediately.
  • Data portability: Request an export of your data in a machine-readable format.

To exercise any of these rights, contact us at support@beeyoutoday.com. We will respond within 30 days.

9. Security

BeeYou uses TLS encryption for all data in transit and AES-256 encryption for data at rest. Access to production data is restricted to authorized Geekit Labs personnel. We conduct regular security reviews and follow industry best practices for securing healthcare software.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. If changes are material, we will notify practice administrators by email. Continued use of BeeYou after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

Geekit Labs LLC

Mansfield, Texas

support@beeyoutoday.com

beeyoutoday.com

Also see our SMS Communications Policy and SMS Consent documentation, and our Terms of Service.