What the magic beans do
Tap ✨ Perform magic (or the Invite and Travel booking buttons) and beanies reads a single photo or document you choose — a party invitation, a flight itinerary, a hotel confirmation — and magically pulls out the key details, then opens a pre-filled activity or trip for you to check and save. As you probably guessed, it's not actually magic: it's secure, private AI. It only ever runs on the one document you pick, and only when you ask.
What we send
- Only the one photo or document you chose for that action.
- Never the rest of your family's data — your accounts, activities, trips, members, and notes never leave your device for this.
- Nothing is sent until you confirm. You can decline and fill the activity or trip in by hand.
Where it goes
On the default setting, your photo or document is encrypted and sent to a private, secure AI service that processes it and keeps nothing. It is encrypted while it travels to and from that service. If you bring your own AI provider (BYOK), it goes to that provider instead, using your key.
The AI service processes your document in a secure, attested environment and retains nothing after it answers. It is encrypted in transit. Once your document or image arrives in the secure enclave, it is decrypted and processed to read, encrypt, and return the details back to beanies.family.
How your data is kept secure
On the default setting, your photo or document is read by a specialist AI model running inside attested confidential-compute hardware. It is a sealed environment, built on AMD SEV-SNP and Intel TDX chips, that the company operating the servers cannot see into. Your document is encrypted on the way there and back, read only to pull out the details, and then it is gone.
- Sealed processing: your document is decrypted and read only inside the attested enclave, not on an ordinary server someone could log into.
- Encrypted in transit: it is encrypted on the way to the enclave and on the way back.
- Nothing kept, nothing trained on: the AI service retains nothing once it has answered, and never uses your data to train its models.
- You can verify it: the enclave publishes a live attestation, a cryptographic proof of exactly what hardware and code are running, so the privacy promise is not just our word for it.
- Or skip it entirely: bring your own AI provider and key (BYOK) and your document goes straight to your provider, never through ours.
Today that secure hardware is provided by Tinfoil, a privacy-focused AI host whose enclaves both we and you can verify on every request. If we ever change providers, it will only be to one that meets the same verifiable standard. We try to be precise rather than boastful: the AI genuinely does read your document to pull out the details, but that only ever happens inside sealed, verifiable hardware, and nothing is kept.
What happens afterwards
The AI service does not retain any data or information. The photo or document you picked is saved only with your own family's data file, and attached to the activity, trip, or other item it created, so you can find it later. You can remove it before saving if you'd like.
The “don’t ask again” choice
Ticking "don’t ask again" in the consent box turns off the AI consent prompt for your whole family, not just your device, because the setting is shared with your family data. You can turn the prompt back on any time in Settings → AI & Privacy.