Privacy Policy

Blurtly is an independent app made by Nick Stellato, based in the United States. This policy explains what we collect when you use the Blurtly website at blurtly.co and the Blurtly app, why we collect it, who else sees it, and how to get it removed. If anything here is unclear, write to hello@blurtly.co and a person will answer.

On the website

Waitlist. When you request access we store your email address, the date you signed up, and where you came from, meaning the referring website or the campaign tag in the link you clicked. If you answer the optional question about which apps you would like Blurtly to send tasks to, we store those answers with your email. We use this to invite you when it is your turn, to send occasional updates about Blurtly, and to decide what to build. Every update we send has an unsubscribe link, and you can also email us to be removed at any time.

Analytics. The website uses Cloudflare Web Analytics, which counts page views without cookies and without identifying you. We see how many people visited and which pages they read, not who they are.

Cookies. The website sets none. Fonts are loaded from Google Fonts and blog images are served from a content delivery network, so those providers see your IP address as part of serving the file, the same as any website.

In the app

Your account. You can sign in with an email address and password, with Apple, or with Google. We store your email address, and if you sign in with Apple or Google, the name and profile picture they share with us. Passwords are handled by our authentication provider and we never see them. If you use Sign in with Apple's hide my email option, we only ever see the relay address.

What you capture. Everything you blurt, and everything the app makes from it, is stored in your account: capture transcripts, the tasks, projects, and goals you keep, and the notes from your reviews. This is the product. We store it so it is there when you open the app and so it syncs across your devices. Nobody at Blurtly reads it as a matter of course. We would only look at an individual account to fix a problem you asked us to fix, or if the law required it.

Your voice. Blurtly uses Apple's speech recognition to turn what you say into text. On recent devices this happens on the phone itself. Where on-device recognition is not available for your language or device, Apple processes the audio on its servers under Apple's privacy policy. We never receive or store audio. Only the resulting text is kept.

AI processing. To sort a capture into tasks, Blurtly sends the text of that capture, the names of your existing projects so it can file things correctly, and today's date to Anthropic's Claude through our own server. Anthropic processes this to return the tasks and, under its API terms, does not use it to train its models. Nothing else from your device or account is included. Free accounts get a set number of these parses each month, so we keep a count per account of how many were used in each month.

Subscriptions. Blurtly Plus is sold through the App Store. Apple handles payment and we never see your card details. We receive only whether your account has an active subscription.

Notifications. Review reminders are scheduled on your device by the app. They do not go through our servers and we do not know whether you opened them.

Diagnostics. The app does not include analytics or crash reporting software. If Apple's optional diagnostics sharing is on for your device, crash reports may reach us through Apple in anonymized form.

Where your data lives and who else touches it

We use a small number of service providers to run Blurtly. Each one only receives what it needs to do its job, and none of them may use your data for their own purposes.

• Supabase hosts our database and handles sign in. Your account and everything synced to it is stored there. Access is restricted at the database level so an account can only ever read its own rows.
• Anthropic receives capture text and project names to extract tasks, as described above.
• Apple provides speech recognition, Sign in with Apple, and App Store billing.
• Google provides Sign in with Google if you choose it, and the fonts on the website.
• Cloudflare serves the website and provides its analytics.
• An email service sends waitlist invites and updates. It holds your email address and whether you have unsubscribed.

We do not sell personal information and we do not share it with anyone for advertising. We would disclose data if legally compelled to, and we would tell you unless the law prevented it. If Blurtly is ever acquired, your data would move with it under this same policy, and you would be told.

How long we keep it

Account data is kept for as long as your account exists. Items you delete in the app are marked as deleted so your other devices learn about it, and are removed from our servers during cleanup or when you delete your account. When you delete your account, everything synced to it is removed immediately and the copy on your device is wiped. Waitlist emails are kept until you are invited and create an account, or until you ask to be removed. Monthly usage counts are kept for billing accuracy and deleted with the account.

Your choices and rights

• Delete your account from Settings inside the app. It takes effect immediately and cannot be undone.
• Leave the waitlist by clicking unsubscribe in any email or writing to us.
• Get a copy of your data, correct something, or ask a question by emailing hello@blurtly.co. We answer within 30 days, usually much sooner.
• Turn off microphone, speech recognition, or notification access at any time in your device's Settings. The app will explain what stops working.

If you live in the European Economic Area, the United Kingdom, or a state with its own privacy law such as California, the rights above cover what those laws grant, including access, correction, deletion, portability, and the right to complain to your local authority. Our legal basis for processing is the contract we have with you to provide the app, and for waitlist updates, your consent when you sign up.

Security

Everything travels over encrypted connections. Sign in tokens are stored in the device's Keychain and never in ordinary app storage or backups. On the server, each account can only reach its own data, enforced by the database rather than by trust in the app. No system is perfect, and if we ever learn of a breach affecting your data we will tell you promptly.

Children

Blurtly is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.

Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. For a change that matters, such as sharing data with a new kind of provider, we will also tell you by email or inside the app before it takes effect.

Contact

Nick Stellato, Blurtly. hello@blurtly.co