Privacy Policy

This Privacy Policy explains how Blipside, Inc. (Blipside, we, us, or our) collects, uses, discloses, retains, and protects personal information when you use Blipside websites, the Blipside Listener application, Blipside Voices, accounts, live sessions, support and safety features, and other services that link to this Policy (collectively, the Service).

This Policy explains our privacy practices. It is separate from your agreement to the Terms of Use and Blipside Voices Terms.

1. Scope and controller

Blipside, Inc. is the controller or business responsible for the personal information described in this Policy, except where another company independently determines how it processes information under its own terms.

At launch, Blipside is offered and marketed for use in the United States. The Service and its providers may process information in the United States. If you access the Service from another location, applicable law may give you additional rights.

Listener accounts and Blipside Voices accounts are separate, even when they use the same email address. Some voice profile and session information is intentionally public. Listener account information and preferences are generally private unless the Service clearly indicates otherwise.

2. Information we collect

Account and authentication information

We collect information needed to create, verify, authenticate, secure, recover, and administer accounts, including:

• email address and the standardized version used to match your account;
• password-related information used to authenticate you; we store a password-derived hash and salt, not your plain-text password;
• account identifier, role, status, and timestamps;
• verification and recovery challenges and their status;
• authenticated-session, revocation, and expiration information;
• linked identity-provider information if you choose a provider that Blipside has enabled; and
• security and authentication audit information.

Verification and recovery codes ordinarily expire after 15 minutes.

Eligibility and legal records

We collect your declared age range or other age-category information used to determine account eligibility. We do not collect a full date of birth for ordinary Blipside eligibility.

We also collect records showing which legal document and presentation versions were shown to an account, the account role, the action taken, the time of the action, and cryptographic digests or other evidence needed to preserve the exact version.

Listener profile and preferences

We collect Listener account and preference information such as:

• optional display name;
• languages the Listener wants to hear;
• followed voices and teams;
• blocked or muted voices;
• Voice Type, Voice Style, league, team, topic, and discovery preferences where available;
• privacy, interface, and personalization choices; and
• account-backed settings and relationship data.

Some playback, appearance, cache, diagnostic, and device-specific settings remain only on the device.

Voice profile and session information

We collect information you provide or generate through Blipside Voices, including:

• public display name, avatar, biography, and public voice profile;
• Voice Types, Voice Styles, languages, leagues, teams, topics, and coverage interests;
• session titles, descriptions, game or topic context, language, tags, schedule, status, and related metadata;
• drafts, scheduled sessions, live-session state, completed-session history, recaps, and analytics; and
• Blipside Voices account-support and enforcement information.

Voice profile and session information may be displayed to listeners. A language label is your declaration about the main language listeners should expect; Blipside does not verify fluency or translate the session.

Blipside processes proposed public display names, biographies, session titles, and normalized avatar images to identify potentially objectionable material before publication. This preventive review is separate from live audio and does not turn Listener report volume into automatic session termination.

Live audio

Blipside processes microphone audio from voices to provide live sessions. The current Service does not offer a feature that intentionally records, archives, replays, downloads, clips, transcribes, translates, dubs, clones, or trains generative-AI models on live audio.

Live audio is nevertheless received, encoded or transcoded, transmitted, and temporarily buffered or cached as technically necessary to deliver the stream. Transient playlist or segment data and Listener device or network buffers may exist for a limited period under ordinary media-system operation. Blipside cannot withdraw audio bytes that have already been delivered to a Listener's device or network buffer.

Current reports and session recaps do not contain a stored audio excerpt or transcript. If Blipside later introduces recording, replay, clipping, transcription, translation, evidence clips, or another new audio use, Blipside will update this Policy and obtain any additional rights or consent required before using the feature.

Activity, device, network, and diagnostic information

We collect or generate information about use and operation of the Service, which may include:

• searches and discovery activity;
• session views, joins, listening activity, following, blocking, reporting, voice switching, and playback events;
• app, browser, device, and operating-system information;
• IP address and network information processed by infrastructure and security systems;
• error, performance, reliability, and security diagnostics;
• logs, telemetry, release information, and opaque identifiers; and
• product-interaction information used for functionality, analytics, personalization, debugging, and abuse prevention.

Blipside uses redaction and minimization controls where practical, but operational data should not be assumed to be anonymous in every circumstance.

Reports, moderation, support, and legal requests

We collect information submitted or created in connection with:

• reports and report categories;
• voice, session, account, or content context;
• descriptions and diagnostic attachments;
• review status, operator notes, decisions, and audit history;
• blocking and enforcement actions;
• support, privacy, security, and copyright communications;
• account warnings, restrictions, session intervention, and review requests; and
• legal, law-enforcement, or safety requests.

For an intimate-image removal request, we collect the signature, reply contact, content location, and statement you or your authorized representative provide, together with information about authorization where relevant. We also create records of review and action taken. Do not attach intimate material; follow the request instructions.

The identity of a person who reports content is not intended to be public. Blipside may provide an appropriate explanation of an outcome without exposing reporters, confidential evidence, or information that would create additional risk.

Information from third parties

We may receive information from:

• app stores and operating-system providers;
• authentication or identity providers that you choose to use;
• cloud hosting, media, email, content-safety, security, and error-monitoring providers;
• sports-data and event-information providers;
• a person who reports or contacts us about your account or content; and
• services you intentionally connect to Blipside.

The information we receive depends on the service and its settings.

3. How we use information

We use personal information to:

• create, verify, authenticate, recover, and administer accounts;
• determine account eligibility and preserve policy presentation and acceptance evidence;
• provide voice profiles, live audio, schedules, session context, discovery, playback, language preferences, following, blocking, reporting, recaps, and analytics;
• personalize and filter the Service based on saved preferences;
• communicate verification, recovery, password, account, safety, operational, and legal notices;
• provide support and respond to privacy, security, copyright, and legal requests;
• evaluate proposed public profile text and avatar images for content safety;
• monitor reliability, diagnose errors, secure the Service, prevent fraud and abuse, and enforce agreements;
• investigate reports, protect people, preserve evidence, and respond to legal obligations;
• measure product performance and improve features, without using live audio for generative-AI or synthetic-voice training under the standard license in the Blipside Voices Terms;
• establish, exercise, or defend legal claims; and
• complete a merger, financing, reorganization, acquisition, or sale subject to appropriate safeguards.

4. What is public

Voice profile and session information may be public within the Service, including your display name, avatar, biography, voice attributes, languages, coverage interests, schedule, session title, context, live status, and other information you choose or are told will be public through Blipside Voices.

Listener email, password-derived material, authentication information, private preferences, account status, report identity, and private relationship choices are not intended to be public.

Blocking and preference choices are private controls. Reports, protected notes, security records, and internal moderation information are restricted to authorized use, subject to law and the need to explain or review an action appropriately.

5. How we disclose information

We disclose information in the following circumstances.

Service providers

We use service providers to perform hosting, databases, live-media processing, content delivery, transactional email, support email, error monitoring, logging, security, analytics, and related functions. These include Amazon Web Services and Amazon SES, Cloudflare for website delivery, security, and network-error diagnostics, Sentry for error monitoring, and Google Workspace for company communications.

For preventive public-profile filtering, Amazon Bedrock Guardrails processes proposed public display names, biographies, and session titles, and Amazon Rekognition processes normalized avatar-image bytes. These filtering paths do not receive live audio. Service providers acting on our behalf may process information only to perform services for Blipside, subject to applicable contracts and law.

Apple, for app distribution and device-platform services where applicable, also processes information under its own privacy policy. Cloudflare independently processes certain network and security information under its own privacy policy, including information from activity across websites using its services. These independent activities are distinct from processing performed on our behalf.

The providers we use may change, and Blipside will keep its disclosures aligned with its practices.

Other users and the public

We disclose public voice profile and session information to listeners and other people who can access the relevant part of Blipside. Live audio is transmitted to listeners who join the session.

At your direction

We disclose information when you direct us to do so, request a feature that requires disclosure, or authorize a connected service.

Legal, safety, and enforcement purposes

We may disclose information when we reasonably believe it is necessary to:

• comply with applicable law, a court order, or valid legal process;
• respond to an emergency or a credible threat of harm;
• investigate child-safety, fraud, abuse, security, or intellectual-property concerns;
• enforce our agreements or protect rights and the Service; or
• establish, exercise, or defend legal claims.

Corporate transactions

We may disclose information in connection with a merger, financing, reorganization, acquisition, bankruptcy, or sale of all or part of Blipside, subject to appropriate confidentiality and data-protection measures.

6. Cookies, browser storage, and device storage

Blipside Voices uses cookies and browser storage for authentication, security, account and workflow state, drafts, preferences, microphone selection, and other account functions. The sign-in session uses a secure HttpOnly cookie. Some workflow information is stored locally in your browser. Signing out should not be treated as a guarantee that every locally stored draft, preference, or device setting has been erased.

The Listener application uses the iOS Keychain for authentication credentials and uses device storage for account-backed caches, preferences, playback settings, interface state, and operational flags. Some unrelated device settings may remain after account deletion.

Blipside does not currently use advertising cookies or third-party tracking for cross-context behavioral advertising. Server and infrastructure logs may process IP addresses and device or network information even when the application does not set an advertising cookie.

The website also uses Cloudflare network-error reporting. Supported browsers may send reports about failed requests to Cloudflare, including the affected URL, request and error details, timing, and network information. This reporting can occur without a page script or advertising cookie and helps diagnose website availability problems.

7. Sale, targeted advertising, and tracking

Blipside does not sell personal information. Blipside does not share personal information for cross-context behavioral advertising and does not currently use personal information for targeted advertising.

Our no-sale and no-targeted-advertising practices apply whether or not your browser sends a Do Not Track or Global Privacy Control signal. Before introducing a practice that changes these statements, Blipside will update this Policy and provide any required notice, consent request, and controls.

8. Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including providing the Service, maintaining security, resolving disputes, enforcing agreements, and meeting legal obligations. Our ordinary retention periods and criteria are:

• Account, profile, preferences, and session data: while the applicable account is active, followed by deletion processing and the limited exceptions below.
• Verification and recovery code: expires after 15 minutes; related security records are minimized under the applicable cleanup process.
• Sign-in session validity: up to 30 days unless revoked sooner.
• CloudWatch and S3 operational telemetry: 30 days.
• Error and diagnostic records: retained only as long as reasonably needed for reliability, security, and incident response, subject to the configured provider period.
• Database backups: up to 7 days, with deletion-receipt reconciliation when a backup is restored.
• Live audio: no deliberate archive; transient processing, buffering, and caching only as needed for live delivery and ordinary expiry.
• Support correspondence: retained while needed to respond, document the resolution, and address a related dispute, safety issue, or legal obligation.
• Reports and moderation evidence: retained while open and, after resolution, only as reasonably needed for safety, fraud prevention, dispute handling, or legal obligations.
• Policy and acceptance evidence: retained while needed to administer the account, document the agreement, resolve a dispute, or meet a legal obligation, with direct identifiers removed or pseudonymized after deletion where practical.
• Pseudonymous deletion receipt: retained while reasonably needed to prove completion and prevent restoration from backup.

A code or sign-in session becoming unusable does not necessarily delete the associated security records at the same time. Those records remain subject to the purpose-based limits and exceptions in this Policy.

We may retain information longer when a specific legal hold, active claim, child-safety matter, fraud investigation, copyright process, or law-enforcement obligation requires it. When the reason ends, the information will return to the applicable schedule.

Deletion from active systems may not immediately erase information from ordinary backups, network or device caches, or data already received by another person. We use deletion receipts and restoration procedures intended to prevent a deleted account from becoming active again after a backup restore.

We may retain de-identified or aggregate information that cannot reasonably be linked to you.

9. Your choices and privacy rights

You can use available account controls to:

• update Listener languages and other preferences;
• follow or unfollow voices and teams;
• block or unblock a voice;
• update voice profile and session information where editing is available;
• recover or secure an account;
• view an account-data summary for a Listener account or request available account information for a Blipside Voices account; and
• initiate account deletion as described in Section 10.

You may also request a copy of your personal information, a correction, or deletion by emailing privacy@blipside.app. You do not need to use the product controls first. See Privacy Choices for practical instructions.

Depending on applicable law, you may have rights to request access, correction, deletion, a portable copy, restriction, objection, or an appeal of a privacy-request decision. You may also have the right to use an authorized agent. Blipside will honor rights required by applicable law after reasonable identity verification.

Submit a privacy request to privacy@blipside.app. Tell us whether it concerns a Listener account, a Blipside Voices account, or another use of Blipside, and what you need. We may ask for information reasonably necessary to verify your identity, confirm an authorized agent's authority, and protect the account. Do not send passwords, verification codes, or more personal information than the request requires. We will respond within the time required by applicable law and explain any material limitation or denial.

Where applicable law gives you a right to appeal a privacy-request decision, email privacy@blipside.app, identify the decision, and explain why you believe it should be reconsidered. We will respond and provide information about further complaint options as required by applicable law.

Because Blipside does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, there is no current sale or targeted-advertising opt-out to exercise. If that changes, Blipside will provide required notice and controls before the practice begins.

10. Account deletion

Listener accounts

Signed-in users can delete their Listener account in the Listener application's account settings. The process requires confirmation and is designed to delete that account and its associated data without deleting a separate Blipside Voices account that uses the same email address.

Deletion removes active Listener account and authentication records, profiles, preferences, follows, blocks, authored reports under the ordinary retention rule, and other Listener-associated data. It also clears account-backed local state that the application controls after confirmation. Device settings or prior device or iCloud backups outside Blipside's direct control may retain earlier bytes under the platform's ordinary behavior.

Blipside Voices accounts

You may request deletion of a Blipside Voices account by emailing privacy@blipside.app. Blipside may verify the account holder's identity and deliberate intent. Deletion cannot proceed while a session on that account is starting or live. If completion cannot be confirmed, Blipside will report the uncertainty rather than declaring deletion complete. A pseudonymous deletion receipt is used to prevent routine restoration of the deleted account from backup.

Deleting a Blipside Voices account ordinarily removes or de-identifies its authentication record, public profile, managed avatar, drafts, schedules, sessions, recaps, analytics, and other associated personal information, subject to the retention schedule and legal exceptions above. Disabling an account or resetting a profile is not a substitute for deletion.

Linked identity providers

If Blipside enables Sign in with Apple or another linked identity provider, Blipside will revoke or remove the relevant account linkage as required before representing the deletion as complete. Sign in with Apple is not currently available.

11. Children's and teen privacy

Blipside is a general-audience service and is not directed to children under 13. Listener accounts require an eligible age range indicating at least age 13. Blipside Voices accounts and Go Live access require an eligible age range indicating at least age 18.

Blipside does not collect a full date of birth for ordinary eligibility. Age-range information is private and is not displayed on a profile or session.

If we learn that we collected personal information from a child under 13 without legally sufficient authorization, we will take appropriate steps to delete or restrict the information and account. A person who reports a possible underage account should not send unnecessary information about the child through an ordinary channel.

Additional teen-privacy, guardian, age-assurance, or content-access requirements may apply depending on launch territory and platform rules.

12. Security

Blipside uses administrative, technical, and organizational safeguards designed to protect information. Current safeguards include password hashing, authenticated routes, secure session handling, session expiration and revocation, role boundaries, rate limits, redaction, encryption for relevant cloud storage and databases, restricted infrastructure, logging, and audited administrative actions.

No system is perfectly secure. Do not send passwords, verification codes, or other sensitive credentials to Support. Report a suspected vulnerability to security@blipside.app and avoid accessing another person's information or disrupting the Service.

13. International processing

Blipside and its primary infrastructure are based in the United States. Information may be transferred to and processed in the United States and, depending on the provider and service, other countries where our providers operate. Privacy laws may differ from those in your location. If Blipside intentionally expands into additional jurisdictions, it will implement the required transfer, rights, and local-notice measures before representing that expansion as supported.

14. Changes to this Policy

Blipside may update this Policy. Each version will have a new effective date. For material changes, we will provide a notice through the Service or at your account email, as appropriate, in addition to publishing the updated Policy. We will provide any advance notice required by applicable law or by the commitments in this Policy.

An update to this Policy is generally a notice, not a request to enter a new contract. If a change requires affirmative consent under applicable law or materially changes an optional data use, Blipside will request that consent separately. Updating this Policy does not by itself replace your agreement to the Terms of Use or Blipside Voices Terms.

15. Contact

• Privacy questions and requests: privacy@blipside.app
• Product support: support@blipside.app
• Security concerns: security@blipside.app
• Legal notices: support@blipside.app with the subject Legal Notice