Privacy Policy

Last updated 15 October 2026

What we keep on our server

• Account: your e-mail address, name, password (only as a secure hash), language, sign-in sessions (device name, IP address, dates), and whether you accepted these terms.
• Plan and credits: your plan, credit balance and a record of credit use per answer (model, token counts, credits; not the text of your questions or answers).
• Payments: amount, item, date and the payment reference from Qi Card. We never receive your full card number.
• Certification: your exam attempts, answers, timing, exam-window events (such as leaving the window) and results.
• Messages you send us: support tickets, crash reports (error details, app version, operating system), and the waitlist (e-mail and operating system).
• University offer: your university e-mail address, if you use the offer.
• Abuse protection: a one-way fingerprint of the BlueMesh installation, so free credits are given once per computer.

What stays on your computer

Your chats, memories, labs, uploaded files, Live Network device credentials and settings stay on your computer. They are not stored on our server.

Who else sees your data

• AI providers: when you ask something, the question and the content you attached go to the provider of the model you chose: DeepSeek (servers in China) for Standard and Pro, Anthropic (servers in the USA) for Fast and Expert. They process it to produce the answer, under their own privacy terms.
• Qi Card processes payments.
• E-mail service: to send codes, receipts and reminders.
• Hosting: our server and backups run at a hosting provider (Amazon Lightsail, Sweden).

We don't sell your data, and we don't use it for advertising.

How long we keep it

Account data: while your account exists. Credit and usage records: 2 years. Payment records: as long as tax law requires (usually 5 years). Crash reports: 1 year. Waitlist: until we e-mail you about the launch, then 6 months.

Your rights

In Settings > Account you can download all data our server holds about you, and delete your account (we then remove your personal data; payment records are kept without your name and e-mail as tax law requires). You can stop offer e-mails at any time. For any other request, use the Contact page.

Security

Passwords are hashed with scrypt, connections use HTTPS, sign-in tokens are stored only as hashes, the admin dashboard needs a second sign-in step, and backups are encrypted.

Children

BlueMesh is not meant for children under 13.

Contact

, . Use the Contact page.