Bluebie is operated by an individual sole developer based in Cork, Ireland. For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, the data controller is:
If you have questions about how your data is handled, please use the contact email above.
Bluebie uses Google Sign-In (via Firebase Authentication) as the only way to create an account. When you sign in, Google shares the following with Bluebie:
We store your email address and display name to identify you inside the app and to show your name to people you share a list with. We do not receive or store your Google password.
Everything you put into the app — your shopping lists, individual items, categories, ticked-off state, list names, the people you invite to a list, and the timestamps of these actions — is stored in Bluebie's database so it can sync across your devices and with people you've invited.
Bluebie itself does not run analytics, advertising trackers, or third-party tracking pixels. However, our infrastructure providers (see Section 4) may automatically log technical information such as your IP address, browser type, and timestamps of requests, in order to operate and secure the service. These logs are managed by Google in line with their own retention policies.
Bluebie is a Progressive Web App (PWA). To work offline and to remember that you are signed in, the app stores some information in your browser's local storage and IndexedDB — for example, your Firebase Authentication session, and a cached copy of your lists. This data stays on your device and is not transmitted separately to us beyond what is needed to sync with the server.
| What we process | Why | Legal basis |
|---|---|---|
| Email, display name, account ID | To create and authenticate your account | Performance of a contract (Art. 6(1)(b)) |
| List contents, items, categories, membership | To provide the core service of the app | Performance of a contract (Art. 6(1)(b)) |
| Invitee email addresses | To deliver invites to lists you share | Performance of a contract (Art. 6(1)(b)) |
| Infrastructure logs (IP, request metadata) | To keep the service secure and operational | Legitimate interests (Art. 6(1)(f)) |
Bluebie is built on top of services provided by third parties. These providers process your data on our behalf, under contracts that include the GDPR-mandated data processing terms (and, where applicable, Standard Contractual Clauses for transfers outside the EEA):
Some of these providers are based in, or transfer data to, countries outside the European Economic Area, including the United States. Where this happens, the transfer is protected by the EU-US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
Bluebie allows you to share a list with other people by sending them an invite. When you do:
Please only invite people you trust with the contents of your list.
You can permanently delete your account at any time from the Account section of the in-app menu. When you do, the following happens automatically:
This action is irreversible. Infrastructure-level backups and logs maintained by Google may retain residual technical data for a short period before being overwritten, in line with Google's standard retention.
If you are in the EU, UK, or EEA, you have the following rights:
To exercise any of these rights, email akire.fun@gmail.com. We aim to respond within 30 days, as required by the GDPR.
You also have the right to lodge a complaint with the Irish supervisory authority, the Data Protection Commission (www.dataprotection.ie), or with the supervisory authority in your country of residence.
If you are a California resident, you have the right to know what categories of personal information we collect about you (see Section 2), to request deletion of your personal information (see Section 7), to opt out of the sale or sharing of your personal information, and not to be discriminated against for exercising these rights.
Bluebie does not sell or share your personal information for cross-context behavioural advertising.
To exercise your rights, email akire.fun@gmail.com.
Bluebie is not directed at children. The minimum age to use Bluebie is 16, in line with the digital consent age set by Ireland under the GDPR. We do not knowingly collect personal data from anyone under this age. If you believe a child has provided us with personal data, please contact us so we can delete it.
Bluebie does not use tracking cookies or advertising cookies. The app uses your browser's local storage and IndexedDB to keep you signed in (via Firebase Authentication) and to cache your lists for offline use. These are strictly necessary for the app to function.
We rely on Google Firebase's security infrastructure, which includes encryption in transit (TLS) and encryption at rest. Access to your lists is restricted by Firestore security rules so that only you and the members of a list can read or write its contents. No internet service can be guaranteed to be 100% secure, but we take reasonable steps to protect your data.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent revision. If we make material changes, we will take reasonable steps to notify you, for example by showing a notice in the app on next sign-in.
Questions, requests, or concerns: akire.fun@gmail.com.