Privacy Policy

Last updated: 12 October 2026

2BEE FARM PTY LTD (ABN 57 697 830 461), trading as 2hives ("we", "us"), respects your privacy. This policy explains what personal information we collect, why, and how you can control it. We handle personal information in line with the Australian Privacy Principles (Privacy Act 1988). For visitors from the EU and UK, it also follows the GDPR.

1. What we collect

• Account details: your email address. If you sign in with Google, we also receive your Google account ID and verified email (no contacts or other Google data).
• Your programs: the prompts you write, the name you choose for the voice to call you and how to pronounce it (typed, or from a short recording of you saying it, which we keep only if you agree, turn into a pronunciation on our own servers, and delete whenever you ask), your chosen settings (voice, speed, length, background, ambience and similar), the scripts generated for you, and the audio we render.
• Listening activity: when and how much of each program or preview you play, how far you get, and whether you completed the headphone check. We use this to resume playback, show your listening history, and improve our programs. We also measure how playback performs on your device, such as how long it takes to start and whether it stalls or fails, together with your browser type and version but no personal details beyond what we already log, so that we can fix audio problems. These records are deleted after 30 days.
• Clicks and page views (first-party): which buttons and links are used and which pages are viewed, so we can see what works and fix what doesn't. Each record has the type of page (such as "/live/:id", with ids and everything after a "?" removed), the name of the control (a short internal name, never the words on it), where a link goes (only the website name for links to other sites), the section of the page, the version of a page being tested, your language and the time. It is linked to the anonymous browser ID the site already sets, or to your account when you are signed in. We never record anything you type, any text on the page or any email address, we use no new cookies, and nothing is shared with any other company. Records are kept for 90 days and then deleted. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded, wherever you are. If you are in the EU or EEA, the UK or Switzerland, or we can't tell where you are, we record clicks and page views only after you press Accept in the cookie banner: until then nothing is stored against your browser ID, and Decline or no choice means none. Elsewhere, the banner's choices don't change this. Actions that belong to your account, such as signing up, checking out or playing a session, are still counted in totals, without your browser ID. If you accept cookies, four key actions (starting Plus, signing in, joining a live session or setting a reminder for it, and pressing Play on a course) are also sent to Google Analytics, as an event name and a page type only.
• Purchases: order details (product, price, date, promotion code or referral) and a Stripe reference. Card details are handled by Stripe and never reach us.
• Referrals: your referral code, and who you referred or who referred you.
• Technical information: IP address, device and browser type, and server logs, used for security, fraud prevention and rate limiting.
• Cookies: strictly necessary cookies, plus Google Ads cookies only if you agree. See Cookies below.
• Your voice (only if you choose it): if you ask us to make a synthetic version of your own voice ("Your own voice"), we keep the recordings you make for it (short sentences you read aloud and a spoken consent sentence), the voice model made from them, quality and same-speaker check results, and a consent record (what you agreed to, when, the confirmation that you are 18 or older, and the country your connection came from). If you make your voice public, we also keep your public consent recording, the display name and description you choose, and ratings and reports from other users. If you tick the separate, optional "Help bring 2hives to my language" box, we also keep the sentence recordings you made for your voice and a record of that opt-in. If you upload a profile picture for your voice, we keep that picture (see Profile pictures). See Voice recordings below.
• Reading-session recordings (only if you join a reading session by invitation): your recordings of the sentences and of a spoken consent statement, the automatic check results for each recording, your progress through the script, and a consent record. We use them to train 2hives' synthetic guide voices. See Reading sessions below.
• Interactive guided sessions (only if you start one): what you say during the session (your microphone audio and its transcript), the guide's lines, your settings and guide, any safety flags, a written summary, and a recording of the session (the tones, the guide and, unless you choose "Don't keep my voice", your voice). If you choose not to save a session, none of this is kept after it ends, apart from a minimal record (see below). See Interactive sessions below.
• Ad clicks: if you arrive from one of our Google ads, the click identifier Google adds to the link (gclid). We keep it with your account and orders so we can tell Google which ads led to a sign-up or purchase.
• How you found us: we record which ad or link brought you here (the campaign tags in the link, such as utm_source, an ad click identifier, the first page you opened and the course it belongs to). If you are in the EU or EEA, the UK or Switzerland, or we can't tell where you are, we start recording this only after you press Accept in the cookie banner. We keep it with your browser's anonymous ID for 30 days and, if you sign up, with your account, to see which ads and links work (if you never accepted, there is nothing to attach). In a cookie only if you accept cookies.

2. Why we use it

We use your information:

• to provide the service (create, render and deliver your programs; sign you in; process payments; credit referrals);
• to communicate with you (sign-in links, receipts, service messages and, if you agree, occasional emails about your programs and offers);
• to keep 2hives safe and working (security, fraud and abuse prevention, rate limits);
• to improve our programs and pages, using aggregated listening statistics and counts of which pages and buttons are used.

3. Who we share it with

We use trusted service providers that process data on our behalf:

Your programs are rendered on our own servers in Australia.

• Some of these providers are outside Australia, mainly in the United States. We take reasonable steps to make sure they protect your information (APP 8), and for EU and UK users we rely on standard contractual clauses or equivalent safeguards.
• We don't sell your personal information. We don't share your prompts or audio with other customers.
• Our AI provider processes prompts to generate scripts and, under its commercial terms, doesn't use them to train its models.

Cookies

Strictly necessary cookies are always on: your sign-in session, an anonymous visitor identifier that keeps unsaved programs private to your browser, your language and cookie choices, a referral cookie for up to 30 days when you arrive through a referral link, and the Google Ads click identifier for up to 90 days when you arrive from one of our ads.

Google Ads and Google Analytics cookies are set only if you choose Accept in the cookie banner. We use Google's consent mode: until you accept, the Google tag stores nothing on your device and sends Google only cookieless signals (such as that a page was viewed or a purchase was made), without advertising or analytics identifiers. The events we send describe our products (a course, a price, an order number), never your name, email address or account. If you decline, nothing changes for you on 2hives. We remember your choice for 12 months, and you can change it at any time with Cookie settings at the bottom of every page. The Google tag is never loaded on your library or account pages.

Google's use of this data is described in How Google uses information from sites that use its services.

Meta, TikTok, Reddit, Microsoft, Quora and Spotify advertising cookies and pixels load only after you choose Accept; until then nothing at all is sent to these companies, and if you decline, nothing ever is. They measure which ads lead to sign-ups and purchases; we send them product data (a course, a price, an order number) and, for sign-ups and purchases, the matching data listed in section 3, such as a hashed email address, never your name. Their cookies (for example _fbp, _fbc, _ttp, _rdt_uuid, _uetsid) last up to 13 months. Click identifiers from their ads (ttclid, rdt_cid, msclkid) are kept in our own cookies for 30 days and only sent to the matching company if you accept. You can change your choice at any time with Cookie settings.

Voice recordings and voice models

A voice is sensitive personal information: it can identify you, much like biometric data. So we handle it with extra care:

• Only with your explicit opt-in, 18 or older. We make a voice model only when you ask for it, confirm you are 18 or older, tick the consent box, and read a consent sentence that includes your name. We check that every recording is the same person as the consent recording, and we use random sentences and a random phrase in each session so an old recording can't be replayed. You can only record live in your browser; we don't accept uploaded audio files.
• What we do with the recordings. We clean them up (trim silence, reduce background noise, even out the volume), transcribe them on our own servers to check that you read the sentence, and compare voice characteristics to confirm it is the same person. From the best recordings we make a voice model. We then test the model by having it read a few lines (including your name) and check that the result is clear and sounds like you. The recordings you made in a session are deleted once your voice is built or the session expires, unless you tick the "Help bring 2hives to my language" box (see below). The model's reference recording and your consent recording are kept with the model.
• Your own sessions. A private voice is used only for sessions you make. You choose whether it reads a whole session or only your personal lines.
• Community voices (only if you choose to publish). If you make your voice public, you give a separate consent (a checkbox and a second spoken sentence). Other 2hives users can then hear a short sample and choose your voice for their own sessions. Your public profile shows only the display name and description you choose, which need not be your real name, and never your account details. Every public voice is reviewed automatically before it is listed: text checks run first, then an AI service acting for us (Anthropic, see section 3) checks the display name and description and approves or rejects it straight away; anything it is unsure about goes to a person at 2hives. Only the display name and description are sent, never your audio. A person can still review a voice after reports from other users. You can unpublish or delete your voice at any time. After that, nobody can make new audio with it, but sessions other people already made with it stay playable for them. We keep a record of which sessions used your voice (session and order numbers and amounts), so a revenue share could be offered in the future. We don't pay voice owners at present.
• Watermark. Every line spoken in a cloned voice carries an inaudible watermark (AudioSeal) that identifies it as synthetic and lets us trace it to the session it was made for.
• Not used for training unless you choose it: your voice model is used only to speak sessions, never to train or improve any AI model, by us or anyone else. Your own-voice recordings are not used for training either, unless you tick the separate "Help bring 2hives to my language" box (below). Not sold. All voice processing happens on our own servers in Australia; no voice audio is sent to any outside provider.
• Help bring 2hives to my language (optional, only if you tick it). When you record your voice, a separate box asks whether we may also use your recordings to train 2hives voice models for your language. It is never ticked for you, and your voice works the same either way. If you tick it, we keep the sentence recordings you made for your voice after it is built, encrypted with a key unique to your account, and use them only to train 2hives voice models. They are never used to make a voice that sounds like you available to anyone, as a public voice or in our products. We record the opt-in with its time, a consent ID and the country your connection came from. You can withdraw at any time with Withdraw from training on your voice page; deleting your voice or closing your account also withdraws. We then delete the recordings immediately, and from backups within 30 days, and leave them out of every future training round. A model already trained with them can't "unlearn" them, so we stop using those model versions. If you don't tick the box, the recordings are deleted once your voice is built, as described above.
• Protected: recordings and models are stored encrypted with a key unique to your account, readable only by our voice and rendering services.
• Kept until you delete it. You can delete your voice at any time; closing your account deletes it too. Either way, we delete the recordings, the model and any audio cached from it immediately, and from backups within 30 days. Sessions already made with it, by you or by other users, stay with them.
• Your data export lists your voices, their languages, status and consent records (including any "Help bring 2hives to my language" opt-in), and your publications, ratings and reports. It does not include the audio itself.

Profile pictures

If you have a voice, a profile picture is shown next to it: in Community voices, in the voice picker and on your own "My voice" card.

• Your choice. If you don't choose a picture, we show a generated avatar (colours and the initials of your public display name). You can instead pick one of our abstract 2hives pictures, or upload your own.
• Uploading (optional). You can upload a JPG, PNG or WebP image of up to 5 MB. It is cropped square in your browser, and our server saves it again as a new image in two sizes. We remove all metadata, such as camera details, location (GPS) and colour profiles. The files get random names and are stored on our own servers in Australia.
• Review before others see it. Before anyone else sees an uploaded picture, an AI model acting for us (Anthropic's Claude, see section 3) checks it for nudity, violence, hate symbols, children, famous people or several people, logos or advertising, contact details, links or QR codes, offensive gestures, and disturbing images. Only the image is sent, never your name or account details. Until a picture is approved, or if it is rejected, others see your chosen 2hives picture or the generated avatar. If it is rejected, we show you a short reason. Other users can report a picture; after reports from 3 different people it is hidden until a moderator decides.
• Used only for this. We use your picture only to show it next to your voice. We never use it for anything else, and never to train any AI model.
• Removing it. You can remove your picture at any time in the "My voice" section of your account; we then delete the files immediately. Closing your account deletes it too. Your data export includes the picture itself.

Reading sessions for 2hives voices

If we invite you, you can read sentences aloud to help us build the synthetic guide voices used in 2hives sessions. This is separate from "Your own voice": recordings made for your own voice are used for training only if you tick that page's own, separate "Help bring 2hives to my language" box.

• Only with your explicit consent, 18 or older. Before you start, you confirm that you are 18 or older, tick a consent box, and read a consent statement aloud that includes your name. We keep a record of what you agreed to and when:

  • the statement and its transcript;
  • a fingerprint (hash) of the recording;
  • the time;
  • the country your connection came from.

  This consent is recorded separately from any other consent you have given us.

• What we collect.

  • Your recordings of the sentences and of the consent statement.
  • The automatic check results for each recording (noise, loudness, length, and how closely an automatic transcript matched the sentence).
  • Your progress through the script.

• What we do with it.

  • We use your recordings to train synthetic voices.
  • 2hives may use those voices as guide voices in its products, including paid products (commercial use).
  • The trained voice does not reproduce your recordings, but it may sound like you.
  • We do not sell your recordings or share them with other companies.
  • All recording, checking and training happens on our own servers in Australia.

• Protected. Recordings are stored encrypted with a key unique to your account. Only our training process and you (to play back your own takes) can read them.

• Withdrawing.

  • You can withdraw at any time on the reading page, or by closing your account.
  • We then delete all your recordings immediately, and from backups within 30 days.
  • They are left out of every future training round.
  • A voice that was already trained with them can't "unlearn" them. We stop using those versions and do not publish new ones made with your recordings.
  • We keep the consent record (without audio) to show what you agreed to and when you withdrew.

• Retention. Recordings are kept until you withdraw or close your account. The consent record is kept as long as we use, or could be asked about, a voice trained with your recordings.

• Your data export includes your consent record, status and number of recordings. It does not include the audio.

Voice review

Where available, people who speak a language natively can help check how 2hives voices sound in it, through an invitation link or from their account.

• What we keep: your ratings (how natural a clip sounds, whether its words are pronounced well, which of two versions you prefer), the words you mark together with the sentence they appear in, an optional typed hint, and an optional short recording of you saying a word.
• Your recording (only if you agree): used only to correct how 2hives voices pronounce that word, never to make a voice that sounds like you.
• How your answers are used: to decide which voice versions we use and to fix how words are pronounced, that is, to improve 2hives voices.
• Who you are to us: if you join with an invitation link, your answers are linked only to a random code, not to a name, email address or account. If you join from your account, or sign in to collect Plus days, your answers are linked to your account.
• Rewards and credits: if you earn Plus days, we record each reward with your account. Your display name appears on our credits page only if you choose it, and you can remove it at any time.
• Deleting: you can delete everything you gave at any time with "Delete everything I gave" on the review page. Closing your account deletes it too. Your data export includes your answers, but not audio.

Interactive guided sessions

In an interactive session the guide listens to your answers. Because your voice can identify you, we handle it like the "Your own voice" recordings above:

• Only with your explicit consent, given on the consent screen before each session (18 or older, microphone, AI guide). You can choose Don't keep my voice: the recording then keeps only the guide and the tones.
• Saving is your choice. Before each session you choose whether to save this session to your library (off by default for the trial session, on by default for paid sessions). Not saved: nothing is recorded; your microphone audio is transcribed as you speak and not kept, and the transcript exists only in our server's memory during the session. Afterwards we keep only a minimal record: when it ran and for how long, its status, your guide and audio settings, how it was paid for, the cost of the AI calls and, if the safety check stopped it, the kind of concern and when (not your words). Saved: the recording, the transcript, your settings and a written summary are kept in your library, as described below.
• How it works: your microphone audio is transcribed on our own servers in Australia. Only the transcribed text (never the audio) is sent to Anthropic to write the next part, and to check for signs that you may need urgent help. Under its commercial terms Anthropic doesn't use it to train models; neither do we.
• Safety: if what you say suggests you may be in danger, the session stops, shows crisis lines, and the session is flagged so that our team can review it.
• Protected and yours: recordings are stored encrypted with a key for your account, readable only by you through your library. Delete a session there at any time; closing your account deletes all of them. Your data export includes each session's details, transcript and summary (not the audio).
• The trial session: to keep the one-time trial session (at no charge) to one per person, we keep a one-way hash of your email address (and of your Google account if you sign in with Google), also after you close your account, and for 30 days a one-way hash of your IP address and its network prefix.

Gifts

When you give a 2hives session or course, you tell us about the person you're giving it to:

• What we keep: their first name (and how to pronounce it), their email address if you ask us to email the gift, your personal message, the intention you wrote for their script, the guide and language you chose, and when to deliver it. We use these only to deliver the gift, show it on the gift page and personalise the session once it's opened.
• Please only give us details you are allowed to share. We email the recipient once, at the delivery time you choose (and never add them to marketing lists). If they don't open the gift, we don't contact them again.
• The gift link: anyone with the link can see the gift page (the first name, your message and the course) and open the gift, so share it only with the recipient. Gift pages are not shown in search engines.
• "Gift opened" note: if you ask for it, we email you when the gift is first opened; we don't tell you anything else about how the recipient uses 2hives.
• When it's opened, the session becomes part of the recipient's own account and this policy applies to them as a 2hives user. They can change the intention and the name in their session.
• Deletion: if the recipient closes their account, we remove their name, email address and your message from the gift record. If you close yours, gifts you paid for still work for their recipients; the order record is kept for tax purposes.

Live together sessions

Live together sessions are group listening sessions, free, every week:

• Listening: while you listen, your browser sends an anonymous signal every 20 seconds so we can show how many people are listening. It carries a random number made for that browser tab, not your account; we keep it in memory for under a minute and never store it.
• Reminders (only if you ask): we keep that you asked for a reminder for a session and email you a day before and 15 minutes before it starts. Every reminder has a link to stop them.
• Reflection wall (only if you post): to post you must be signed in and 18 or older. We keep your post, the name you chose to show (optional; it can be a nickname) and your account ID with it. Other visitors see only the post and that name, never your email or account. Posts are checked automatically before they appear: a post that suggests someone may be in danger is not shown, and we show the writer crisis lines; posts with health claims are held for a moderator; anyone can report a post. Our team can see and remove any post.
• Deletion: you can ask us to remove a post at any time (info@2hives.com); closing your account deletes your posts and reminders.

Shared intentions in live sessions

If you choose to share an intention during a live group session, we turn a voice recording into text on our servers and delete the recording straight away; we never store or replay your voice. The text is checked automatically (and may be checked by a moderator and an AI service acting for us) and, if it fits, read aloud anonymously by the session's synthetic guide voice to everyone listening. We show your city or country only if you ask us to. We keep the text with the session for 30 days for moderation and safety review, together with a link to your account so we can act on misuse; after 30 days both are deleted. If what you share suggests you may be in danger, we never read it aloud and we show you help lines for your country. You can export or delete this data from your account at any time.

Abuse prevention

Your 5 free hours use our own computers, so we protect them from automated sign-ups. Signing up is never blocked because of your network: offices, universities and mobile networks share one address.

• Turnstile by Cloudflare: a privacy-friendly check that a person, not a bot, is signing up, making a preview or starting a session. Cloudflare processes it for us as a service provider.
• Device signal: a random identifier in a first-party cookie and in your browser's local storage, so one device doesn't collect the 5 free hours many times. It contains nothing about you.
• Network signal: we keep only a one-way hash of your IP address and its network prefix (for example 203.0.113.0/24), never the address itself, and we delete both after 30 days.
• Mailbox: we keep a one-way hash of your email address with dots and "+tags" removed, so one mailbox gets the 5 free hours only once. If these signals look unusual, your free hours can start a little later while we check; your account works as usual in the meantime.

Live session chat

On a live together session page there is a short chat, open for 10 minutes before and 10 minutes after the session (never while it plays).

• To write you must be signed in, 18 or older, and choose a name to show (a nickname). Others see only that name and your message, never your email or account.
• Voice messages (only if you use them): your microphone records only while you hold the 🎙 button (or between two presses), for at most 30 seconds. We turn the recording into text on our own servers, even out its volume, remove any file details and keep it so others in the chat can play it.
• Automatic checks: every message, and the text of every voice message, is checked before anyone else sees it: first by our own filters, then by an AI service (Anthropic) that receives only the text of the message and the last few messages in the room, never your email, account or audio. A message may be held for a moderator or not shown. If a message suggests you may be in danger, we don't show it, we show you help lines, and our team is alerted.
• Never used for training: chat messages and voice messages are never used to train voices or AI models.
• Kept for 48 hours together with the result of the checks, then deleted. They are included when you export your data and deleted when you close your account.

Hosted groups

Plus members can host a private group session (by invitation) or a public group event that anyone can find and join.

• What is public for a public event: the host name the host chooses, the event's title, description, date and time, and its language. The host's account and email are never shown.
• What the host sees: the names guests choose in the chat, and, for private groups, the email addresses the host typed in to send invitations. Never a guest's account or email otherwise.
• Invitations by email (private groups): we send the invitation and keep the address with the group so the host can see whom they invited; it is deleted with the group or when the host closes their account. We don't use it for anything else.
• Automatic checks: the host name, title, description and intention are checked automatically before a public event appears (first by our own filters, then by an AI service, Anthropic, text only), and an intention is turned into the session's words by our script writer. No person reviews a public event before it is published.
• Event picture (optional): a Plus host can upload a JPEG, PNG or WebP image of up to 8 MB as the picture of a public or private event. Our server saves it again as a new image: all metadata, such as camera details and location (GPS), is removed, and it is cropped to a standard shape, resized and stored on our own servers in Australia, not at public file addresses. Before it is shown, an AI model acting for us (Anthropic, see section 3) checks the image for nudity, violence, hate symbols, children, famous people, logos and text; any text in it is read and checked against our content rules. Only the image is sent, never your name or account details. If the check can't run, the picture is not saved and the host is asked to try again later. No person reviews it first, but anyone can report it and our team can remove it. For a public event the picture is shown on the event page and in listings; for a private group, only to people who have the link. It is deleted when the host removes it, when the event is cancelled or when the account is deleted, and it is never used to train any AI model.
• Events without an uploaded picture show a picture that our own software draws from the event's title and description. No outside service is involved.
• Host's own voice: if a host chooses to use their own synthetic voice for an event, everyone who joins that event hears it.
• Chat in a group works as in every live session (see above), including the automatic checks and help for anyone in crisis. Reports go to the 2hives team, not to the host.
• Records: we keep each public event's details and the result of its checks while it is listed and for 12 months after it ends, and moderation records (reports, removals, suspensions and the reasons) for 12 months, to handle reports, repeat problems and requests from regulators.

Practice log

After a session you can add an optional private note: how it was (one of three words) and a few lines of your own. We keep it with your account with the date, the session and the minutes you listened, and show it only to you, in your library. It is never shared, never sent to an AI service and never used to train voices or models. Our server checks the note's wording only to show you support lines privately if it sounds like you may be in danger; your note is always saved as you wrote it. It is kept until you delete it or close your account, and it is included when you export your data.

4. How long we keep it

5. Your choices and rights

• Access and export: download a copy of your data from your account page.
• Correction: update your details from your account page, or ask us.
• Deletion: close your account from your account page. We then delete your programs, scripts, audio and listening history, except what we must keep by law.
• Marketing emails: every marketing email has an unsubscribe link (Spam Act 2003). Service emails, such as sign-in links and receipts, are necessary for the service.
• EU and UK users: you may also object to or restrict processing, and complain to your local data protection authority.

6. Security

We use encryption in transit (HTTPS), hashed session tokens, restricted and sandboxed services, and least-privilege access. No system is perfectly secure; if a data breach is likely to cause you serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.

7. Children

2hives is intended for adults. If you are under 18, please use it only with a parent or guardian's permission. We don't knowingly collect information from children under 13.

8. Complaints and contact

Email info@2hives.com with any question or complaint; we aim to reply within 30 days. If you aren't satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

2BEE FARM PTY LTD, trading as 2hives · ABN 57 697 830 461 · info@2hives.com