Back to Home

Privacy Policy

Last updated: February 15, 2026

Introduction

BluBlu Tech ("we", "our", or "us") operates the SayWhen mobile application. This Privacy Policy explains how we collect, use, and protect your personal information when you use our app.

This Privacy Policy applies to users in the United States and Canada.

Information We Collect

Account Information

When you create an account, we collect your email address and authentication details (for example, identity provider identifiers) for account creation and sign-in. We use Supabase for secure authentication and data storage.

Monitoring Tasks

We store the monitoring tasks you create, including the prompts you enter and the AI-generated summaries. This data is necessary to provide our core service.

Push Notification Tokens

To send you notifications, we collect and store your device's push notification token. This token is used solely for delivering notifications about your monitoring tasks.

Usage Data

We track service usage signals such as the number of checks performed (auto and manual), feature interactions, and app events needed to manage usage limits, reliability, and abuse prevention.

Device and Log Data

We may collect device and technical data including push token, device model, operating system, app version, IP address, timestamps, error logs, and crash diagnostics necessary to operate, secure, and troubleshoot the Service.

Sources of Information

We collect information directly from you when you create an account, set up monitoring tasks, or contact us. We do not purchase or acquire your personal information from third-party data brokers.

How We Use Your Information

We may also use data to detect fraud, prevent abuse, investigate incidents, and comply with legal obligations.

Legal Basis and Consent (Canada)

For users in Canada, we collect, use, and disclose personal information with your consent or as otherwise permitted or required by law. By creating an account and using the Service, you consent to the practices described in this Policy.

You may withdraw consent at any time by deleting your account or contacting us, subject to legal or contractual restrictions and reasonable notice.

How We Disclose Information

We disclose personal information to service providers and processors that help us run the Service. In the preceding 12 months, we disclosed the following categories for business purposes:

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Sale and Sharing of Personal Information

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade security including encryption at rest and in transit. We implement row-level security to ensure users can only access their own data.

No method of transmission or storage is completely secure, but we use commercially reasonable safeguards designed to protect personal information.

Security Incidents

If we identify a data breach affecting your personal information, we will notify affected users and regulators as required by applicable law and provide information about recommended protective steps when appropriate.

International Data Transfers

Our servers and third-party service providers are located in the United States. If you are accessing the Service from outside the United States, including from Canada, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer.

Third-Party Services

We use the following third-party services:

Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. In general:

If you request account deletion through the app settings, we will delete or de-identify your personal information within a commercially reasonable time, subject to limited retention required by law.

Cookies and Similar Technologies

Our mobile app does not use browser cookies. Our website may use essential and limited analytics/security technologies to support core functionality, prevent abuse, and improve performance.

Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is not yet a consistent industry standard for interpreting this signal, our website and services do not currently respond to Do Not Track signals.

Your Rights

You have the right to:

To exercise any of these rights, please contact us at privacy@saywhenapp.com. We verify requests by matching information associated with your account and may request additional information to confirm identity before fulfilling a request. We will respond to verifiable requests within the timeframe required by applicable law (generally within 45 days for California requests, with extension where permitted).

You may also designate an authorized agent to submit requests where permitted by law. We may require proof of authorization and identity verification.

U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable state privacy laws, including rights to access, correct, delete, obtain a portable copy of personal information, and opt out of certain processing such as targeted advertising, sale, or profiling in furtherance of decisions producing legal or similarly significant effects.

SayWhen does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

If your state grants you a right to appeal a privacy request decision, you may submit an appeal by replying to our response email or contacting privacy@saywhenapp.com with the subject line "Privacy Appeal".

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). The rights listed above include all applicable California privacy rights. We collect the following categories of personal information:

We collect this information for the business purposes described in the "How We Use Your Information" section above. We do not use or disclose sensitive personal information for purposes beyond what is necessary to provide the Service.

California residents may also designate an authorized agent to make requests on their behalf. We may require proof of the agent's authority and verification of the requestor's identity, as permitted by law.

Canadian Privacy Rights (PIPEDA & Quebec Law 25)

If you are a resident of Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Quebec's Law 25. In addition to the rights listed above, you have the right to:

International Transfers (including Quebec residents): Your personal information is stored and processed in the United States. By using the Service, you acknowledge and consent that your personal information will be communicated outside of your province of residence (including Quebec) to the United States, where privacy laws may not be as protective as those in your jurisdiction.

You may also have the right to file a complaint with your provincial privacy regulator or the Office of the Privacy Commissioner of Canada.

Third-Party Website Access via Your Prompts

Your prompts may direct our systems to access third-party websites to evaluate monitoring conditions. We do not control those websites' privacy practices, terms, or security. Their policies and terms apply to their services.

You are responsible for ensuring your prompts and use of the Service comply with applicable laws and third-party website terms.

Children's Privacy

Our service is not intended for children under 13 (or under 14 for residents of Quebec, Canada). We do not knowingly collect personal information from children under these ages. If we learn that we have inadvertently collected such information, we will promptly delete it.

Parents or legal guardians who believe a child has provided personal information may contact us at privacy@saywhenapp.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy Officer at:
privacy@saywhenapp.com

BluBlu Tech
Attn: Privacy Officer
California, USA