bleu

Privacy & Data

Last updated September 4, 2026.

Bleu requires only your email address to sign in. Your account stores what your sessions produced, any unfinished session, and the conversations themselves, so you can return to them; all of it can be deleted from Settings. Copies kept to help us improve Bleu are separate, and are only made with your consent.

Logging in

You sign in with a one-time link sent to your email address; there is no password. The link expires after 15 minutes and can be used once. Signing in creates a session that lasts up to 30 days, or until you log out. That session is a random token mapped to your email address, held in a cookie on your device (bleu_session) so you stay signed in between visits; logging out deletes it in both places. We record when an account was created and last used. Your account is what saved sessions are attached to; the next section sets out what that includes.

What’s saved to your account

Three things, each so you can return to a session:

A guided session you haven’t finished. If you stop partway through, the conversation so far is retained for up to 7 days so you can resume it. Once it has got as far as your vision statement, the conversation is also saved to your account and kept as a completed one is (see below) — so stopping partway does not lose it, even if you never come back. On completion the working copy is deleted. If you choose to start over instead, the unfinished session is deleted and nothing from it is retained, the saved conversation included. In either case the working copy is gone after 7 days at the latest.

A conversation you pick up later, or a topic. These have no fixed ending — you close them when you are done, or simply leave. So they are saved to your account from the first reply rather than at the end, and appear in Settings straight away. Closing the tab does not lose them. They are then kept and deleted exactly as a completed session is, and each has its own delete control.

A summary of a session you’ve completed. Your vision statement, the career possibilities discussed, your strengths, values, aspirations and plan. This is what Bleu reads when you return to continue a conversation. If you run one of the short activities under Topics, its result joins this summary; for “Evaluate role fit” that means anything concrete it surfaced — a programme, a grant, a community worth looking at — not the role you asked about and not Bleu’s assessment of it. Bleu retains the last ten of these. The conversation you had while working it out is kept as any other session is, and can be read or deleted from Settings. It is deleted if you do not return for a year; every visit resets that clock.

The conversation itself. The messages between you and Bleu, kept so you can read a session back rather than only its summary. Stored as everything else here is — against a token, not your email address — and deleted a year after your last visit. Every conversation has its own delete control in Settings, including the short activities under Topics, which appear in the same list under the name of the activity you ran.

Deleting what is stored. Settings provides a delete control on each past conversation, and one that removes everything saved to your account at once, including the copy of a session you agreed to let us keep. Deletion is immediate and cannot be undone. The one exception is the backup described below. Your account itself remains open.

None of this is filed under your email address. It is stored against a token derived from it using a key held outside the database, so a copy of the stored data alone cannot connect what was said to who said it.

Backups. We keep private daily backups, so a failure on our side does not lose your work. No backup is kept longer than 30 days — so deleting something removes it from Bleu immediately, and from the last backup holding it within 30 days. A backup cannot be read without our credentials, and like everything else it carries the token rather than your email address.

What happens to what you type

During a session, your messages are sent to Anthropic’s Claude API (server-side, via our own API key) to generate Bleu’s responses. Anthropic processes this under their own commercial API terms. Unlike the consumer claude.ai product, data sent through the API is not used to train their models by default. See Anthropic’s privacy policy for their specifics.

The downloadable summary

When you download your session summary, your conversation is sent to Anthropic once more to extract the key points into a structured format. The PDF itself is built entirely in your browser and is never uploaded or stored by us. It’s yours the moment it downloads, and we keep no copy of it.

Analytics

We use Vercel Analytics to understand aggregate usage: whether sessions are being started, completed, and downloaded. It doesn’t use cookies and doesn’t build a profile of you individually; it counts anonymous events, not people. Besides the sign-in cookie described above, the only thing saved in your browser is your light/dark theme preference (via localStorage), which never leaves your device.

Who else handles your data

These companies process data on Bleu’s behalf:

Bleu’s own reflection on the session

At the end of every session we ask Bleu to write a short internal note on how the conversation went — not what you shared, but whether a question landed oddly or a stage felt confusing — so we can improve the flow for future sessions. Bleu is instructed to exclude your name and any specific detail about your career or background.

If you agree to let us keep a copy

Near the end of a session, Bleu may ask whether a copy of your summary and the full conversation may be kept to help us improve Bleu. It is optional and does not affect what the session provides. If you agree, we retain both the summary and the transcript for review, and are notified by email when a new one is available. That copy carries no email address, but it does carry the same one-way token your saved profile is stored under, so copies from your own sessions can be read together while nothing in the database turns that token back into you. It is not redacted: if you told Bleu your name, your employer, or specifics of your situation, those are in what we keep. If you decline, or are never asked, nothing is kept.

The question covers that session and any topics you run afterwards, so we can see how the follow-ups actually go rather than only how a first session ends. You are asked once, not at the end of every conversation. You can change your answer at any time under Settings → Keep copies to improve Bleu. Turning it off stops any further copies being kept; copies already made are removed when you delete your account data from Settings. If you agreed before this page said so, that older agreement covered only the single session you were asked about, and nothing further was kept under it.

What this means practically

A transcript is kept for our review only if you were asked and agreed. What remains either way is what your account holds — the summary, the conversation itself for a year, and the working copy of an unfinished session for 7 days — together Bleu’s own name-free reflection. All of it can be deleted from Settings, where you can also download a copy of your profile summary.

What we don’t do

We do not sell data, and we do not use anything you share for advertising.

Questions

Reach us at askbleu.ai@gmail.com.

← Back to Bleu