Privacy Policy — Blue Dots

1. Information We Collect

Account Information

When you create an account with an email address and password, we collect your email address, your password (securely hashed), and your date of birth, which we use to confirm you meet the App's minimum age requirement. If you sign in with Google, we receive your email address and basic profile information (such as your name and profile picture) from Google, and we use that name as your starting display name. If you sign in with Apple, we keep your email address (or, if you chose Apple's option to hide your email, the private relay address Apple gives us) and the account identifier Apple gives us. We also hold a display name for you. You can choose it, and until you do, it comes from your Google or Apple account, or from the part of your email address before the @. When you agree to our Terms of Service and Privacy Policy, we keep a record of which version you agreed to and when, including every earlier version you agreed to, so we can show that you agreed. That record is deleted when you delete your account.

User Content

We store photos you upload, location markers you create, and tool information you enter to provide our service. If you add a profile picture, we store it and show it to the people you share a Space with, your friends, the people you have a conversation with, and anyone you send a friend request to while that request is waiting for an answer. You can change or remove it at any time from your Profile tab. It is deleted when you delete your account. If you write a short bio on your profile, we store it and show it to you and your friends. A bio you saved before friends could see bios stays visible only to you until you save it again. You can change or remove it at any time, and it is deleted when you delete your account.

Receipts (optional)

If you attach a photo of a purchase receipt to an item, we store that image so it can be included in your inventory PDF export. Receipts are stored exactly as you upload them — we do not read, parse, or extract any information from them — and they are visible only to you, never to other members of a Space or to anyone you share with.

Usage Data & Device Permissions

We collect some usage information to run and improve the App, including: which paywalls and first-run screens you see and what you choose on them, which Adapty records on your profile (see "Third-Party Services" below); how many AI scans you use and how far you got in the tutorial; technical logs, including errors, that our servers keep when the App talks to them; and, if you send us feedback or a bug report, what you write plus technical details the App adds, such as the App version, your device platform and your plan. This information is linked to your account; it is not anonymous. We request camera permission so you can take photos of your items directly within the App; camera access is used only when you explicitly choose to take a photo, and we do not access your camera in the background. We request photo library permission so you can select existing photos from your device; we only access photos you explicitly select.

If you allow notifications, we store a push token for your device (the address our notification service uses to reach it), together with the device platform, a persistent identifier for that device, the App version, your device's language and time zone, and when the App was last active on that device. We use these to deliver notifications in your language at a sensible local time. We try to remove the token when you sign out, and it is deleted when you delete your account. You can turn notifications off altogether, or turn off the status check and friend-request notifications on their own, under Profile, Settings, Notifications.

First-Run Questions and Email Choices

When you first open the App we ask a few short optional questions — things like where you heard about us, what you want to get out of the App, and what kind of space you're organizing. You can skip them. If you answer, we store your answers on your account and send them to Adapty, which we use for subscription management and product analytics, and we copy them once to Airtable for our own product analysis (see "Third-Party Services" below). We use them to understand who the App is for and what to build next, and they may inform which subscription offer you are shown; we do not use them to target advertising. If you have also opted in to our newsletter, the "what you want to get out of it" answer is reduced to one of five fixed groups and sent to Resend, so you get the edition that fits you. That grouping only decides which edition of a newsletter you get — it is not automated decision-making with legal or similarly significant effects (GDPR Article 22).

We also keep a record of your email choices: whether you opted in to the newsletter, whether you opted in to research questions, when each choice was made, and where in the App you made it. We keep that record so we can show we had your permission before emailing you, as GDPR Article 7(1) requires.

Spaces (Family or Work) Data

When you create or join a Space — whether a Family Space (intended for households) or a Work Space (intended for small teams) — we collect and store:

Your membership in the Space (Space identifier, your role, and the date you joined).
Items you save while in that Space's context (storage photos, location markers, and item details). These items are visible to other current members of that Space, in line with their role.
For Space owners: invite codes you generate and the email address you send each invite to. Invite codes are stored only as a one-way cryptographic hash and expire 24 hours after creation.
For invitees: the email you used to redeem an invite is matched against the invite to verify your identity. We do not store the plaintext code after redemption.

Personal Share Data

When you issue or receive a Personal Share link, we collect and store:

The identity of the link issuer and, after redemption, the identity of the viewer.
The expiry timestamp you chose at creation (7, 14, or 30 days) and any revocation timestamp.
The 6-digit redemption code, stored as a one-way cryptographic hash (the plaintext code is shown to you once at creation and never stored).

Personal Share access is read-only: viewers can see the items in your Personal mode but cannot add, edit, or remove them. Personal Share access events are not currently recorded in an audit log.

Friends

When you use Friends, we collect and store:

Your friend code — an 8-character code the App gives you so people can add you as a friend. It is meant to be shared, so it is stored as it is, not as a secret. You can replace it with a new one at most once every 8 hours; the old code stops working straight away. Anyone who types your code sees your display name.
A count of your recent attempts to add friends, so we can slow down anyone trying to guess codes or send requests in bulk.
Friend requests — who sent one to whom, when, and how it ended (accepted, declined, withdrawn, or cancelled). A request nobody answers expires after 30 days. Requests that have ended are deleted 30 days after they end.
Friendships — the two people, and the date the friendship started. A friendship lasts until either of you removes it, blocks the other, or deletes their account.

While a friend request you sent is waiting for an answer, the person you sent it to can see your display name and your profile picture. Friends see each other's display name and profile picture and can message each other in the App. Blocking someone ends any friendship between you and withdraws any pending request in either direction. Apart from the things you mark to let go, being friends does not, on its own, show anyone your rooms, Blue Dots, items or photos. What you can choose to share with one friend, and what your friends see of the things you mark to let go, is described under Sharing with Friends and Showing Things to Your Friends below.

Sharing with Friends

You can show a friend one room, one Blue Dot or one item — one thing per send — from your chat with them. Nothing is shared until you do that.

Permission is per friend and works one way. It is off until you turn it on: the first time you share something with a particular friend, we ask you to confirm, and that confirmation is what turns sharing with that person on. It does not work both ways: sharing with someone does not mean they are sharing with you.
Only what you send becomes visible to that friend. Apart from things you mark to let go (see Showing Things to Your Friends below), a friend never sees your other rooms, Blue Dots or items, and what you share with one friend never appears in anyone else's lists, search, statistics or export.
A shared room shows the room photo, your own Blue Dots on it, and the items on those Blue Dots. A shared Blue Dot shows that Blue Dot, the items on it, and the photo of the room it was on when you shared it. A shared item shows its photo, name, status, quantity, and the asking price if you marked it for sale. A share stays live, so later changes to the thing show too.
A room photo is shown whole, and anything else in the frame is shown with it. This is also true when you share a single Blue Dot: your friend sees the whole photo it sits on. The other Blue Dots on that photo are not shown — not their names, their positions, or how many there are.
Receipts are never shared with a friend, by any route. Neither are your notes, or the value you recorded for an item.
You can stop at any time. You can stop one shared thing, which removes that record, or turn sharing with that person off, which closes everything you shared with them at once and keeps the records so you can turn it back on. Removing the friend, blocking them, or either of you deleting the account removes the records for good.
When you stop, we stop answering for that thing straight away. If your friend is looking at it right then, their screen — and a photo already loaded on their phone — can take up to about fifteen minutes to catch up. We cannot take back anything they have already seen or saved.
Moving a shared thing into a Family or Work Space, or moving a shared Blue Dot to another room, ends that share permanently. Moving it back does not start it again; you would have to share it again.

Messages

When you message someone in the App, we store what is needed to deliver the conversation:

The messages you send and receive, including photos you attach and the rooms, items or Blue Dots you pin to a message. A pin is a reference, not a copy: the other person can open it only where they can already see it, or — in a chat with a friend — where you have shared that room, Blue Dot or item with them (see Sharing with Friends above). Before a photo is uploaded, the App saves it again as a new image, which drops hidden details such as the location your phone adds to a picture.
Who is in each conversation, when the latest message was sent, a short preview of it, and what you have read.
Blocks — who you have blocked and when. Blocking someone stops them from messaging you or sending you friend requests, ends any friendship between you, and withdraws any pending friend request in either direction. We don't notify them. A block lasts until you unblock the person from your conversation with them, or either account is deleted. A block you make from a friend request, where there is no conversation, lasts until either account is deleted.
Reports — if you report someone, we store who made the report, who it is about, the reason chosen (Spam, Harassment, Inappropriate content, or Something else), and, if you reported from a conversation, which conversation. To decide what to do, we may read the messages in that conversation. The person you report is not told who reported them.

Messages cannot be edited or deleted one by one. When either person deletes their account, the conversation, including its photos, is removed from our active systems.

Showing Things to Your Friends

The things you are letting go — ones marked Want to Sell, Donate or Gift, or Get Rid Of — are shown to all your friends. There is no switch: when a thing in Personal mode has a photo and one of those three statuses, the App shows it to your friends. This includes things you marked before this rule began. Those are shown from 24 hours after you agree to this update, so you have a day to give any of them another status first. Things you mark after you agree are shown straight away. A thing without a photo is shown once it has one.

Who sees it: the people you are friends with in the App, and nobody else. Not the public, not anyone with a share code or link, and not members of your Spaces unless they are also your friends. If either of you ends the friendship, or either of you blocks the other, they stop seeing it.
What they see: a copy of the item's photo, its name, status and quantity, and the asking price if it is marked Want to Sell. They see it on the profile page they can open for you. They never see your notes, the value you recorded, your receipt, the room or Blue Dot it is on, or when you added it.
The photo: when a thing is shown, the App makes a new copy of its photo, and we store that copy separately. Making the copy drops hidden details such as the location your phone adds to a picture. Anything visible in the frame is shown with it.
Only things in Personal mode are shown. Things in a Family or Work Space never are. A thing you move from a Space into Personal mode is shown once you give it one of the three statuses after the move.
A thing stops being shown when you give it a status other than Want to Sell, Donate or Gift, or Get Rid Of, move it into a Space, delete it, or choose Stop showing in its menu. Stop showing lasts until you give the thing a status other than those three. If you later mark it Want to Sell, Donate or Gift, or Get Rid Of again, it is shown again, with a new copy of its photo.
When a thing stops being shown, we stop answering for it straight away. A friend who has it open right then can take up to about fifteen minutes to catch up, and we cannot take back anything they have already seen or saved.
"I want this", "Ask for it" and "Make an offer" send an ordinary message in your chat with the owner (see Messages above). An offer is kept only as the text of that message. We keep no separate record of offers or amounts.

Comments

Your friends can comment on a thing you show them, and you can reply.

A comment is personal data about the person who wrote it. We store the text, who wrote it, which thing it is on, and when.
Who can read a comment: the owner of the thing, and everyone who is friends with the owner. That includes people the writer is not friends with and may not know. Next to each comment they see the writer's display name and its first letter. They do not see the writer's profile picture, friend code or email address.
Comments are plain text, up to 200 characters. Before a comment is saved, we check it: we remove hidden characters, and we turn it down if it contains a link, an email address, a phone number, a username from another app, or a word on our list of words that are not allowed.
A comment cannot be edited. The writer can delete their own comment at any time. The owner of the thing can hide a comment, so that only the owner and the writer still see it, or remove it, which deletes it for everyone.
If you block someone from a comment, you stop seeing each other's comments anywhere in the App, you cannot message each other, and any friendship between you ends. If you and the owner of a thing stop being friends — because one of you ends the friendship, blocks the other, or deletes their account — your comments on their things are deleted.
If the owner gives a thing a status other than Want to Sell, Donate or Gift, or Get Rid Of, or moves it into a Space, its comments are deleted. If the owner only chooses Stop showing, the comments are kept, but nobody can read them, until the owner gives the thing a status other than those three. A thing that is shown again always starts with no comments.
We do not send push notifications about comments or offers.
Reports: you can report a comment, a thing someone shows you, or a friend's bio. We store who made the report, who it is about, the reason chosen (Spam, Harassment, Inappropriate content, or Something else), and — for a comment or a bio — a copy of its text as it was when you reported it, so we can still act if it is deleted. We look at every report within 24 hours. We may remove the comment, stop showing the thing, or stop the account from commenting or showing things for a while. Nobody is told who reported them. The owner of the thing may see that a comment on it has been reported, but not by whom. A short alert with the reason and internal identifiers goes to our team's Slack workspace.

Referral Code

When you get your referral code (BD- followed by 8 characters), we store it as it is, because it is meant to be shared. We record how many times your code has been used and, for each redemption, which code was used, who shared it, who redeemed it, when, on which platform (iOS or Android), and when each free Pro period was granted. If you enter codes that don't exist, we count those attempts on your account to slow down guessing. We use these records to give the reward to both people and to apply the programme's limits. The length of the free period and the total limit are shown in the App where you share your code.

2. How We Use Your Information

We use your information to:

Provide and maintain the App
Process your subscription and payments
Send important service notifications
Deliver your messages and friend requests
Notify you when someone sends you a friend request or accepts yours — only if you allow notifications
Run the referral programme: give the free Pro period to both people and apply its limits
Act on blocks and reports to keep people safe
Show your friends the things you mark Want to Sell, Donate or Gift, or Get Rid Of, and show comments to the people who can see those things
Check comments for links, contact details and words that are not allowed, before they are saved
When you allow notifications, we keep a record of each notification we send you (which notification and any count or person's name it showed, when, whether it was delivered and opened) for up to 180 days, to keep reminders useful and rare
Send you our optional newsletter with special offers, organizing tips, and app updates — only if you opt in; you can withdraw at any time in the App's Settings
Ask you research questions by email — what's working and what isn't — but only if you opt in. We are not sending research emails yet: today we only record your choice. This is a separate choice from the newsletter, and you can withdraw either one on its own in the App's Settings
Choose which edition of the newsletter to send you, using the goal you picked in the first-run questions
Improve and develop new features
Ensure security and prevent fraud
Allow members of a Space (Family or Work) to view and search items shared in that Space
Validate invite codes when joining a Space
Show Space owners the current member list and roles

Lawful Basis for Processing (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases (Article 6 GDPR):

Creating and maintaining your account, providing the App, Spaces, Personal Share, Friends, Messages, showing your friends the things you mark to let go (including things you marked before this update, after the 24-hour notice), comments, and the referral programme, and processing subscriptions — performance of a contract (Art. 6(1)(b)).
Camera and photo-library access, optional marketing communications, and optional research questions — consent (Art. 6(1)(a)), which you can withdraw at any time. The newsletter and the research questions are two separate consents; withdrawing one does not withdraw the other.
Security, fraud prevention, error reporting, acting on blocks and reports to keep people safe, checking comments before they are saved, keeping a record of your agreement to our Terms and Privacy Policy, understanding how people find and use the App (including the copy of your first-run answers in Airtable), and improving the App — our legitimate interests (Art. 6(1)(f)).
Sending notifications you have allowed, and keeping a record of the notifications we send — performance of a contract for reminders you set on items, the status check you turn on, and notifications about friend requests (Art. 6(1)(b)), and our legitimate interests for the automatic reminders about your items and for keeping notifications useful and rare (Art. 6(1)(f)).
Retaining transaction and accounting records — compliance with a legal obligation (Art. 6(1)(c)).

Where we rely on consent, you may withdraw it at any time without affecting processing already carried out. Where we rely on legitimate interests, you may object (see "Your Rights").

3. Data Storage and Security

Your data is stored securely on cloud servers with encryption at rest and in transit. We implement industry-standard security measures to protect your information. Your photos and data are stored in secure cloud storage with access controls.

4. Data Sharing

We do not sell your personal information. We may share data with:

Service providers who help operate our service (payment processing, hosting, email delivery, notification delivery, product analysis)
Legal authorities when required by law
Successors in a business transfer or acquisition
Other members of a Space you join (Family or Work): they can see items you save in that Space's context, your display name, your role in the Space, and the date you joined. They cannot see items you save in Personal mode — those remain private to you.
The Space Owner can additionally see items you have marked private to other Members. Per-Member privacy controls limit visibility to other Members and Viewers of the Space; they do not hide items from the Owner, who remains able to see everything contributed to the Space they own.
Personal Share viewers: a user you grant a Personal Share link to can see (read-only) the items in your Personal mode for the duration of the link.
Your friends: they can see your display name, profile picture and bio, and can open a profile page for you showing those, the date you became friends, how many things you have shared with them, and the things you have marked to let go (see Showing Things to Your Friends).
Friends you share something with: a friend you share a room, a Blue Dot or an item with can see that one thing, read-only, until you stop sharing it. If it is a room or a Blue Dot, they also see the whole room photo. They cannot see your receipts, your notes, or the value you recorded.
People who can read your comments: when you comment on a thing, everyone who is friends with its owner can read your comment and see your display name, even if they are not your friend.
People who add you: anyone who types your friend code sees your display name, and the person you send a friend request to can see your display name and profile picture while it is waiting for an answer.
People you message: they receive what you send them and keep their copy for as long as the conversation exists.

5. Your Rights

You have the right to:

Access your personal data
Request a copy of your personal data in a structured, commonly used, machine-readable format (GDPR Article 20). To request your data, email support@bluedotsapp.com. We will respond within 30 days. The export will include your profile information, item entries, photos, receipts, Space memberships, the things you show your friends, the comments you have written, your email choices and when you made them, and any answers you gave to the first-run questions.
Correct inaccurate data
Restrict or object to certain processing of your personal data
Withdraw your consent at any time where our processing is based on consent; this does not affect the lawfulness of processing carried out before withdrawal
Lodge a complaint with a data protection supervisory authority (in Norway, Datatilsynet — datatilsynet.no)
Delete your account and data. If you are the Owner of a Family or Work Space, deleting your account or cancelling the Space's subscription will end other members' access to that Space, so consider winding the Space down first.
Opt out of marketing communications. When you do, we stop sending, and we stop using the grouping that picks your newsletter edition. The newsletter and the research questions are separate switches in the App's Settings, and you can turn off either one without the other
Leave a Space at any time, which immediately revokes your access to that Space's shared items. Your personal items stay private and unaffected. Note that items you contributed to a Space remain with that Space after you leave or are removed; they are not withdrawn with you. If you need a specific item removed, you must do so before leaving, or contact the Space Owner.
Revoke a Personal Share link you issued at any time before its expiry; access ends immediately upon revocation.
Stop sharing with a friend at any time — one thing on its own, or everything you share with that person at once.
Stop showing a thing to your friends at any time.
Delete your own comments at any time, and hide or remove any comment on a thing you show.
Remove a friend, withdraw a friend request you sent, or block anyone who messages you or sends you a friend request, at any time. You can unblock someone from your conversation with them.
Replace your friend code with a new one (at most once every 8 hours).
Turn off all notifications, or the status check and friend-request notifications on their own, under Profile, Settings, Notifications.
For Space owners: invite, remove, or change the role of any member, and cancel the Space's subscription at any time.

6. Data Retention

We retain your data as long as your account is active. When you delete your account, your personal data and uploaded content are removed from our active systems immediately, except where retention is required by law. Residual copies may persist in encrypted database backups for up to 7 days, after which they are automatically purged. We do not access backups except to restore service in the event of data loss.

Email choices and newsletter contact: We keep your newsletter and research choices, and the record of when and where you made them, for as long as your account exists; both are deleted with your account, and we stop sending you the newsletter. Resend may still hold your email address, and the grouping tag attached to it, on its contact list; email support@bluedotsapp.com and we will remove them there too.

First-run answers in Airtable: The copy of your first-run answers in Airtable is kept for up to 24 months after it was made, and then deleted. It holds no name, email address or account identifier. Deleting your account does not delete this copy from Airtable. It does delete the answers we keep with your account, and without them we have no way to tell which copy was yours.

Agreements: The record of which versions of our Terms of Service and Privacy Policy you agreed to, and when, is kept for as long as your account exists.

Space data (Family or Work): Items you save to a Space remain in that Space until you remove them or the Space owner removes them. When a member is removed from or leaves a Space, they immediately lose access to that Space's shared items; items they contributed remain with the Space; their personal items are unaffected. Invite codes you generate stop working 24 hours after creation.

Personal Share data: Personal Share links carry an expiry of 7, 14, or 30 days at your choice. After expiry or revocation, the link can no longer be redeemed and the viewer's access ends immediately. Records of issued links (including expiry and revocation timestamps) are retained for the lifetime of the issuing account, except where you delete them earlier.

Friends: A friendship lasts until either person removes it, blocks the other, or deletes their account. A friend request nobody answers expires after 30 days, and requests that have ended are deleted 30 days after they end. Your friend code is kept for as long as your account exists; when you replace it, the old code stops working.

Sharing with friends: A share record lasts until you stop that one share, remove the friend, block them, delete the thing itself, or either account is deleted. Turning sharing with a person off does not delete the records; they are kept so you can turn sharing back on. Moving a shared thing into a Space, or a shared Blue Dot to another room, deletes its share record, and moving it back does not restore it. We keep no record of when a friend opens something you shared.

Messages: Messages and their photos are kept for as long as the conversation exists. When either person deletes their account, the conversation, including its photos, is removed from our active systems. A block lasts until you unblock the person from your conversation with them, or either account is deleted. A block you make from a friend request, where there is no conversation, lasts until either account is deleted. A report is kept only for as long as both the account that made it and the account it is about exist. A short alert with the reason and internal identifiers stays in our team's Slack workspace.

Showing things to friends: The copy of a shown thing's photo is deleted when you stop showing the thing, when you show it again (we make a new copy), or when you delete the thing. The record that you showed a thing is kept until you delete the thing or your account.

Comments: A comment is kept until its writer deletes it, the owner of the thing removes it, the thing is deleted, the writer and the owner stop being friends, or either of their accounts is deleted.

Comment reports: A report about a comment, a shown thing or a bio, and the copy of a reported comment's or bio's text, is kept until 180 days after we have dealt with it, or until the account that made the report is deleted, whichever comes first — unless the law requires us to keep it longer, or we pass it to the police. Deleting the account a report is about does not delete the report. A short alert with the reason and internal identifiers stays in our team's Slack workspace. If we stop an account from commenting or showing things, we delete the record of that shortly after the stop ends, or when the account is deleted.

Referral records: Your referral code is kept for as long as your account exists. The record of a code you redeemed is kept for as long as your account exists. If the person whose code you redeemed deletes their account, that record stays but is no longer linked to them.

Push tokens: We try to remove a device's push token when you sign out on that device, and it is deleted when you delete your account. If a device stops accepting notifications, or someone else signs in on it, we mark the token as no longer in use and stop sending to it. The record of notifications we send you is kept for up to 180 days (see "How We Use Your Information").

Space activity log: Every Family or Work Space keeps a log of significant events in that Space: the Space being created, invites being created (including the email address the invite was sent to) and redeemed, members leaving or being removed, and role changes. In Work Spaces, the log also records rooms, Blue Dots and items being added and edited, with their names. The log can only be added to: no user can edit or delete an entry, including the Owner, so that it stays an accurate record. The Owner of a Work Space can see the last 13 months of the log in the App; the log of a Family Space is not shown in the App. The log is kept for as long as the Space exists and is deleted with the Space. If you delete your account, entries no longer name you as the person who acted, but entries that concern you, such as an invite sent to your email address or your leaving the Space, stay in the log until the Space is deleted. Personal mode does not generate an activity log.

7. Children's Privacy (COPPA Compliance)

The App is not intended for children under 13 years of age. In compliance with the Children's Online Privacy Protection Act (COPPA), we:

Ask for your date of birth when you create an account with an email address and password
Do not permit users under 13 to create an account with an email address and password
Do not knowingly collect personal information from children under 13
Will promptly delete any account if we learn the user is under 13

If you believe a child under 13 has provided us with personal information, please contact us immediately so we can take appropriate action.

European Union / European Economic Area: If you are a resident of the EU or EEA and are under 16 years of age, you may only use the App if a parent or legal guardian has provided consent on your behalf, in accordance with Article 8 of the General Data Protection Regulation. The same parental-consent requirement applies if you are invited to a Family or Work Space. We may request evidence of parental consent and may suspend or terminate accounts where consent cannot be verified.

If you sign in with Google or Apple, we do not ask for your date of birth. Google and Apple set their own minimum ages for accounts, but they do not check every user's age, so by agreeing to our Terms you confirm that you meet the age requirements above. If we become aware that a user is below the applicable age threshold regardless of sign-in method, we will delete their account and associated data.

Friends, comments and offers for people under 18: People aged 13 to 17 can use Friends, Messages, comments and offers like everyone else. A comment written by someone under 18 can be read by every friend of the thing's owner, and some of them may be adults the writer does not know. To limit this, only friends can see a shown thing or its comments; we turn a comment down if it contains a link, an email address, a phone number or a username from another app; anyone can report or block; and the owner of the thing can also hide or remove any comment on it. Blue Dots does not handle any payment between users. If you are under 18, talk to a parent or guardian before you agree to buy, sell or hand over anything.

8. Third-Party Services and International Data Transfers

All user data is stored on Supabase infrastructure hosted in Sweden (EU/EEA). We do not transfer personal data outside the EU/EEA except to the third-party processors disclosed below. The legal basis for each transfer is stated with that processor.

The App relies on the following third-party processors. Each operates under its own privacy policy, which we encourage you to review.

Supabase (database and back-end infrastructure, EU/EEA): hosts our Postgres database, authentication service, file storage, Realtime sync, and Edge Functions. Your account data, contributed items, Space membership records, and Personal Share records are stored within Supabase and are governed by row-level security so that each user only sees what their role permits.
Google Gemini API (Item Scanner functionality, operated by Google as a data processor under the Google Data Processing Addendum): processes uploaded images and text for object recognition. Per the Gemini API Additional Terms of Service (Paid tier), Google does not use prompts, uploaded photos, or responses to train its models. Inputs and outputs are retained for up to 55 days solely for abuse detection. Processing may occur outside the EEA; cross-border transfers are governed by the EU Standard Contractual Clauses (Processor-to-Processor, Google Exporter). Because region pinning is not available on this API endpoint, EU-only processing of Item Scanner images cannot currently be guaranteed.
Adapty (subscription management and analytics): operated by Adapty Tech Inc., headquartered in the United States. Subscription identifiers, purchase events, plan identifiers, transaction identifiers, and renewal status are transferred to Adapty for the purpose of provisioning and reconciling paid features. If you answer the questions we ask when you first open the App, those answers are also sent to Adapty as attributes on your profile. We use them to see which kinds of user get value from the App, and they may inform which subscription offer you are shown; we do not use them to target advertising. This transfer is governed by Standard Contractual Clauses (SCCs) as approved by the European Commission, and by Adapty's Data Processing Agreement. Adapty does not receive your contributed items, your Space member list, or the contents of any Space. The Adapty SDK may access your device's Advertising ID (AD_ID) for analytics, attribution, app performance insights, security, and fraud prevention; the App does not use the Advertising ID to display ads, and we do not track you across other companies' apps or websites. You can reset or limit your Advertising ID at any time in your device settings.
Apple App Store and Google Play (payment processing): process subscription payments and may transfer payment and device identifiers to Apple Inc. (United States) and Google LLC (United States) respectively, as part of in-app purchase delivery. These transfers are governed by Apple's and Google's respective data processing agreements and platform privacy policies.
Slack (internal team messaging, operated by Slack Technologies / Salesforce, Inc., United States): when you submit in-app feedback, your feedback message, subject, and the email address on your account are delivered to our internal Slack workspace so our team can read and respond to it. When someone reports a person, a short alert goes to the same workspace so we can act on it; it carries only the reason chosen and internal identifiers, never the message text or anyone's email address. This transfer is governed by Standard Contractual Clauses and Slack's data processing addendum. Slack does not receive your contributed items, photos, receipts, Space data, or the messages you send to other people.
Resend (email delivery, operated by Resend, Inc., United States): Resend delivers both our service emails and our optional newsletter. To do that, we add your email address to Resend as a contact when you create your account (we skip some addresses, including Apple private relay addresses, because mail to them bounces). Service emails include a welcome message when you create your account and a confirmation when you send us feedback; for that confirmation, Resend is also told the feedback type and the subject line you wrote. For the newsletter, if you have opted in, we also send one grouping tag so you get the edition that fits you. The tag comes from the answer you gave to the "what do you want to get out of this" question when you first opened the App, reduced to one of five fixed values — find, sell, proof, together, or general; if you skipped that question, the tag is "general". We also write a timestamp recording when we switched a contact off, so we can tell our own housekeeping apart from an unsubscribe you made yourself. Beyond that, Resend does not receive your items, your photos, your receipts, your Space data, or any of your other answers. We only send the newsletter to people who have opted in. If you have not opted in, or you turn it off, you are excluded from the send. You can switch the newsletter off at any time in the App's Settings, or use the unsubscribe link in any newsletter; either way we stop sending it to you. Both uses are governed by Standard Contractual Clauses and Resend's data processing agreement.
Expo (push notification delivery, operated by 650 Industries, Inc., United States): when you allow notifications, we send your device's push token and the content of each notification — its title, its text, and the details the App needs to open the right screen when you tap it — to Expo's push service, which passes them to Apple or Google for delivery. The text of a notification can include the name of one of your items, a note you wrote for a reminder, a count of your items by status, or another user's display name (for example, someone who sent you a friend request). The details that open the right screen are internal identifiers only. Expo does not receive the messages you send to other people, or your photos. Expo does not store the content of a notification: it handles it only for as long as it takes to deliver it, and keeps a delivery record for up to 24 hours. Expo keeps your device's push token so that notifications can reach you. Expo is certified under the EU-U.S. Data Privacy Framework, and its terms of service also commit it to the European Commission's Standard Contractual Clauses. Either one covers this transfer to the United States.
Airtable (product analysis, operated by Formagrid Inc, doing business as Airtable, United States): if you answer the questions we ask when you first open the App, we copy your answers once a day into our own Airtable workspace, so we can see which kinds of user get value from the App. What we copy: the date your account was created (the date only, not the time); your answers — how you heard about the App, what you want to get out of it, whether you organize alone, with friends or with family, and the rough size you picked (how many boxes, how many people in your family, how many things a month you sell or want a record of, or how big your team is); and the plan the questions recommended to you. An answer we don't recognize is copied as "other". Each account's answers are copied only once. We use this copy only for our own product analysis; we do not use it to target advertising. Airtable does not receive your name, your email address, your account identifier, your date of birth, your items, your photos, your Space data or your messages. This transfer to the United States is governed by the European Commission's Standard Contractual Clauses (Module Two), which are part of Airtable's Data Processing Addendum.

For purposes of the General Data Protection Regulation, Mytools Søgnesand acts as the data controller of your account and contributed items. The third parties listed above act as data processors on our behalf: under the data processing agreements named above, or, for Expo, under Section 3.2 of its terms of service, which makes Expo our data processor and applies the Standard Contractual Clauses (Module Two).

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the App or via email, with enough time to review the change and exercise your rights.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us:

Mytools Søgnesand (enkeltpersonforetak)
Registered address: PO Box 111, 5291 Valestrandsfossen, Norway
Organisation number: 936 779 220
Email: support@bluedotsapp.com

We have not appointed a Data Protection Officer, as our processing activities do not meet the thresholds set out in GDPR Article 37. Data protection inquiries should be directed to the email address above.