Privacy

Last updated 15 October 2026

Bluma (bluma.design) builds interface components from what you describe. This page says what we keep about you, why, and who helps us run the service. Questions: sucodeeup@gmail.com.

What we keep

• Your Google account basics. When you sign in with Google we receive your name, email address and profile picture. We use them to know it is you and to show your name and picture in Bluma. We do not get your Google password or anything else from your Google account.
• What you make. Your chats (what you write and what Bluma answers), the components Bluma builds for you, and pictures you add to a chat. Pictures are stored privately; only you can open them.
• Hearts. Which components you liked, so your Liked page can show them.
• Credits. Your credit balance and how many credits each message used.
• Who is online. To show how many people are on Bluma right now, your browser keeps a random id and sends it every 20 seconds while the page is open. We store only a one-way fingerprint of it, and only for about an hour.

Cookies and your browser

We use one sign-in cookie so you stay signed in. It cannot be read by scripts on the page. Your browser also remembers your light or dark choice and the random id above. We use no advertising, no tracking cookies and no analytics.

Who helps us run Bluma

• Supabase stores the data above and handles sign-in (servers in Ireland, EU).
• Vercel runs the website (servers in Dublin, EU).
• Anthropic provides Claude, the AI that writes your components. Your messages and the pictures you add are sent to Claude to answer them. Anthropic does not use this to train its models.
• Google confirms who you are when you sign in.

We do not sell your information, and we do not share it with anyone else unless the law requires it.

Your choices

• You can delete any chat at any time; its messages and pictures are removed with it.
• To see what we keep, or to delete your account and everything in it, write to sucodeeup@gmail.com from the email you sign in with. We do it within 30 days.
• When an account is deleted we keep only a one-way fingerprint of its email and the credits it had left, so that deleting and signing up again cannot be used to get free credits twice.

Keeping it safe

Everything travels over HTTPS. Your data is visible only to your own account, and the keys that reach the database and the AI are kept on the server, never in your browser.

Children

Bluma is not meant for children under 13, and we do not knowingly keep information about them.

Changes

If this page changes, the date at the top changes with it. Important changes will be shown in Bluma.