Privacy policy

The short version

Your stories live on your device, in your browser. To write the next passage, our server sends the story to an AI model and passes the passage back to you; it keeps none of it. We never ask for your name or email. There are no cookies, ads or trackers.

What stays on your device

Your stories, characters and premises, each story’s memory, your drafts, your settings and your account key are kept in your browser’s storage on this device. We can’t see them, and we can’t bring them back: clearing your browser’s data deletes them. To keep a copy, download a backup (Settings, Privacy & data).

What reaches our server, and what it keeps

• Writing a passage. The story so far (its recent turns, premise, characters and memory notes), your message and your writing settings go to our server, which sends them to the AI models and streams the passage back to you. The server keeps none of it.
• BlushBot and titles. When you ask BlushBot to fill something in, or a new story gets its title, what’s needed goes to the models the same way, and isn’t kept.
• The adults-only check. Some of what you type (a character’s age, a message you edit, a setting you write yourself) is checked by our server against the adults-only rule, and isn’t kept.
• Your account. An account is a key made on your device. Our server keeps a fingerprint of the key (never the key itself), when the account was made, its pass dates, and how many passages it has written and what they cost, so that the limits work. Nothing that says who you are.
• Logs. For each passage and each AI call, the server notes when it happened, which model and host did it, how long it took, how big it was and what it cost. Never what anyone wrote, and never which account.
• Your IP address. Our server uses it for a moment, to stop too many requests coming from one place, and doesn’t store it. Our web server keeps no access log; its error log, which records only rare serious faults, can include the address of the request that failed.
• What you choose to send. A report sends only what you tick: the passage, and if you choose, the whole story and its setup. Feedback, and a rating you choose to send, come to us too. None of these carry your account or your address, and we keep them until we’ve dealt with them.

Who else handles it

• OpenRouter routes each request to a model host. Every request asks for hosts that keep nothing (zero data retention) and don’t use it for training.
• The model hosts write the passages: currently Wafer and DeepInfra for the writer, and Together, BaseTen and Fireworks for story memory and BlushBot. The hosts may change; the rule that they keep nothing doesn’t.
• OVHcloud runs our server, in the United States.

We don’t sell or give anything to anyone else. There are no ads and no analytics.

Cookies

None. The app keeps your stories and settings in your browser’s own storage (local storage and IndexedDB), only so that it works.

Training and saving across devices

Nothing you write is used to train AI. Saving your stories across devices is switched off for now, so no copy of them is kept anywhere but your device.

Adults only

Blushed is for adults: 18 or older, or the age of majority where you live if that’s older. We don’t knowingly let anyone younger use it, and we close any account we learn belongs to a minor.

Your choices

• Delete everything on a device: Settings, Privacy & data, Delete everything here.
• Delete your account: email us its ID (Settings, Account, Your account) and we’ll delete its record. Its key then stops working.
• Ask us anything about your data: support@blushed.ai.

Security

The site is served over HTTPS only. Our server keeps only a fingerprint of each key, runs locked down, and its data folder can be read by the app alone.

Changes

If this policy changes, we’ll update the date at the top, and say so in the app when the change matters to you.