Privacy Policy

Introduction

blueberry. (“we”, “us”, “our”) respects your privacy. This policy explains what data we collect, why we collect it, and what rights you have. Your data is stored in the EU, and we operate the service in line with GDPR.

By using blueberry., you agree to this policy.

Data Controller

blueberry. is the data controller for the personal information we collect.

What Data We Collect

Account information

• Name: to personalise your experience.
• Email: for login, communication, and account recovery.
• Workspace: to group projects and team members.
• Password: encrypted, never stored in plain text.

Usage data

• Files you upload: stored securely in EU-region storage. Used only to build your dashboards.
• Chat messages: the questions and instructions you send to the built-in assistant, stored with your workspace so you can revisit past conversations.
• Project configurations: the schema, metrics, and settings you create.
• Audit logs: records of uploads, modifications, and deletions for security and debugging.
• Browser and device info: standard analytics for service reliability.

We don't collect data we don't need. We don't use your data to train AI models — and neither does our AI provider. Your uploaded files are processed only to build and answer questions about your dashboards; see the Data Sharing section below for how that works.

How We Use Your Data

We use your data to:

• Provide and maintain the blueberry. service.
• Build and update your dashboards.
• Authenticate you and protect your account.
• Communicate with you about your account or service updates.
• Comply with legal obligations.

We never sell your data to third parties.

Legal Basis (GDPR)

We process your data under the following legal bases:

• Contract: to deliver the service you signed up for.
• Legitimate interest: to keep the service secure and improve reliability.
• Legal obligation: to comply with EU and Portuguese law.
• Consent: for optional features that require explicit opt-in.

Data Sharing

We use trusted third-party providers to operate the service. Your data is shared only as necessary:

We choose providers that offer GDPR-compliant infrastructure and EU data hosting where available. Your files and dashboards are stored in the EU. Where a provider processes data outside the EU/EEA (such as AI analysis), the transfer is protected by EU-approved safeguards — an EU Commission adequacy decision or Standard Contractual Clauses.

Data Retention

We keep your data only as long as necessary to provide the service:

• Active accounts: for as long as your account is active.
• Deleted files: removed from storage when you delete them, along with the dashboards built from them.
• Closed accounts: deleted when you delete your account in the app or on request, except where law requires longer retention.
• Backups: encrypted and managed through our infrastructure provider.

You can delete your account and all associated data at any time from the blueberry. mobile app (Settings → Delete account) or by contacting us.

Your Rights

Under GDPR, you have the right to:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate information.
• Erasure: request deletion of your data (the “right to be forgotten”).
• Portability: receive your data in a machine-readable format.
• Restriction: limit how we process your data.
• Objection: object to specific types of processing.
• Withdraw consent: at any time, where consent is the legal basis.

You can delete your account and its data directly in the blueberry. mobile app under Settings → Delete account. To exercise any other right, email us at general@blueberry-analytics.com.

Data Security

We take security seriously:

• All data encrypted at rest and in transit (TLS).
• Separate, access-controlled data environments for each workspace.
• Strict access controls and authentication.
• Regular security reviews.
• Backups encrypted and stored in EU regions.

Cookies

We use only essential cookies required for authentication and service functionality. We do not use tracking or advertising cookies.

Changes to This Policy

We may update this policy occasionally. When we do, we'll update the “Last updated” date and notify active users by email if changes are significant.

Contact

For privacy-related questions or to exercise your rights:

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority, or your local EU supervisory authority.