Privacy Policy

Introduction

blueberry. (“we”, “us”, “our”) respects your privacy. This policy explains what data we collect, why we collect it, and what rights you have. Your data is stored in the EU, and we operate the service in line with GDPR.

By using blueberry., you agree to this policy.

Data Controller

blueberry. is the data controller for the personal information we collect.

What Data We Collect

Account information

• Name: to personalise your experience.
• Email: for login, communication, and account recovery.
• Workspace: to group projects and team members.
• Password: encrypted, never stored in plain text.

Usage data

• Files you upload: stored securely in EU-region storage. Used only to build your dashboards.
• Chat messages: the questions and instructions you send to the built-in assistant, stored with your workspace so you can revisit past conversations.
• Project configurations: the schema, metrics, and settings you create.
• Audit logs: records of uploads, modifications, and deletions for security and debugging.
• Browser and device info: standard technical data (browser, device type, approximate region) used to keep the service reliable and secure.
• Product usage: only if you accept analytics cookies — which pages and features you use, and where people get stuck. Never the contents of your files, dashboards, or chat messages. See Cookies below.

We don't collect data we don't need. We don't use your data to train AI models — and neither does our AI provider. Your uploaded files are processed only to build and answer questions about your dashboards; see the Data Sharing section below for how that works.

How We Use Your Data

We use your data to:

• Provide and maintain the blueberry. service.
• Build and update your dashboards.
• Authenticate you and protect your account.
• Communicate with you about your account or service updates.
• Comply with legal obligations.

We never sell your data to third parties.

Legal Basis (GDPR)

We process your data under the following legal bases:

• Contract: to deliver the service you signed up for.
• Legitimate interest: to keep the service secure and improve reliability.
• Legal obligation: to comply with EU and Portuguese law.
• Consent: for analytics cookies, and any other optional feature you explicitly opt into. You can withdraw it at any time via “Cookie preferences” in the footer.

Data Sharing

We use trusted third-party providers to operate the service. Your data is shared only as necessary:

We choose providers that offer GDPR-compliant infrastructure and EU data hosting where available. Your files and dashboards are stored in the EU. Where a provider processes data outside the EU/EEA (such as AI analysis), the transfer is protected by EU-approved safeguards — an EU Commission adequacy decision or Standard Contractual Clauses.

Data Retention

We keep your data only as long as necessary to provide the service:

• Active accounts: for as long as your account is active.
• Deleted files: removed from storage when you delete them, along with the dashboards built from them.
• Closed accounts: deleted when you delete your account in the app or on request, except where law requires longer retention.
• Backups: encrypted and managed through our infrastructure provider.

You can delete your account and all associated data at any time from the blueberry. mobile app (Settings → Delete account) or by contacting us.

Your Rights

Under GDPR, you have the right to:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate information.
• Erasure: request deletion of your data (the “right to be forgotten”).
• Portability: receive your data in a machine-readable format.
• Restriction: limit how we process your data.
• Objection: object to specific types of processing.
• Withdraw consent: at any time, where consent is the legal basis.

You can delete your account and its data directly in the blueberry. mobile app under Settings → Delete account. To exercise any other right, email us at general@blueberry-analytics.com.

Data Security

We take security seriously:

• All data encrypted at rest and in transit (TLS).
• Separate, access-controlled data environments for each workspace.
• Strict access controls and authentication.
• Regular security reviews.
• Backups encrypted and stored in EU regions.

Cookies and Local Storage

Two groups, and we ask before we use anything in the second one.

Essential — always on

• Sign-in and session: keeps you logged in and your workspace yours.
• Your language choice: keeps the site in the language you picked.
• Your cookie choice: so we don't ask again on every page.

These are required to deliver the service you asked for, so they don't need your consent. You can block them in your browser, but the app won't work.

Analytics — only if you accept

If you accept, our EU-hosted product analytics provider sets one cookie (ph_…_posthog) and a matching entry in your browser's local storage. It records which pages and features get used and where people get stuck. It does not read your uploaded files, your dashboards, or your chat messages. If you decline, none of it is set and nothing is collected.

We do not use advertising cookies, and we do not share any of this with ad networks. Our page-view counter is cookieless — it stores nothing on your device — so it runs for everyone.

Changing your mind: use “Cookie preferences” in the footer of any page. Declining later removes the analytics cookie and stops the collection.

Changes to This Policy

We may update this policy occasionally. When we do, we'll update the “Last updated” date and notify active users by email if changes are significant.

Contact

For privacy-related questions or to exercise your rights:

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority, or your local EU supervisory authority.