Bluejay — Privacy

What we hold

Your email	Used to sign you in, and to send a weekly digest of what happened to your links. You can switch the digest off in Settings, or from the link at the bottom of any digest email.
The links you save	The address, and what we read from the page: title, description, an image, the readable text, a short summary, tags and a category. Also what you add yourself: notes, your own tags, and the names of your stashes.
How links behave	When each link was last checked, whether it worked, and whether you have opened it. This is what makes dead-link detection and reading-debt possible.
Subscription status	Whether you are on the free or paid tier and, if you subscribe, which plan, when it renews, and the store’s reference for the purchase. Card details never reach us.
What you search for	Sent to our server to be matched against your links, and not kept: we store no search history.
Sign-in and server logs	The IP address and browser or device that signed in, and routine server logs. Used to keep accounts secure and to fix faults, and for nothing else.

We do not sell any of it, we do not build advertising profiles, and we do not use your collection to train anyone's models. There is no advertising or analytics tracker in the app or the extension.

The browser extension

The extension reads from one tab only, and only at the moment you press save — from the button, the right-click menu or the keyboard shortcut. It reads the tab’s address and title, and, if the page is selling something, the product details the shop publishes for search engines: its name, price and whether it is in stock. That is what puts a price on your wishlist for shops that refuse our own server. It does not read the rest of the page, anything you have typed, or any tab you have not saved. Its use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Who else processes it

Running Bluejay means some of your data passes through other companies. This is the complete list.

Supabase	Hosts the database and handles sign-in. All of the above is stored there.
OpenAI	Reads the content of pages you save in order to categorise, tag and summarise them, along with the names of your stashes and tags so it can reuse them, and what you type into search. It does not receive your email or your identity, and the data is not used for training under their API terms. OpenAI may hold a request for up to 30 days to monitor for abuse.
Jina AI	Fetches the readable text of pages that are difficult to read directly. It receives the address of the page and nothing about you.
The Internet Archive	Queried for an archived copy when one of your links dies. We send the dead address only.
Resend	Sends the weekly digest. Receives your email address.
Apple, Google and Stripe	Take payment if you subscribe — Apple or Google in the apps, Stripe on the web. They hold your payment details; we receive only the result.
RevenueCat	Tells us that an App Store or Google Play purchase is valid. It receives an account number and the purchase, not your email.

The one worth reading twice is OpenAI: the pages you save are sent to a third party to be read. That is how the automatic sorting works, and it is the trade the product is built on. If a page is sensitive enough that this matters, do not save it to Bluejay.

It happens only if you agree. The app asks before your first save, and nothing is sent to OpenAI, Jina or the Internet Archive for an account that has not said yes. You can change your answer at any time under Settings → Sorting; with it off, links still save and you file them yourself.

Your rights

Under UK GDPR you can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it entirely. Email hello@keystonedevstudio.com and we will action it within 30 days.

You do not have to ask us. Both are buttons in the app, under Settings → Your data:

Export your links gives you a JSON file containing every link you have saved — the address, the title, your own notes, your stashes and tags, the dates, and any recipe or workout Bluejay pulled out of a page. It leaves out two things, and the file says so: the search vectors, which are 1,536 numbers per link and mean nothing outside Bluejay, and our link-checking log, which is a record of our crawler rather than of you. Each link’s current status is included.
Delete your account removes the account and everything in it immediately — links, stashes, notes, saved page copies, search data and subscription records. We keep no copy to restore from, so take an export first if you want one.

Deleting your Bluejay account does not cancel a subscription bought through the App Store or Google Play. Those are held by Apple and Google, and you cancel them in your account settings with the store — the app links you there.

The email address above still works, for anything the buttons do not cover. Deleting your account has the steps in full, including what to do if you cannot sign in.

How long we keep things

Your collection stays until you delete it or close your account. A link you delete is hidden straight away and erased for good 30 days later, which is what lets you undo a mistake. Deleting your account removes your links, categories and history immediately. The record of individual link checks is pruned after 180 days, except for the most recent check on each link, so a link's current state is never lost.

This website

getbluejay.app sets no cookies, runs no analytics, and loads nothing from anyone else’s servers.

Contact

Keystone Dev Studio Ltd — hello@keystonedevstudio.com. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk.