Privacy Policy - Chat Blues

1. Summary

Chat Blues is a Bring Your Own Key (BYOK) AI chat app for iPhone and iPad. Your API keys, conversations, and uploads stay under your control. We do not sell, share, or use your data for ads. We do not train any model on your content.

2. What we collect

2.1 Without an account

Nothing leaves the device unless you explicitly send a message to an AI provider you configured.
Settings and API keys are stored locally (iOS Keychain on the app; localStorage on the web companion).

2.2 When you sign in with Apple or Google

Name and email from the identity provider.
A Firebase user ID to scope your data.
Chat history synced to Firebase Firestore so it is available across your devices (when you choose to sign in).

2.3 When you send a message

Message content, attachments (images, PDFs), and recent conversation context are sent directly from your device to the third-party AI provider you configured in Settings (bring-your-own-key). Chat Blues does not proxy these requests through our servers.
Each provider you choose has its own privacy policy and retention rules. Review that provider’s policy before sending personal or sensitive content.
When you use on-device AI (downloaded models on your device), no message content leaves your phone.
Your documents: documents you add stay on your device and are never uploaded to us. When “Use documents in chats” is on, short relevant excerpts are included in the message sent to the provider you chose, so it can answer using them. When it is off, your documents are never used.

2.4 When you run code in Live Preview

Live Preview can execute code the AI writes. Where it runs decides whether anything leaves your device:

Stays on your device. HTML, CSS, JavaScript and React run in a sandboxed frame inside the app. C and C++ are compiled and run by a compiler bundled inside the app, so they work with no internet connection. Python also runs on your device; the Python interpreter is downloaded once from a public CDN, but your code is never uploaded — only the interpreter comes down.
Leaves your device, only if you ask. Rust and Java cannot be compiled inside the app. If you press Run on a Rust or Java block, the app asks you to confirm and names the service, and only then sends that one block of code to Compiler Explorer (godbolt.org) to be compiled and executed, returning the output. Nothing is sent before you confirm, and this never happens automatically.
Only the code in that block is sent. Your conversation, other chats, account details and API keys are not included.
Compiler Explorer is an independent service with its own policy (godbolt.org/#privacy). By their published summary they store submitted source temporarily, anonymise IP addresses, delete web and infrastructure logs after 32 days, and keep hashed (non-reversible) source in compilation analytics for up to a year. If your Rust or Java code is confidential, do not press Run on it.

Asking the AI to edit the previewed code. While a Live Preview is open you can describe a change in plain English and the app edits the file for you. To do that it sends the current contents of that file to the AI provider you chose, in the same message as your instruction — the provider cannot change code it cannot see. This is the same provider and the same key you already use for chat, it happens only when you send such a message, and nothing is sent to us. Your other chats, account details and API keys are never included. If a page contains something confidential, do not ask the AI to edit it.

2.5 Downloads the app makes

Some features fetch files rather than send them. On-device AI models are downloaded from Hugging Face when you choose to install one, and the Python interpreter is downloaded from a public CDN the first time you run Python. These are downloads — no message content, document or API key is transmitted as part of them.

2.6 Diagnostics

If crash reporting is enabled in a future release, crashes are reported without user content. We will update this policy before turning any such feature on.

3. Required reason APIs (iOS)

File timestamps (C617.1) — to list and manage models you have downloaded.
Disk space (85F4.1) — to show whether a model fits before downloading.
User defaults (CA92.1) — to store app preferences.
System boot time (35F9.1) — used by some embedded libraries for elapsed-time measurement.

4. Permissions we request

Microphone — only for voice-to-text and voice chat.
Speech recognition — for voice dictation.
Camera — only when you take a photo to share with the AI.
Photo library — only when you pick an image or save a generated image.
Local network — only when you connect to a self-hosted AI endpoint on your network.
Face ID / device passcode — optional app lock.

5. Storage and retention

API keys: stored in the iOS Keychain with protection kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly. If you sign in, your keys are encrypted on your device (AES-GCM, with a key derived from your account ID that never leaves the device) and the ciphertext is synced to Firestore so they are available on your other devices. If you never sign in, keys stay on this device only.
Chat history (signed-in): Firestore, scoped to your user ID.
Attachments (signed-in): Firebase Storage under your user path when needed to stay within database limits.
Local model files: Application Support on device. Not backed up to iCloud.

6. What we do not do

We do not sell your personal data or chats.
We do not use your content to train foundation models.
We do not show third-party advertising in the app.
We do not track you across other companies’ apps for advertising.

7. Your rights

Delete any chat or all chats from the app.
Sign out to stop cloud sync without deleting your account.
Delete your account and all associated data from inside the app: open Settings → Account → Delete account. This permanently removes your synced chats and messages, your settings, your stored API keys and your uploaded attachments from our servers, and then deletes the sign-in account itself. You can also request deletion by emailing officialvishwateja@proton.me.

8. Children

Chat Blues is not directed to children under 13. If you believe a child has used the app, contact us and we will delete their data.

9. Changes

We will update this page and the date above when the policy changes.

10. Contact

Questions? Email officialvishwateja@proton.me.

Bottom line: Your keys stay on device. Cloud AI goes to the provider you choose. On-device AI stays on your iPhone. We don’t sell your chats.

Get Support