2026-11-08

Pilot privacy notice

Who handles your information?

This notice covers the Blaizes mobile pilot. Boosted by Design Oy is the data controller for the pilot. Send privacy requests to feedback@blaizes.com.

What we use and why

Your account identifier and email from the sign-in service match your invitation to your account. Session and device details protect access. An age confirmation and terms version may be recorded against your account. These account details are needed for a personal pilot account.

Your message, chosen character, conversation history and a memory drawn from earlier chats help generate a reply. The model provider may receive your message and the parts of your history and memory needed for the reply. Memory helps personalise the conversation. Avoid sharing sensitive information where possible.

If you use an image or audio feature, the relevant image, audio or text may be sent to its provider. You can use text chat without sharing media. A device notification token is used for notifications if you enable them. You choose separately whether to allow optional usage analytics.

Proposed legal bases

We propose performance of the agreement as the basis for the account and conversation data necessary to deliver the pilot. Security and abuse prevention can involve technical request identifiers. We propose a legitimate interest in protecting the service and its participants for that purpose, and consent for optional analytics. The basis for each feature, the balance of interests for security processing and any additional consent requirements will be reviewed before launch.

Recipients and transfers

The planned service uses Cloudflare for hosting and storage, and Supabase for authentication. Your chosen sign-in method may use Google or Apple. A message, image or audio recording may reach the selected AI or media provider. The final notice will identify active providers, the data they receive and any further use. It will also explain processing locations, transfers outside the EEA, applicable safeguards and how to obtain details.

Retention and deletion

While your account is in use, saved history and memory help you continue a conversation. Your phone may also hold account-specific drafts, messages and media. Start account deletion in the app settings and confirm using the same account. Deletion disables server access for the account. Clean-up by external providers may continue afterwards. Your deletion receipt lets you track progress. The final notice will specify retention periods or criteria for data, technical logs, receipts and backups.

Your rights

You can request access, correction or erasure. Depending on the circumstances, you can also request restriction or portability and object to processing based on a legitimate interest. You may withdraw consent at any time. Withdrawal affects future processing. Downloading your account data and deleting your account are separate actions.

Send requests to feedback@blaizes.com. You can complain to a competent supervisory authority. Finnish Data Protection Ombudsman guidance (in Finnish).