Privacy policy
This policy explains what Blippa stores, why, and for how long. It covers the Blippa app and this website. Blippa is operated from Stockholm, Sweden; all data is stored in Amazon Web Services in the EU (Stockholm region).
What we store
- Your account: your email address, your display name, and the stores you belong to. We do not store a password - signing in uses a six-digit code sent to your email, or Google or Apple sign-in.
- Your inventory: the products, categories, barcodes, expiry dates, and product photos you record, plus a log of changes (who deleted what, so it can be undone).
- Date photos: the cropped photo of a printed expiry date is sent to Google Gemini to be read as text. When enabled, a copy is kept for up to 30 days to measure and improve reading accuracy, then deleted automatically.
- Device notification tokens, if you turn reminders on.
- Technical logs with request times and error details. Invite links and email addresses are removed from logs before they are stored.
The shared product catalog
When you record a product whose barcode we have never seen, its barcode, name, and photo are added to a catalog shared with all Blippa stores, so the next shop that scans it does not retype it. The shared entry does not say which store contributed it, and it never includes your expiry dates, quantities, or any account detail. Product names and photos are also looked up from Open Food Facts, an open public database.
Who else processes it
- Amazon Web Services - hosting, database, storage, and the email that delivers your sign-in code (EU).
- Google - reads the date from a date photo (Gemini), and verifies Google sign-in if you use it.
- Open Food Facts - receives a barcode when we look up a product we do not know.
- RevenueCat, Apple, and Google Play - handle subscriptions. Card details go to the app store, never to us; we only learn whether a subscription is active.
- Expo - delivers push notifications to your device.
We do not sell personal data, and we do not use it for advertising.
How long we keep it
Account and inventory data is kept while your account exists. Sign-in codes expire in ten minutes; sessions expire and rotate; date photos kept for accuracy work are deleted after 30 days; deleted items stay recoverable for 30 days so a mistake can be undone.
Deleting your account
You can delete your account from inside the app at any time: open the menu, choose Settings, and tap Delete account. You will be asked to type DELETE to confirm. This erases your account, your name, and your membership of every store. If you are the only owner of a store, that store and everything in it is deleted too, for everyone, and the app tells you so before it happens. Deletion is immediate and cannot be undone. If you cannot reach the app, write to privacy@blippa.app and we will do it for you.
Your rights
Under the GDPR you can ask for a copy of your data, ask for it to be corrected, or ask us to delete your account and its data. Write to privacy@blippa.app and we will answer within 30 days. You may also complain to the Swedish Authority for Privacy Protection (IMY).
Children
Blippa is a tool for businesses and is not directed at children.
Changes
If this policy changes materially we will say so in the app before the change takes effect.