Your Privacy Matters.

1. Data Collection

Blime is built on the principle of simplicity and privacy. We only collect the bare minimum data required to provide our service: your email address and a chosen username. The messages you send are encrypted using server-side AES-256 encryption and stored in encrypted form in our database. We do not track your location, your browsing history, or sell your data to third parties.

2. Real-time Communication

Our real-time features (typing indicators, presence, and message delivery) are designed to enhance your human connection. These signals are transient and are used only to power the live experience of the application. All real-time message delivery maintains server-side encryption, ensuring that even real-time communications are secure.

3. End-to-End Encryption

We implement robust server-side encryption for all messages using AES-256-GCM encryption with PBKDF2 key derivation. When you send a message, it is transmitted to our servers where it is encrypted using a key derived from your user ID. Messages are stored in their encrypted form in our database and can only be decrypted by authorized users.

Encryption keys are derived server-side using industry-standard PBKDF2 key derivation with your user ID and a secure salt. These keys are never stored in plaintext and are only used for encryption and decryption operations within our secure server environment.

Even our development team cannot access the content of your encrypted messages. All messages are protected with military-grade encryption algorithms that meet industry standards for security.

4. Aura System

Our Aura features allow you to share your vibe through temporary posts. Your expression earns you Aura Points, which reflect your presence in the community.

5. Data Minimization and Encryption

We practice data minimization and only collect information that is essential for the functioning of our service. We do not track your activity beyond what is necessary for providing our messaging features. All content shared through our platform, including Aura posts, is protected with the same end-to-end encryption as our messaging system.

6. Profile Information

When you create your profile, you may choose to provide additional information such as your name, age, skills you're proficient in, and skills you're eager to develop. This information is stored securely and is used to personalize your experience and connect you with others who share similar interests. Profile photos can be uploaded or linked via URL, and these are stored securely with appropriate access controls.

7. Skills and Interests Data

Your skills and interests data is collected to enhance community features and help connect you with like-minded individuals. This information is stored encrypted and is only used to facilitate meaningful connections within the Blime community. You have full control over what skills and interests you choose to share publicly.

8. Encryption Key Management

Your encryption keys are derived server-side using your user ID and a secure salt. Keys are never stored in plaintext and are only used for encrypting and decrypting your messages within our secure server environment. We do not have access to decrypt your messages without proper authentication.

9. Google Authentication

We offer Google authentication as a convenient way to sign up and log in to Blime. When you authenticate using Google, we only request access to your basic profile information including your name and email address. We do not request access to your Google contacts, calendar, or other sensitive data.

Your Google credentials are used solely for authentication purposes and are not stored by our service. We rely on Google's secure OAuth 2.0 protocol to verify your identity without accessing your Google password.

10. Favicon and Branding

Our favicon and branding elements are used solely for identification purposes and do not collect any personal data. These assets are served directly from our servers without third-party tracking.