Privacy Policy

BlueGecko is built on a simple principle: your personal data stays on your device.

1. Who We Are

BlueGecko is developed and operated by Gecko Industries LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use the BlueGecko mobile application ("App") and website at bluegecko.app ("Site").

2. Information That Stays on Your Device

The following data is stored exclusively on your device and is never transmitted to or stored on our servers:

• AI conversation history and chat messages
• AI memory files (personality, relationship data, learned preferences)
• Text messages (SMS/MMS) accessed by the AI
• Email content accessed by the AI
• Calendar events, contacts, and photos accessed by the AI
• AI personality configuration and "soul" system data

These files are stored in human-readable format on your device. You can view, edit, or delete them at any time through the App's settings.

3. Information We Collect

3a. Account and Purchase Information

When you make an in-app purchase or buy a founding membership, we collect:

• Email address (for purchase receipts and support)
• Transaction IDs and purchase history (processed by Google Play, Apple App Store, or Stripe)
• User ID (a randomly generated identifier, not tied to your real name)

3b. Waitlist Information

If you join the waitlist on our Site, we collect your email address and, if applicable, a referral code. This is used solely to notify you when BlueGecko launches.

3c. AI Inference Data

When you send a message in the App, the relevant conversation context is transmitted to a third-party AI inference provider (currently Anthropic's Claude models via OpenRouter) to generate a response. This data is processed in real time and is not stored by us or, per their data processing agreements, by our inference providers after the request completes. We do not log, store, or train on the content of your conversations.

3d. Analytics

Our website uses Plausible Analytics, a privacy-focused, cookieless analytics service. It collects no personal data and does not track individual users. No analytics data is collected within the App itself.

3e. Crash Reports and Diagnostics

The App may collect anonymized crash reports and performance diagnostics to help us fix bugs. These reports do not contain conversation content, personal messages, or any data your AI has accessed.

4. How We Use Your Information

• To process purchases and deliver AI credits
• To send you transactional emails (purchase confirmations, launch notifications)
• To provide customer support
• To improve the App through anonymized diagnostics
• To detect and prevent fraud or abuse

We do not sell, rent, or share your personal information with advertisers or data brokers.

5. Third-Party Services

We use the following third-party services:

• OpenRouter / Anthropic Claude — AI inference processing. Subject to OpenRouter's Privacy Policy and Anthropic's Privacy Policy.
• Google Play Billing / Apple In-App Purchase — Payment processing for credit packs.
• Stripe — Payment processing for founding member purchases via the website.
• Adapty — In-app subscription and purchase management.
• Plausible Analytics — Cookieless, privacy-focused website analytics (website only).
• Supabase — Waitlist storage and founding member records.

6. Device Permissions

BlueGecko requests the following device permissions, all of which are optional and can be revoked at any time:

• SMS (Android only) — To read and send text messages on your behalf, with your explicit approval for each send action.
• Contacts — To help your AI understand who you communicate with.
• Calendar — To check your schedule and provide proactive briefings.
• Photos / Storage — To access images you share with the AI.
• Notifications — To send you proactive briefings and reminders.
• Gmail API (OAuth) — To read and manage your email. BlueGecko accesses Gmail via OAuth and does not store your Gmail password.

Data accessed through these permissions stays on your device. It is not uploaded to our servers.

7. Data Security

Since the vast majority of your data never leaves your device, your device's own security (screen lock, encryption) is the primary protection. For data we do process (purchases, waitlist emails), we use industry-standard encryption (TLS) in transit and secure storage practices. AI inference requests are transmitted over encrypted connections (HTTPS).

8. Data Retention and Deletion

On-device data: You control this entirely. Delete conversations, memory files, or uninstall the App to remove all local data.

Account data: If you want us to delete your email, purchase records, or waitlist entry from our systems, email us at [email protected] and we will process your request within 30 days.

9. Children's Privacy

BlueGecko is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

For on-device data, you can exercise these rights directly through the App. For data held on our servers, contact [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

For privacy questions, data requests, or concerns:

Email: [email protected]

General: [email protected]