Privacy Policy
Bliper is a personal safety application. This policy explains what we collect, what we cannot see, and your rights. Where this policy says "we", it means the operator of Bliper (the data controller). Contact: privacy@bliper.app.
1. What is end-to-end encrypted
Video, audio, photos, your location history and the details of events (for example which geofence you left) are encrypted on your device with keys that never leave your devices and those of the people you have explicitly trusted. Our servers store this data as sealed blobs and cannot decrypt it. If we receive a legal request for it, we can only hand over data we cannot read.
2. What we do see (metadata)
| Data | Why | Retention |
|---|---|---|
| Email address, display name, language, country | Account, sign-in links, local emergency number | Until account deletion |
| Optional phone number | Shown to the people in your circle so their phone can text you in the offline fallback, only if you chose to share it | Until you remove it |
| Device identifiers and push tokens | Delivering notifications | Until the device is removed |
| Public keys of your identity | Letting your circle encrypt data for you | Until account deletion |
| Session facts: when it started and ended, its mode and status, how many encrypted segments of what size arrived | Running the service, "contact lost" alerts, limits | Same as the recording (30 or 365 days by plan) |
| Who is in your family and circle, roles | Access control | Until changed or deleted |
| Subscription status from the App Store or Google Play (no card data) | Entitlements | Legal retention for accounting |
| Server logs with IP addresses | Security and abuse prevention | 30 days |
3. Recovery password
If you set a recovery password, your private keys are encrypted with it on your device and the encrypted bundle is stored on our server. We never receive the password. Without it, and without trusted people who can return your keys, lost devices mean lost recordings.
4. People who appear in recordings
Recordings may contain other people. You are responsible for complying with the recording laws of your country. We only process such recordings in encrypted form on your behalf.
5. Children and beacons
A child's account exists only inside a family managed by an adult. Anyone being tracked sees a permanent indicator in the app and can turn tracking off; the family is notified when that happens.
6. Legal basis and location of processing
For users in the EU/EEA and UK: we process account data to perform our contract with you (GDPR Art. 6(1)(b)), alarm metadata to protect vital interests (Art. 6(1)(d)) and for our legitimate interest in running a safety service (Art. 6(1)(f)). Data is stored in the European Union.
7. Your rights
You can export your data (we provide the encrypted blobs and metadata; your app decrypts them), correct it, or delete your account from the app or from the account page. Deletion is scheduled with a 7-day delay you can cancel by email. You may lodge a complaint with your data protection authority.
8. Sharing
We use processors to run the service: hosting in the EU, an email delivery provider for sign-in links and notifications, Apple and Google for push notifications and billing. We do not sell personal data.
9. SMS and mobile information
Bliper does not send SMS messages from its servers. The only text messages involved are the ones you send yourself from your phone's messaging app when there is no internet: the app prepares a message with your coordinates and you tap Send. Your phone number, if you add it, is shown only to the people in your circle for that purpose and is never shared with third parties or used for marketing.
10. Changes
We will announce material changes in the app and by email at least 14 days before they take effect.