Privacy Policy
How Blushly.chat collects, uses, and protects information
Last updated: July 29, 2026
1. Introduction
This Privacy Policy explains how the operator of Blushly.chat (“Blushly,” “we,” or “us”) handles information when you use our websites, applications, and related services (the “Service”). It should be read together with our Terms of Service.
Questions or privacy requests: [email protected].
2. Information We Collect
Account and profile data
When you register, we collect information such as email address and authentication identifiers provided through our authentication provider (Supabase Auth), plus profile details you choose to add (for example display name or avatar). We maintain a user profile in our database linked to your auth identity.
Conversations and media
To operate chat history and product features, we store message content, session metadata, voice-related artifacts where voice features are used, and images you upload or generate through the Service. This content is necessary to resume conversations, apply quotas, and deliver AI responses.
Chats are processed on our systems and by subprocessors (see Section 5). The Service does not provide end-to-end encryption for AI conversations. Do not submit passwords, government ID numbers, payment card numbers, or other highly sensitive personal data in chats.
Characters and community content
Character definitions (name, bio, personality, scenario, ratings, tags, visibility settings, gallery assets, voice settings, and similar fields) are stored so you and—when public—other users can use them. Published chats and comments are visible according to the visibility you choose.
Usage, device, and diagnostics
We collect technical and usage data such as pages viewed, feature usage, approximate location derived from IP where applicable, device/browser type, performance and error logs, quota and subscription status, and request identifiers used for support and security. We use product analytics (including Mixpanel) to understand how the Service is used and to improve reliability.
Payments
Payment card and wallet details are handled by third-party processors (for example Patreon, Gank, and NOWPayments, depending on method). We receive subscription status, transaction references, and related billing metadata needed to activate entitlements—not full card numbers.
Communications
If you email support or legal contacts, we retain the content of those messages and associated contact details to respond and keep records.
3. How We Use Information
- Provide, maintain, and secure the Service
- Generate AI responses and media by sending necessary prompts and context to configured model and media providers
- Manage accounts, subscriptions, quotas, and billing status
- Personalize discovery experiences (for example search and recommendations based on activity on the Service)
- Analyze product performance, prevent abuse, and debug issues
- Communicate service notices, security alerts, and support replies
- Comply with law and enforce our Terms and Guidelines
We do not sell your personal information. We do not use private chat content to train our own foundation models. Prompts and context required to generate a response are sent to the AI providers configured for the Service, who process that data under their own terms and policies.
4. Security
We apply industry-standard safeguards appropriate to the nature of the Service, including encryption in transit (TLS), encryption at rest for stored data where supported by our infrastructure, access controls for operational staff, and monitoring for abuse. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Age confirmation on the Service may include client-side acknowledgements (for example local browser storage). That is not the same as government ID verification.
5. Sharing and Subprocessors
We share information only as needed to operate the Service or as required by law, including with:
Infrastructure and auth
Cloud database and hosting providers, Redis caching, object storage for media (Wasabi S3-compatible storage), and Supabase for authentication.
AI and media providers
Large language model routing and inference providers (for example via OpenRouter and configured model endpoints), speech-to-text and text-to-speech providers, and image generation pipelines. These providers receive the prompts, context, and media needed to fulfill your request.
Payments and analytics
Payment processors (Patreon, Gank, NOWPayments, as applicable) and analytics providers (including Mixpanel).
Legal and safety
We may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or security of Blushly, our users, or the public.
Business transfers
If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to continuing confidentiality obligations.
6. Retention
We retain account, chat, and character data for as long as your account remains active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. Soft-deleted records may persist for a period before permanent deletion. You may request account deletion as described below; some residual logs or backups may remain for a limited time.
7. Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. To exercise a request, email [email protected]. We may need to verify your identity before fulfilling a request. We aim to respond within a reasonable period (typically within 30 days where required).
You can update profile information in-product where available, manage visibility of characters you create, and control marketing communications where opt-out is offered. Essential service emails (security, billing, legal notices) may still be sent.
8. Cookies and Similar Technologies
We use cookies, local storage, and similar technologies for authentication sessions, preferences (including language), age acknowledgement where applicable, security, and analytics. You can control cookies through your browser settings; disabling certain cookies may limit Service functionality.
9. Children
The Service is for adults (18+) only. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it and terminate the associated account.
10. International Transfers
We and our subprocessors may process information in countries other than your own. Where we transfer personal data internationally, we take steps designed to ensure an appropriate level of protection consistent with this Policy and applicable law.
11. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be communicated through the Service or by email where appropriate. Continued use after the effective date constitutes acceptance of the updated Policy, except where prohibited by law.