Effective October 29, 2026

Privacy Policy

Bleu Technologies Inc. ("Bleu," "we," "us") makes Bleu, an AI assistant for your Mac. This policy covers the usebleu.com website and waitlist, the Bleu apps for Mac and iPhone, Bleu Cloud (our servers), the integrations you connect, and the actions Bleu takes for you (together, the "Service"). By using the Service you agree to this policy. If you don't agree, don't use the Service.

The short version

Bleu reads only the sources you connect and turn on, and you can turn each one off.
Your searchable index of messages, mail and files is kept on your Mac. Bleu Cloud runs the assistant and sees content when a task needs it.
To answer you, Bleu sends the relevant content to AI model providers. We don't sell your data, use it for advertising, or train AI models on it.
Bleu asks you before it sends, submits or pays for anything, unless you've turned on Auto Mode for that session.
Gmail and other Google data are handled under Google's Limited Use rules (section 12).

1. Who we are

Bleu Technologies Inc. is the controller of the personal information described in this policy, including under the EU and UK General Data Protection Regulations. Questions: legal@usebleu.com.

2. Where your data lives

Bleu has two parts. Which one holds your data depends on what it is.

Your Mac. The Bleu app keeps its index of the sources you connect on your Mac, in a folder only your user account can open. That covers messages, mail, files, photos and the embeddings (numeric fingerprints) made from them. The same folder holds your task history, memory, settings and logs. Embeddings for this index are made on your Mac. Passwords, passkeys and sign-in tokens are kept in the macOS Keychain.
Bleu Cloud. Our servers, hosted by Amazon Web Services in the United States, run the assistant: they plan each task, call AI models, and keep your conversations, tasks, steps, schedules and triggers. Each user gets a separate server environment with encrypted storage. While a task runs, Bleu Cloud asks your Mac for what it needs, such as a message, an email, a file's text or a screenshot. That content then reaches our servers and the AI model provider handling the request.
Your iPhone. If you use the iPhone app, photos are analysed on the phone. Only their text, embeddings and details such as date and location go to your Mac. Photos themselves are fetched only when you open one, over your local network or your own private iCloud database.

3. Information we collect

We collect information you give us, information created as you use the Service, and information from the sources and integrations you connect. Bleu reads a source only after you connect it, and you choose which parts of it (for example, which chats, mailboxes, folders or calendars).

Waitlist and website

If you join the waitlist we keep your email address, when you joined, and the country your request came from (as reported by our hosting provider, Cloudflare). The website does not use advertising or analytics cookies.

Account information

Bleu Cloud accounts are created with Google sign-in. We receive your email address and Google account ID, and keep a record of your sessions. We store only a hash of each session token, and sessions expire after 30 days.

Conversations and tasks

What you type or say to Bleu, files and screenshots you attach, Bleu's replies, and a record of each task: the steps it took, the pages it visited, and the results.

Memory

Facts and preferences Bleu keeps to help you later, such as decisions you made on its suggestions. You can see and undo them in the app.

Email (Gmail, Outlook, Apple Mail)

Once you connect a mailbox, the messages in the mailboxes you choose: senders, recipients, subjects, dates, bodies and attachments' text. Bleu skips drafts, trash and junk. For Gmail, Bleu can also keep the mailbox up to date as new mail arrives. Login codes, password resets, magic links and security alerts are never stored, and passwords, card numbers and keys found in mail are replaced with "[redacted]" before anything is stored.

Calendar

Events and calendar lists from Google Calendar, once you connect it. If you allow actions, Bleu can also create events and reply to invitations for you.

Google Drive

Files in your Google Drive (including Docs, Sheets and Slides) that you choose to add. Access is read-only.

Messages

The iMessage and SMS conversations you choose. Bleu reads them from your Mac's Messages database (this needs macOS Full Disk Access), from the time you add a conversation. Earlier history is read only when you ask. Bleu can also read one-time sign-in codes from your messages, to complete a sign-in you asked it to do.

Contacts

Names, phone numbers, email addresses, postal addresses and birthdays from your Mac's Contacts, used to work out who you mean.

Files and photos

Files and folders you add (Bleu keeps their text, not the files), and your Photos library if you turn it on, including where and when photos were taken. Photo locations are turned into place names on your device.

Screen and app content

Screenshots when you ask for one or turn on screen context. Bleu also reads the address, title and text of the browser tab or document in front of you, text you have selected, the layout of the window you're using, and your clipboard, each when a request needs it. Bleu does not read what you type into text fields this way, and it does not monitor your clipboard.

Voice

If you speak to Bleu, it records short clips only after you allow microphone access. Speech is transcribed on your Mac, and only the text is sent on.

Browsing and web data

The pages Bleu opens for you, what it types and clicks there, and search queries it makes. Bleu's browser keeps its own cookies and sign-ins on your Mac. If you choose Import, Bleu copies cookies and saved passwords from Chrome into its own browser. For reading suggestions, Bleu may send search queries based on your interests to a search provider.

Passwords and sign-ins

Logins you save in Bleu Passwords (kept in your Keychain, synced through your iCloud Keychain if you use it, and unlocked with Touch ID or Face ID), and logins from 1Password if you connect it. Bleu uses them only to fill sign-in forms on the matching site. Passwords are never sent to an AI model, written to logs, or stored on our servers.

Work tools

If you connect GitHub, Slack or Canvas, the items those services let Bleu read, such as repositories, notifications, messages and courses. Access is read-only.

Device and diagnostic data

Your Mac's app version and operating system, and health reports: counts, timings and error types, never message text, names, addresses or file paths. Our servers also log IP addresses, request times and errors, to run and protect the Service. We don't use third-party analytics or crash-reporting tools in the apps.

4. How we use information

To run the Service: answer your requests, search your sources, carry out tasks, show suggestions and keep your history.
To personalise it: remember your preferences and the people and things you mention.
To keep it safe: check actions against your approval settings, enforce sending limits, and prevent abuse, fraud and security incidents.
To support and improve it: fix bugs and measure reliability, using diagnostic data. We don't train AI models on your content, and if we ever want to, we'll ask first and only do it with your consent.
To communicate with you: waitlist updates, service notices and replies to your messages.
To meet legal obligations and enforce our Terms.

5. AI model providers

To understand your requests and act on them, Bleu sends the relevant parts of your conversation and sources to AI models. These can include message or email text, page content, screenshots and file text. We currently use:

Amazon Bedrock (Amazon Web Services), our main provider, for language models.
OpenRouter and the model providers it routes to, for image understanding and as a backup.
Typesafe, for a model that operates web pages and apps.

These providers process the content only to return a response to us, under terms that don't let them train their models on it. Embeddings of your data are made on your Mac or on servers we run ourselves, not by a third-party model API. We may change providers. Section 6 and this section will list the current ones.

We do not sell your personal information or share it for cross-context behavioural advertising. We share it only as follows:

Service providers who process it for us under contract, only to provide the Service:

Provider	What they do	Location
Amazon Web Services	Bleu Cloud hosting, storage, encryption keys, and AI models (Bedrock)	United States
OpenRouter and its model providers	AI models (image understanding, backup)	United States
Typesafe	AI model for operating pages and apps	United States
Google	Sign-in; Gmail, Calendar and Drive (at your request); mail notifications	United States
Exa	Web search for reading suggestions (queries only)	United States
Cloudflare	Website hosting and the waitlist	Global
Apple	iCloud Keychain and your private iCloud database, if you use them	Global

Services you connect or direct Bleu to use. When Bleu signs in to a site, sends an email or message, or replies to an invitation for you, the information goes to that site or recipient. Their own policies then apply.
Legal reasons: to comply with law or valid legal process, or to protect the rights, safety and property of you, us or others.
Business transfers: in a merger, acquisition, financing or sale of assets, subject to this policy's protections.
With your consent, for any other purpose.

7. Actions Bleu takes for you

Bleu can send emails and messages, create calendar events, reply to invitations, fill in and submit forms, and sign in to websites for you. Before it sends, submits or pays for anything, Bleu asks for your approval, unless you have turned on Auto Mode, which approves actions for the current session until you turn it off or restart Bleu. Even with Auto Mode on, Bleu still asks before writing to someone you've never written to and limits how much it sends each hour. Bleu keeps a record of what it sent and of each approval on your Mac. See our Terms for your responsibilities.

8. Data retention

On your Mac: data stays until you delete it. Turning a source off stops new reading but keeps what was already stored. Deleting it is a separate step in the app. Uninstalling Bleu and removing its folder deletes it.
In Bleu Cloud: conversations, tasks and your account are kept while your account exists. Email that Bleu Cloud processes to keep your mailbox up to date is deleted from our processing queue within about a day. Server logs are kept for up to 3 months.
When you delete your account, we delete your Bleu Cloud data and revoke the Google access we hold within 30 days. Backups that contain it are overwritten within a further 35 days. We keep only what the law requires.
Waitlist: until you ask us to remove you, or until we launch and you've been invited.

9. Your rights and choices

Access and export: ask us for a copy of your Bleu Cloud data. Your Mac's data is already on your Mac.
Deletion: delete sources and history in the app, or email us to delete your account.
Correction: ask us to fix inaccurate information.
Memory: see and undo what Bleu remembers in the app.
Connections: disconnect any source in Settings at any time, and turn off the macOS permissions (Full Disk Access, Screen Recording, Accessibility, Contacts, Microphone) in System Settings.
Email: unsubscribe from non-essential emails using the link in them.

Email legal@usebleu.com to make a request. We may need to verify your identity first. We won't treat you differently for exercising your rights.

10. California residents (CCPA/CPRA)

In the past 12 months we have collected the categories described in section 3: identifiers, internet and device activity, audio (transcribed on your device), and the contents of mail, messages and files you connect, which are sensitive personal information. We use sensitive personal information only to provide the Service you request. You may ask to know, delete and correct your personal information, and to limit the use of sensitive personal information. We don't sell or share personal information, and we have no actual knowledge of selling or sharing data of consumers under 16. We respond to verified requests within 45 days. An authorised agent may make requests for you with your written permission.

We process your information to perform our contract with you (running the Service you ask for), with your consent (connecting a source, microphone, Auto Mode), for our legitimate interests (security, fraud prevention, improving reliability) where those aren't overridden by your rights, and to comply with law. Your data is processed in the United States. Where required we rely on the EU Standard Contractual Clauses and the UK Addendum for transfers. You may ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time, and you may complain to your local data protection authority.

12. Google API Services User Data Policy

Bleu's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we access

Sign-in: your email address and Google account ID (openid, email).
Gmail: read your email (gmail.readonly) to search it and answer your questions about it. If you allow actions, send email you have approved (gmail.send).
Google Calendar: read your calendars and events (calendar.events.readonly, calendar.calendarlist.readonly). If you allow actions, create events and reply to invitations (calendar.events.owned, calendar.app.created).
Google Drive: read files you choose to add (drive.readonly).

Limited Use disclosure

We use Google user data only to provide and improve the features you use in Bleu: searching and answering questions about your mail, calendar and files, and taking the actions you approve.
We transfer Google user data to others only as needed to provide those features (for example, to the AI model providers and hosting providers in sections 5 and 6), to comply with law, or in a merger or acquisition with notice to you.
We do not use Google user data for advertising, and we do not sell it.
We do not use Google user data to develop, improve or train generalised AI or machine-learning models, and our AI model providers may not either.
No person at Bleu reads your Google user data unless you give us permission for specific messages (for example, for support), it is needed for security or to investigate abuse, it is required by law, or it has been aggregated and anonymised for internal operations.

Storage and deletion

Your mail index is kept on your Mac. If you keep your Google connection in Bleu Cloud, your Google refresh token is stored encrypted with a dedicated key in AWS Key Management Service, and new mail is processed on our servers to update your index, then deleted from the processing queue within about a day. Google data is encrypted in transit and at rest on our servers. When you disconnect an account or delete your Bleu account, we delete the tokens we hold and revoke our access with Google.

Revoking access

Disconnect Google in Bleu's Settings, or remove Bleu at myaccount.google.com/permissions.

13. Microsoft and Apple data

If you connect Outlook, Bleu reads your mail through Microsoft Graph (Mail.Read, User.Read) under the same limits as Google data: only to provide the features you use, never for advertising or model training. You can remove Bleu at myaccount.microsoft.com. Data Bleu reads from your Mac's Messages, Mail, Contacts and Photos, through permissions you grant in macOS, is handled the same way.

14. Security

We use HTTPS for all connections, encrypt data at rest in Bleu Cloud, keep Google tokens encrypted with a dedicated key, give each user a separate server environment, and keep passwords in your Keychain behind Touch ID or Face ID. Bleu's data folder on your Mac is readable only by your user account but is not separately encrypted, so we recommend turning on FileVault. No system is perfectly secure, and we can't guarantee the security of your information. If a breach affects you, we'll notify you as the law requires.

15. Children

The Service is for people 18 and older. We don't knowingly collect information from anyone under 18. If we learn we have, we'll delete it. Contact us if you believe a minor has given us information.

16. Third-party sites and services

Bleu works with websites and services we don't control, including the ones it opens and signs in to for you. Their privacy practices are governed by their own policies.

17. Changes to this policy

We'll post changes here and update the effective date. For material changes we'll tell you by email or in the app at least 30 days before they take effect. Using the Service after that means you accept the change.

18. Contact

Bleu Technologies Inc.
legal@usebleu.com