BemaPrivacy and security, in plain words
A college application holds grades, family finances and the most personal essay a teenager has written. Here is exactly how Bema treats it. The full detail is in our Privacy Policy.
What we never collect
Your Common App, College Board or FSA ID login
Bema never asks for them. You submit on those sites yourself.
Social Security numbers, FSA IDs, ITINs or A-Numbers
The FAFSA planner tells you when to have them ready. The server refuses to store anything shaped like one, even by accident.
Advertising trackers
No ad networks and no selling data. Site analytics, if used, are cookie-free.
Accounts for children under 13
If someone tells us they’re under 13, we don’t create the account or keep what they typed.
Who can see a student’s work
The student
Everything they create. They can download it all or delete their account from Settings.
A connected parent
Progress, deadlines and essay drafts, only after the student accepts. Never the AI coach or counselor conversations, and never the ability to edit a draft.
Bema’s team
Only what’s needed to run the service and fix problems you report.
How accounts are protected
Passwords are hashed
We store a one-way hash, never the password. Changing or resetting a password signs out every other session.
Encrypted in transit
Every connection to Bema, on the web and on iPhone, uses HTTPS.
Limits against abuse
Repeated failed sign-ins bring up a human check, and every AI feature has a daily allowance.
AI with guardrails
AI suggestions are always proposals you accept or reject. If a student writes something that sounds like a crisis, they get a real person’s number instead of an AI reply.
Found a security problem?
Email getbemaai@gmail.com. Please give us a chance to fix it before sharing it publicly. Our Security policy has the details.