Privacy policy — Hey Blop
Hey Blop records when you sleep. That is health information, and this page says exactly what happens to it. It is written to be read, not to be survived.
The short version. Your nights are yours. They are stored so that the app can show them back to you and for no other purpose. Nothing about you is sold, shared for advertising, or handed to anyone who is not helping run the app. There is no advertising, no tracking, and no analytics of any kind.
Who is responsible
Juliette Grieneisen, Kreuzlingen, Switzerland, contact@heyblop.com.
If you are unhappy with how your data is handled you can complain to us at that address, and you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), or to the data protection authority of the country you live in, without going through us first.
What is collected, and why
Your account. An email address and a password. The password is never stored as you typed it — our authentication provider keeps only a cryptographic hash, and nobody, including us, can read it back.
What you choose to tell us. A display name, so the app can greet you by it, and a birthday, so Blop can wish you on the day. Both are optional and the app works without them. The birthday's month and day are used to wish you on the day. Its year is kept too, shown to you on your profile, and only ever counted as an age.
Your nights. For each night: when you tapped to start, when you tapped to wake, how long that was, and the calendar day the night is filed under. Also how far your clock stood from UTC at each end, so a night still reads at the hours you actually slept if you travel or the clocks change. And your nightly sleep goal, and which language you chose.
If you subscribe. Google Play takes the payment, as the seller: we never see your card or your bank details. RevenueCat, which keeps track of subscriptions for us, receives the anonymous number that identifies your account, what you bought and when, and whether the subscription is active — so that a subscription follows you to a new phone. It does not receive your email, your name or anything about your nights.
If you send us something. The You screen can share the app's technical log, or one listened night, so that you can show us a problem. Nothing is sent unless you share it yourself, and it goes through whatever app you choose to send it with (an email, or a messaging app such as WhatsApp), under that app's own terms. We use what you send only to understand and fix the problem you reported, and delete it once that is done. The log never contains your email, your password or the contents of your nights; a shared night is the loudness measurements described below, never a recording.
Nothing else. No location, no contacts, no device identifiers, no advertising ID, no behavioural analytics and no third-party trackers. Your alarms, their sounds and the words Blop says in the morning stay on your phone and are never sent anywhere. The microphone does one thing, described in the next section, and only if you switch it on.
Listening at night
Hey Blop can listen while you sleep, and only if you switch it on. The switch is on the You screen, it is off until you touch it, and touching it is the moment your phone asks for the microphone. Say no and the rest of the app carries on exactly as before: there is nothing else the microphone is used for, and nothing else asks for it.
No audio is recorded, kept, or sent — not once, not briefly. Sound arrives in slices of about a tenth of a second, and each slice leaves as four numbers: how loud it was, and three coarse measures of its character — how much of it was low-pitched, how much was high-pitched, and how steady its pitch was. That is enough to tell a snore from a cough from the rustle of bedding, and far too little to hold a voice: speech cannot be recovered from these numbers, and nothing can be played back from them. At no point in the app does a recording exist.
In the morning, the app reads those numbers on your phone to show how the night went: when you were awake, in light sleep or calm, whether loud breathing or snoring was heard, and whether coughing was heard. It says what was heard and nothing about what it might mean for your health; Hey Blop is not a medical device and does not diagnose anything.
What is stored, on your phone and nowhere else:
- the four numbers per tenth of a second described above, with a
thirty-second summary of the loudness alongside them,
- when the night's listening started and stopped, and why it stopped,
- the microphone's sample rate, the battery level at each end, whether the phone
was charging, and whether Android's battery saving was switched on for Hey Blop.
That last line is not idle curiosity: the usual reason a night is lost is the phone shutting the app down to save memory or power, and without those numbers there is no way to tell that from a fault of our own.
None of it is uploaded. It is not sent to us, it never reaches the database, and only the seven most recent nights are kept — older ones are deleted from the phone. The one way any of it leaves your phone is if you send it yourself, with the share button.
While it is listening, a notification stays on your screen for as long as it lasts. Android requires that, and it is the right requirement: the app is never listening without you being able to see that it is.
Why we are allowed to hold it
Your account details are processed to give you the account you asked for — in GDPR terms, to perform our contract with you.
Your sleep times are data concerning health under Article 9 of the GDPR, and they are processed only on your explicit consent, which you give when you create an account and can withdraw at any time by deleting your account. Consent is not buried in these terms: it is asked for separately, and refusing it means the app cannot do what it exists to do, so we would rather you did not sign up than agree to something you did not want.
Listening is a second consent, asked separately and refusable on its own. It is off until you switch it on, switching it off stops it, and the app works without it. That is deliberate: consent to one thing is not consent to the next, and a microphone folded into the sign-up would not be freely given.
Who else touches it
Only the companies that help run the app, each under a data-processing agreement, and none of them may use your data for anything of their own:
| Who | What for | Where |
|---|---|---|
| Supabase | The database, your account, and authentication | EU (Ireland) |
| Resend | Sending the confirmation and password-reset emails | EU |
| RevenueCat | Keeping track of subscriptions: an anonymous account number and your purchases | United States, under the EU Standard Contractual Clauses |
| Selling the subscription and taking payment, as the seller under its own privacy policy | Google's own |
Your data is not sold, rented, or shared for advertising. It is not used to train anything. There is no third party we hand it to in exchange for a service we could not otherwise afford.
How long it is kept
Your nights are kept until you delete them or delete your account. There is no automatic expiry: a sleep history is only worth having if it is long.
Deleting your account deletes your data. The app has a delete button — it removes your nights and your profile and then the account itself, and it is not reversible. There is no "deactivated" state and no thirty-day grace period in which we quietly keep everything.
Backups held by our hosting provider may retain a copy for a short period after deletion before they roll over. Email delivery logs, which record that a message was sent to an address and not what it said, are kept by our email provider for a limited period.
What you can ask for
You can ask us, at contact@heyblop.com, to:
- show you everything held about you,
- correct anything wrong — the app lets you edit your nights, your name,
your birthday and your goal directly,
- delete it, which the app also does for you, immediately, from the You
screen — and if you cannot reach the app at all, because the phone is lost or broken, write to us from the account's own address and we will do it by hand,
- hand it over in a portable form, so you can take it elsewhere,
- withdraw your consent, which means deleting the account, because the
nights are the app.
We answer within a month. There is no charge.
Children
Hey Blop is not for children. You must be at least 16 to use it.
Security
Your data is protected by row-level security at the database, which means the server itself enforces that your nights can only be read by you — not merely the app asking politely. Traffic is encrypted in transit. The key the app carries is a public one by design and can read nothing on its own.
No system is perfect, and anyone who says otherwise is selling something. If we ever discover a breach affecting your data we will tell you, and the authority, within the time the law allows.
When this changes
If the app starts collecting something new, this page changes first, and we ask you again. New consent, in the app, before anything is measured. A change of this kind will never be slipped in by updating a date at the top of a page nobody was told about.
That is how the microphone arrived and it is how the rest will. Today everything the microphone measures, and everything the app reads from it, stays on your phone. The day anything drawn from it is sent to us — how restless a night was, whether snoring was heard — you will be asked before it is, and you will be able to say no and keep the app.
Contact
Juliette Grieneisen · Kreuzlingen, Switzerland · contact@heyblop.com