Privacy policy

1. Who we are

This policy is issued by Blue Fairy Digital, Inc. ("Blue Fairy Digital", "we", "us"), the controller responsible for personal information described here.

2. What this policy covers

This policy covers www.bluefairydigital.com and any other page we publish on this domain. Our applications are not yet publicly released; when one is, we will publish a product-specific privacy notice and complete the App Store privacy disclosures before you can download it. Section 5 describes the commitments those notices will be written against.

3. What this website collects

We set no cookies. We run no analytics, no advertising pixels, no session recording, and no third-party tracking of any kind. Every font, script, and image on this site is served from our own domain, so simply reading these pages does not disclose your visit to anyone else.

Our hosting and content-delivery providers record standard server logs when a page is requested. Those logs typically contain the requesting IP address, the time of the request, the page requested, and the browser's user-agent string. We use them only to operate the site, diagnose faults, and defend against abuse. We do not use them to build a profile of you and we do not combine them with any other information.

4. If you write to us

When you email an address listed on this site, we receive whatever you send: your email address, your name if you give it, and the contents of your message. We use it to answer you and to keep a record of the exchange.

We keep correspondence for as long as it is useful for the matter it concerns, and generally no longer than 24 months after the last message, unless a legal obligation requires otherwise. You can ask us to delete it sooner.

We use a third-party email provider to receive and store this mail. It acts on our instructions and is not permitted to use your information for its own purposes.

5. Our commitments in future products

Our products are being designed so that the substantive work happens on your own device, in real time, rather than being sent to our servers for processing. That is an architectural decision, and it is the reason we expect to hold far less of your data than a comparable product would.

Regardless of what we build, these hold:

• We do not sell personal information, and we do not share it for cross-context behavioural advertising.
• We collect what a feature actually needs, and not more.
• We state what we collect in plain language, before you give it to us.
• You can export or delete your data, including your whole account.
• We do not use your private content to train models for other people's benefit without your explicit, separate, revocable consent.

6. Legal bases for processing

Where the EU or UK GDPR applies, we rely on our legitimate interests in operating and securing this website and in responding to correspondence you initiate; on consent where we ask for it; and on compliance with a legal obligation where one applies. You may object to processing based on legitimate interests at any time by writing to us.

7. Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you, and get a copy;
• have inaccurate information corrected;
• have your information deleted;
• receive your information in a portable format;
• restrict or object to certain processing;
• withdraw consent you previously gave; and
• not be discriminated against for exercising any of these rights.

To exercise any of them, write to privacy@bluefairydigital.com. We will acknowledge within five days and respond within 30 days, or 45 where the law permits an extension and we tell you why. We may need to verify your identity first — usually by confirming you control the email address the request concerns. Exercising these rights is free unless a request is manifestly unfounded or excessive.

Residents of California, and of other U.S. states with comparable laws, may make these requests under those laws; we have not sold or shared personal information in the preceding twelve months. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. We ask to be given the opportunity to resolve the matter first.

8. International transfers

We operate from the United States and our service providers may process information there. Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum.

9. Children

This website is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, write to privacy@bluefairydigital.com and we will delete it. Age requirements for our applications will be stated in their own notices and App Store listings.

10. Security

This site is served only over HTTPS. Access to correspondence is limited to personnel who require it. No system is perfectly secure. Where a breach affects your personal information, we will notify you promptly and notify the relevant regulators where required.

To report a suspected vulnerability, please write to security@bluefairydigital.com rather than disclosing it publicly.

11. Changes to this policy

This page is updated when our practices change, and the date above is revised accordingly. Where a change materially affects your rights, it will be stated prominently, and you will be contacted directly where we hold your details and the law requires it.

12. Contact

Questions, requests, and complaints about privacy all go to privacy@bluefairydigital.com, or by post to the address in section 1. Other ways to reach us are on the contact page.