Privacy Policy

We collect various types of information to provide and improve our services:

• Account Information: Name, email address, age, profile data, and preferences
• Usage Data: App interactions, features used, chat messages, and activity patterns
• Device Information: Device type, operating system, browser type, and IP address
• Health and Wellness Data: Sleep logs, mood tracking, fitness data, nutrition information, and meditation progress
• Payment Information: Processed by Stripe. We do not store your credit card details on our servers

We use the information we collect for the following purposes:

• To provide and improve our AI-powered mental health services
• To personalize your experience and AI interactions based on your communication style and preferences
• To process payments and manage subscriptions
• To send important service updates and notifications
• To analyze and improve our services, features, and AI models
• Website analytics only (we do not track in-app behavior for advertising)

We share your data with select third parties only as necessary to provide our services:

• Stripe: For payment processing and subscription management
• Google Cloud AI Services: For AI functionality and natural language processing

We do NOT:

• Sell your personal data to third parties
• Share your data for marketing purposes
• Provide identifiable data to advertisers

Our AI services rely on machine learning to provide personalized support:

• User conversations may be used to improve service quality and AI accuracy
• Data is anonymized and aggregated for AI training purposes
• Users can opt-out of data usage for service improvements through account settings
• We do not use your personal data to train external AI models or share it with third-party AI providers
• Your specific conversations remain private and are not shared publicly

We retain your data according to the following policies:

• Active Accounts: Data is retained as long as your account remains active
• Deleted Accounts: Data is permanently deleted within 90 days of account deletion request
• Users can request immediate data deletion at any time via account settings or by contacting support
• Backup systems may retain data for an additional 30 days for recovery purposes
• Legal and compliance data may be retained as required by applicable laws

We take security seriously and implement industry-standard measures to protect your data:

• End-to-end encryption for data transmission
• Secure data storage with Supabase using encryption at rest
• Regular security audits and vulnerability assessments
• Limited employee access to personal data on a need-to-know basis
• Multi-factor authentication available for user accounts

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security but are committed to protecting your data.

Bluestone does not impose specific age restrictions, but users must:

• Provide accurate age information during signup
• Understand that our service is designed for general wellness support

Parents and guardians are encouraged to monitor minor usage and discuss the appropriate use of AI mental health tools.

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for core functionality, authentication, and security
• Analytics Cookies: Google Analytics for website traffic analysis (website only, not in-app)

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking technologies
• Behavioral advertising tools

You have the following rights regarding your personal data:

• Access: Request a copy of all data we have about you
• Deletion: Request permanent deletion of your account and all associated data
• Opt-Out: Opt-out of data usage for AI training and service improvements
• Export: Download your data in a machine-readable format
• Correction: Update or correct inaccurate information
• Contact: Reach out with any privacy concerns or questions

To exercise these rights, please contact us at privacy@usebluestone.com

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

• Users will be notified of material changes via email
• The "Last Updated" date at the top of this page will be revised
• Continued use of our services after changes constitutes acceptance of the updated policy

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: