Privacy Policy

Last Updated: 2026年11月3日

Blave ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information when using the Blave mobile application and its related services.

1. Information We Collect

We collect the following types of data to provide you with a complete and secure experience:

• Account Information: Your email address and encrypted login credentials.
• Exchange API Data: If you choose to connect your exchange API, we may access your account details, trading history, and positions.
• Blave Agent Instance Data: Strategy execution status, positions, order records, and system and execution logs, used for display, anomaly notifications, and troubleshooting.
• Device Information: Device type, operating system, IP address, and app version.
• Usage Data: Your interactions with the app, preferences, and behavior analytics.
• Cookies and Analytics Identifiers: cookies and similar technologies store your sign-in session, language preference, and an anonymous analytics identifier. See Section 8.
• Blave for Desktop Usage Events and Current Settings: when you use Blave for Desktop, the app sends a limited set of usage events and, after you sign in, tells us three current settings; when you download a library strategy without signing in, we record which strategy and this installation's identifier. See Section 9.
• Blave for Desktop Position Snapshots: when you are signed in to your Blave account in the desktop app and "See this computer's positions in the mobile app" is on, the desktop app regularly sends us this computer's strategy and position status so you can view it in the Blave App. See Section 9.3.
• Chatting with Blave Agent in the Mobile App: when you pair a phone, turn on "Allow phone chat" in the desktop app, or send a message in the Blave App, we process your paired device data, activity records, and a masked copy of your desktop conversations. See Section 9.4.
• Cloud Machine and Website Conversations: the content, attachments and images of your conversations with your cloud machine on the website, in the app, or through Telegram. See Section 10.
• Studio AI Assistant Conversations: your questions and the AI's replies. See Sections 3 and 5.
• Contact and Report Data: when you contact us or report content through the channels on the Contact Us page (email, Discord), the email address or Discord username and the message content you provide, used to reply to and handle your message or report.
• Server Access Logs: when anyone visits this site (including public research pages viewed without signing in) or connects to our servers through Blave for Desktop, our servers record the IP address, time, requested URL, and browser information as part of routine security operations. These general access logs are kept for no more than 14 days.
• API Request Logs: the website, the app and the desktop app call our API. We record each request's IP address, time, URL, browser information, and parameters. These records are kept for 120 days. Requests made without signing in are recorded too.

2. How We Use Your Information

Your data is used for the following purposes:

• To provide core features like charting, portfolio insights, and trading analytics.
• To improve app performance and user experience.
• To send important system updates and notifications (you may opt out of marketing messages).
• To email reminders about your progress to your account address after you sign in to Blave for Desktop (see Section 9.1; you can unsubscribe at any time).
• To ensure account and platform security.
• To generate de-identified and aggregated insights that may be used for internal analytics or offered to users as premium features.
• To reply to your messages and handle reports about published content.

3. Sharing of Information

We do not sell your personal data to third parties in an identifiable form. Data is only shared under the following conditions:

• When required by law or government authorities.
• With trusted technical partners (e.g., cloud service providers), under strict confidentiality obligations.
• When you explicitly choose to share content (e.g., screenshots or portfolio summaries).
• Aggregated and de-identified data may be used internally or as part of features offered to users or partners. See Section 4 for more details.
• With third-party analytics providers (currently Google Analytics 4), which process site usage data on our behalf. See Section 8.
• With Google, whose Firebase services process Blave App usage and crash data on our behalf. See Section 8.
• With our email delivery provider (currently MailerLite), which sends email on our behalf. We share the data it needs to send: your email address, your interface language, your IP address at sign-in and the country derived from it, your last sign-in time, your subscription plan, whether you have connected an exchange API, your card and subscription payment status, your Blave Agent setup progress (whether you have opened the setup page, added a card, or started a server), and which reminder group you are placed in. MailerLite's handling of that data is governed by its own privacy policy (mailerlite.com/legal/privacy-policy).
• When you choose to use Blave's AI in Blave for Desktop, the content of your conversations is sent to the provider of the model you select (currently Anthropic and DeepSeek) for processing. See Section 9.2.
• Your cloud machine conversations are sent to model providers for processing (currently Anthropic and DeepSeek). See Section 10.
• When you chat with your cloud machine through Telegram, messages are sent through Telegram. Telegram's handling of the data is governed by its own privacy policy. See Section 10.
• When you use Studio's AI assistant, your questions are sent to OpenAI for processing, along with earlier messages in the conversation and the data it looks up. What you have saved under Personalization is sent as well. OpenAI's handling of the data is governed by its own privacy policy.
• When you publish a Blave Agent report. If you publish a performance report, the account assets, positions, and profit-and-loss figures in it become public; if you choose to be credited, your display name (including any referral code in it) becomes public too.
• When you contact us through Discord, Discord's handling of that data is governed by its own privacy policy.
• When you turn on notifications in the Blave App, "reply ready" push notifications reach your phone through Apple's and Google's push services. They include the conversation title and the first 60 characters of the reply, and this content appears on your lock screen. Notifications that a new phone was paired are delivered through the same push services. Apple's and Google's handling of the data is governed by their own privacy policies.

4. Use of Aggregated and Anonymized Data

We may use de-identified and aggregated data derived from user-linked exchange APIs to generate statistical insights and market indicators. These insights:

• Do not contain any personal identifiers.
• Cannot be linked back to individual accounts.
• May be made available to other users as part of premium features.

You can opt out of contributing to such analytics by contacting us or managing your privacy settings in the app.

5. Data Retention and Deletion

We retain your data only for as long as necessary to fulfill its intended purpose. You may request to delete your account and associated data at any time by contacting us.

• Snapshots and publication records of reports that are or were published are kept for 180 days after account deletion, under Section 8.8 of the Terms of Service.
• Messages and report data are deleted within a reasonable time after they have been handled.
• Blave for Desktop usage events are kept for 25 months from receipt. See Section 9.1.
• The current settings Blave for Desktop tells us after you sign in, and records of desktop reminder emails (which kind, which language, and the delivery result), are kept for 90 days. See Section 9.1.
• Records of Blave for Desktop library downloads made without signing in are kept for 25 months from creation; after that, only each strategy's cumulative install count is kept, without installation identifiers. See Section 9.1.
• Blave for Desktop position snapshots: only the latest one is kept for each computer, and it is deleted automatically if no new upload arrives within 7 days; it is deleted immediately when you turn the feature off, sign out of the desktop app, or delete your account (if you are offline at that moment, it is deleted automatically within 7 days at the latest). See Section 9.3.
• Masked copies of desktop conversations: each conversation is kept for 30 days from its last activity. It is deleted immediately when you turn off "Allow phone chat", sign out of the desktop app, or delete your account (if you are offline at the time, it is deleted automatically when the retention period ends at the latest) (see Section 9.4).
• Mobile app activity records (time, device, IP address, target machine, request ID, and type of action): kept for 90 days from when they are created.
• Paired device data is kept for 90 days after you revoke the phone, and is deleted immediately when you delete your account.
• Cloud machine and website conversations: records on our servers are kept for 30 days after the last write, messages on the machine for up to 1 year, and conversation summaries until the machine is deleted (see Section 10).
• API request logs are kept for 120 days from when they are created (see Section 1). They are not deleted immediately when you delete your account; they are cleared when that period ends.
• Studio AI assistant questions and answers are stored in Blave's database and kept until you delete that conversation or your account. Your questions and earlier messages in the conversation are also kept in the API request logs for 120 days, as described in Section 1.
• AI usage records and credit transaction records are kept for the period required by law.

6. Your Rights

You have the right to:

• Access, correct, or update your personal data.
• Request account and data deletion.
• Revoke API access at any time.
• Opt out of receiving marketing communications.

7. Data Security

We implement appropriate technical and organizational safeguards to protect your information, including encryption and access control.

8. Cookies and Third-Party Analytics

We use cookies and similar technologies (such as local storage) to keep you signed in, remember your language and display preferences, and measure how the site is used.

• Essential: sign-in session, language, and display settings. Blocking these prevents you from signing in.
• Analytics: Google Analytics 4, provided by Google LLC, records page views, referral source, approximate region derived from your IP address, and device type. Google's handling of that data is governed by its own privacy policy (policies.google.com/privacy).

We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout).

The Blave App uses Firebase services provided by Google LLC:

• Analytics: records the screens you open, the features you use, your device type, and your approximate region. We use this to understand how features are used.
• Crashlytics: when the app crashes or hits an error, it sends the error log and device information so we can fix the problem. The iOS version includes your account ID.
• Remote Config: the app reads configuration values from Firebase, which we use to adjust feature settings.
• Performance (Android version only): records how long app startup and network requests take, which we use to improve performance.

Google's handling of that data is governed by its own privacy policy.

9. Blave for Desktop

This section applies to Blave for Desktop (macOS and Windows) installed on your computer.

The desktop app periodically connects to Blave's update source (download.blave.org) to check for a new version. That connection is served by a content delivery network, and its access logs are not covered by the retention period stated in Section 1.

When a new version is available, the desktop app fetches that version's release notes from GitHub. The notes appear in the update confirmation dialog.

That connection is served by GitHub, which sees this computer's IP address. GitHub's handling of that data is governed by its own privacy statement (docs.github.com/site-policy/privacy-policies/github-general-privacy-statement).

9.1 Usage Events

To understand where installation, setup and everyday use break off or get stuck, and how many people are on each version, the desktop app sends us the following kinds of usage events. After you sign in, these events are also used to decide whether to send you usage reminder emails (see "Purpose" below). Each event answers only one question: which step happened (or where things got stuck), when, and on which version; the "Online" item answers whether the app was open that day. Each event's name and the option values it can carry are fixed lists written into the app's code; the complete list is public in the desktop app's source code (shell/telemetry.js in github.com/Blave-TW/blave-agent). When the desktop app is updated, events or option values may be added or removed within the categories below; if we add a new category, or change the scope of what usage events "never include" below, we will revise this Privacy Policy.

• Installation, launch and online: "First open" is sent once, the first time this installation starts. "Open" is sent each time the app starts; we keep one record per installation per day (UTC). "Online" is one record for each day (UTC) the app is open, starting about 10 minutes after launch; we record whether automated trading on this computer is running at that moment (paper trading counts) — only yes or no, not whether it is paper or a real account, which exchange, or which strategy.
• Connecting an AI and signing in: when you choose which AI to use, and the first time this installation receives a reply from the AI (sent once), we record which AI it is (Blave's AI, Claude Code, Codex, or your own API key). When you successfully sign in to your Blave account in the desktop app, we record one event. When a connection does not complete, we record only the category of the cause: sign-in to Claude Code or Codex did not complete, the tool could no longer be found when you clicked connect, Blave sign-in failed or was cancelled, neither Claude Code nor Codex is usable on this computer, or your own API key did not pass verification (the key was not accepted, your balance with the provider is too low, the provider could not be reached, or another reason). For each of Claude Code and Codex that the check finds unusable on this computer, we also record which reason category applies (for example not found, timed out, or not signed in). When you use Claude Code, we also record the category of its sign-in method (for example subscription, API key, or other).
• Milestones: the first time a strategy finishes a backtest on this installation (sent once); when you start order placement and it succeeds, in which case we record whether it is paper trading or a real account, not which exchange; and when you confirm in the desktop app that a strategy is to be sent to the cloud and the request has been handed to the AI agent. In addition, when each strategy is created, when it first finishes a backtest, and when it is first assigned an amount for automated order placement, we record its strategy type (A, B or C) and market category (for example crypto, TAIEX futures or US stocks), not the strategy's name, code, symbols or amounts.
• Failed conversation turns: we record only the category of the cause, which is one of the following: Blave's AI could not be charged (no card or not enough credit); authorization expired or the trial allowance is locked; requests were rate-limited; the AI tool you chose could not be found; the local AI tool is not signed in or its sign-in has expired; the usage limit that the desktop app sets for a single turn was reached while you were using your own API key; or another reason. If a local AI tool's sign-in fails, we also record the category of the failure and whether it was judged to be signed in at that moment.
• Card, top-up and cloud plan: whether a card or top-up prompt appeared and whether you clicked it (distinguishing the check when the workspace opens from a turn that was blocked, and no card from not enough credit), and, after you clicked, whether on returning to the app your account was ready, still had no card, or still lacked credit; and the result of starting a cloud plan from the desktop app (success, no card, insufficient balance, or error).
• Strategy library and finding ideas: when a strategy library strategy cannot be used, we record the category of the cause (signed out, no card, insufficient balance, account status could not be confirmed, the cloud host is stopped, or Blave's AI is selected without a card or enough credit). When you use a library strategy on this computer, we record whether that strategy needs Blave data (needed, not needed, or not labeled), not which strategy it is. When you ask the AI agent to search the web for strategy ideas, we record which entry point the request was sent from (the welcome page, the strategy library header, or the library's empty list), not the text you entered.
• Updates and installation: the stage at which an automatic update failed (checking for a new version, downloading, verifying the signature, installing, or other); and the result of installing the engine and strategy packages, on first install or when more packages are added later (for example after an update): finished, or failed because of a network problem, a timeout, or another reason. If the optional US stock data packages fail to install, we record the same categories for them.
• Computer type: whether this computer is a laptop or a desktop (judged from whether it has a built-in battery and from its chassis type), recorded once a day.
• Feature use: when you open a tab or use a feature, or when a feature's prompt or result appears, we record the name of that feature (for example the "Parameter scan" tab, "Pick strategies", report sharing, strategy export, which screen a card or top-up button was clicked from, whether a chat attachment was pasted or picked from your files, which option was chosen when the phone-chat verification step or confirmation prompt appeared, or the "Revoke on Website" link), never the content inside it. Some names by themselves show which integration or which kind of built-in content you are using (for example the setup steps for Capital Futures or President Futures, an export format for charting software such as TradingView, or whether a built-in morning report covers Taiwan stocks or crypto).

Apart from the three events noted above as sent once, we keep one record per day (UTC) for each installation, each kind of event, and each of its option values. None of these events records the text of error messages or any other content.

Each event carries only: an installation identifier (Installation ID), the event name, one option value for that event (if any; at most one per event), the app version, the operating system name and version, your system locale, the time on your computer, and the time we received it.

Usage events never include: the content of your conversations with the AI, the text of error messages, strategy code, strategy names, traded symbols, amounts, positions, balances, keys, or file paths. Events have no free-text field; our server stores only the listed fields and discards everything else.

• How you are identified: the installation identifier is a random code generated the first time the desktop app starts. It is stored on your computer and does not change; it is not derived from your hardware or your account. After you sign in to your Blave account in the desktop app, subsequent events carry your sign-in credential so that we can associate this installation with your account. While you are signed out, events are not associated with any account.
• Current settings after sign-in: after you sign in to your Blave account in the desktop app, each time the app checks your account status with us (for example at launch, at sign-in, on each conversation turn, or when you switch usage events or change AI), it also tells us three current settings: whether usage events are on or off; which AI it is connected to (Blave AI, Claude Code, Codex, your own API key, or none yet); and whether this computer has run a backtest (only yes or no). While usage events are off, it tells us only that they are off, not the other two. While you are signed out, it tells us nothing. These settings are used only to decide whether to send a reminder email and which one (see "Purpose" below). We record an entry for each computer whenever its settings change and keep it for 90 days; decisions use only the latest entry for each signed-in computer.
• Library downloads without signing in: when you are signed out, or the desktop app's sign-in credential is no longer valid, and you download an official strategy from the library that is free and uses no Blave data, the desktop app attaches the installation identifier to the download request. We record which strategy (its library number), which installation, and when it was first downloaded, and use this only to count the strategy's installs; repeated downloads of the same strategy by the same installation are recorded once. This record is not a usage event; it refers to a public strategy in the library and contains none of your own strategies, conversations, or keys. If you later sign in to your Blave account on this computer, the installation is associated with your account (see "How you are identified" above), so this record can be matched to your account as well. While usage events are off, the download request carries no installation identifier and we record nothing; the download works as usual. To prevent bulk downloading, downloads are rate-limited by IP address; the counters expire automatically and are not otherwise kept. For retention, see Section 5.
• IP address: usage event records do not contain your IP address or browser information. As with any network request, however, connections between the desktop app and our servers appear in our server access logs (see Section 1).
• Purpose: usage events are used only for these two things. (1) To measure completion of installation and setup, where people get stuck and the category of the cause, daily presence and retention, feature usage, and version distribution, in order to improve the product, and, when you give us your installation identifier while reporting a problem, to help find its cause. (2) To send usage reminder emails: after you sign in to your Blave account in the desktop app, we use the usage events the app sends while you are signed in and the current settings described above, together with your account's card, credit, sign-in and cloud host status, to decide whether to email your account address a reminder about your progress. There are currently two: you picked Blave AI but have not added a card; or your AI is ready but you have not run a first backtest. Each kind is sent at most once every 90 days, and an installation that has never signed in never receives one. Reminders are sent by our email delivery provider (see Section 3); see "How to turn it off" below for how to stop them.
• Retention: usage events are kept for 25 months from receipt.
• How to turn it off: usage events are on by default. You can turn them off at any time under Settings › Privacy in the desktop app. Once turned off, the desktop app sends no usage events at all, including "First open" and "Open", and including any event queued but not yet sent at that moment. Turning it off does not delete records already sent. Turning it back on resumes sending immediately. If an event cannot be delivered because you are offline or the request times out, the app discards it; it does not retry or queue it for later. If an event that is sent only once or once a day is not delivered, it is sent again the next time the same situation occurs. There are two ways to stop reminder emails. (1) Use the unsubscribe link at the bottom of a reminder. Unsubscribing applies to all email sent through that delivery service, so reminders, newsletters and other marketing email all stop; verification codes and essential notices about failed charges, low balance and your cloud host are sent separately and are not affected. (2) Turn off usage events in the desktop app. If any computer signed in to your account reports that usage events are off, we send no reminders to this account until you turn them back on.
• Requesting deletion: for usage events that are not associated with an account, you can email info@blave.org with your installation identifier and ask us to delete the usage events and library download records for that installation. You can view and copy the installation identifier under Settings › General in the desktop app.
• When you delete your account: we remove the association between usage events and your account. The events themselves are kept, unlinked from any account, until the retention period ends. Desktop sign-in credentials issued to your account are revoked, and events received after deletion are not associated with that account.
• Keys: exchange API keys and bring-your-own data source keys that you set up in the desktop app are written to a workspace file on your own computer (Blave/workspace/.env in your home directory; on macOS, ~/Blave/workspace/.env) and are not sent to Blave's servers for storage. That file sits on your computer, and Blave Agent, your strategy code and the desktop app itself can read it — that is how they trade and fetch data for you. Your own API key for an AI provider (see Section 9.2) is not written to that file. It is encrypted using the encryption facility provided by your operating system and stored on this computer in the desktop app's own folder (on macOS, Keychain holds the encryption key; on Windows, the system's built-in data protection is used), and it is not sent to Blave's servers. The desktop app does not put it into the AI agent's runtime environment; it sends it directly to that provider, and only when verifying the key and when sending your conversations. When you use Blave's AI or your own API key, the results of tools the AI agent runs are sent to the model provider under Section 9.2; if you ask it to read a file that contains keys, that content falls within what is sent on that call. Two exceptions, both started by you: (1) when you send a strategy to the cloud, the data-source keys that strategy uses travel with it to your Blave Agent cloud machine, governed by Section 7 of the Terms of Service — the confirmation dialog lists what moves and what does not, and exchange API keys do not move; (2) when you connect an exchange for your cloud machine from the desktop app, the exchange API key you enter is relayed through Blave's servers to your own cloud machine and written there; the relay queue entry is removed as soon as your machine picks it up, an entry never picked up expires within 15 minutes, and Blave keeps no further copy. Exchange API connections you make on the website remain governed by "Exchange API Data" in Section 1.

9.2 Conversation Data When You Use AI

The desktop app lets you choose who provides the AI:

• Claude Code or Codex on your own computer: the desktop app runs the tool already signed in on your computer and does not use Blave's AI relay. Your conversations do not pass through Blave's servers; they are handled by that tool's provider under your own terms with it. When you turn on "Allow phone chat", conversation content also passes through Blave's servers as described in Section 9.4.
• Blave's AI: the content of your conversations — including the messages you enter, system prompts, the results of tools the AI agent runs, and images or files you attach — is relayed through Blave's servers to the provider of the model you select for processing, and the reply is relayed back to you. The providers are currently Anthropic and DeepSeek, depending on the model you select in the desktop app. Requests are sent under Blave's account with the provider. The request content is produced by the AI agent software and relayed as is; Blave's relay service does not add your Blave account identifier to it.
• Your own API key (DeepSeek is currently supported): you obtain a key from the model provider and paste it into the desktop app, and that provider bills you directly. The content of your conversations — including the messages you enter, system prompts, the results of tools the AI agent runs, and images or files you attach — is sent by the desktop app from your computer directly to that provider. It does not use Blave's AI relay and does not pass through Blave's servers. Requests are sent under your own account with the provider, and the content is handled by that provider under your own terms with it. When you turn on "Allow phone chat", conversation content also passes through Blave's servers as described in Section 9.4. Before the key is saved, the desktop app uses it to send that provider one test request that contains none of your data, to confirm that the key works. For how the key is stored, see "Keys" in Section 9.1.

When you use Blave's AI in the desktop app, Blave's servers do not keep conversation content: it is not written to any database, cache, or log file. Reply content is held in memory only while it is being relayed, in order to read usage figures, and is released when the request ends. This paragraph is about the AI relay service; the conversation sync in Section 9.4 is a separate matter and is handled as that section describes.

For billing, we record for each AI call: your account identifier, the request path, the model name, input and output token counts, the number of web searches, and the time. Your credit transaction history records the amount charged and a description containing only the model name and those counts. None of these records contain conversation text. They are kept for the period required by law.

Content received by a model provider is handled under that provider's terms and policies. How long it is kept and how it is used are determined by the provider's current documents:

• Anthropic: Commercial Terms of Service, Privacy Policy
• DeepSeek: Open Platform Terms of Service, Privacy Policy

Conversation history for the desktop app is stored on your own computer. When you turn on "Allow phone chat" as described in Section 9.4, a separate masked copy is also stored on Blave's servers.

9.3 Viewing Your Desktop Positions in the Mobile App

This feature lets you view the strategies and positions running in the desktop app from the Blave App. The position snapshots described in this section are separate from the usage events in Section 9.1: the items listed in Section 9.1 under "Usage events never include" refer to usage events and do not apply to this section.

• What is sent: while you are signed in to your Blave account in the desktop app and this feature is on, the desktop app sends a snapshot of this computer's positions about every 2 minutes while the app is open, and sooner when its status changes; when you quit the app normally, it sends one more notice saying that the app has closed. A snapshot contains the data shown on the desktop app's automated trading page:
  • strategy names, allocated amounts, and each strategy's signals and target positions;
  • positions and equity in your exchange or broker account, recent deposit and withdrawal records (time, direction, currency, amount and transaction ID), which exchange or broker is connected, and the currency amounts are denominated in;
  • whether automated trading and pause are switched on, recent order records, and order error messages;
  • the time it was sent.
• What is not sent: exchange or broker API keys, bring-your-own data source keys, and strategy code. Position snapshots do not include the content of your conversations with the AI; for phone chat, see Section 9.4. The desktop app sends only the fields listed above, and our server checks them again before storing them; if an order error message contains the name of your user folder, URL parameters, or a long random-looking string, that part is masked before it is stored.
• Computer name: the Blave App also shows this computer's name so you can tell which computer it is. This is the computer name we record from the operating system when you sign in to the desktop app (for example, "Annes-MacBook-Pro"), and it may contain your name. If you do not want it shown, change the computer name in your operating system settings and sign in to the desktop app again.
• Purpose and who can see it: used only so that you can view it in the Blave App while signed in to the same Blave account. We do not use position snapshots to send reminder emails or for statistical analysis, and we do not provide them to third parties.
• Retention: only the latest snapshot is kept for each computer, and each new one replaces the previous one; if no new upload arrives within 7 days, it is deleted automatically. Each account keeps snapshots for at most 5 computers; beyond that, the computer that has gone longest without uploading is deleted.
• How to turn it off: this feature is on by default. You can turn it off at any time under Settings › Privacy in the desktop app. Once it is turned off, the desktop app stops sending immediately and deletes this computer's snapshot from our servers; if you are offline at that moment, the desktop app deletes it the next time it connects, and at the latest it is deleted automatically when the retention period ends. Turning it back on resumes sending immediately.
• Signing out and deleting your account: when you sign out of the desktop app, this computer's snapshot is deleted as well. If you are offline when you sign out, it is deleted automatically when the retention period ends at the latest. When you delete your Blave account, the snapshots of all computers under your account are deleted. The desktop app does not send position snapshots when it is not signed in to a Blave account.

9.4 Chatting with Blave Agent in the Mobile App

• How pairing works: when you tap Pair This Phone in the app, we send an email with a one-time link to the email address on your account. The link works once, within 10 minutes, and must be opened in the app on the phone that started pairing, signed in to the same account.
• Paired devices: when you pair a phone, we record the model name the system provides (for example, "iPhone 15"; we do not record any custom name you gave the phone), the platform, two public keys, the verification method (biometrics or device passcode), how the phone was paired, the send-verification interval, the reply push notification setting, and the times of pairing and most recent use. The private keys stay only on your phone. When pairing completes, we send a notification email to the email address on your account.
• Verification when you send a message: when you send a message in the app, the app asks you to verify with Face ID, your fingerprint, or your device passcode; it does not ask again for a period after you verify. That period is 15 minutes by default, and you can adjust it in the app. Biometric data is handled by your phone's operating system, and Blave does not receive it.
• Sending messages: messages you send in the app pass through Blave's servers to reach your computer or cloud machine. For messages to a computer, the original text is held temporarily on our servers and cleared once the computer receives it, for about 1 hour at most.
• Activity records: when you send, stop, or withdraw a message, delete a conversation, or take similar actions in the app, we record the time, device, IP address, target machine (the cloud machine or which computer), request ID, and type of action. We do not record message content. These records are kept for 90 days, and you can view them on the website's Paired Phones page.
• Desktop conversations: when you turn on "Allow phone chat" in the desktop app, it uploads this computer's conversations from the last 30 days (up to 200 conversations, the latest 500 messages of each) to Blave's servers, and each new round of conversation is uploaded after that, so you can view and continue them in the app. Before uploading, the desktop app masks the keys, passwords, private keys, seed phrases, user folder names, and URL parameters it recognizes; a message that contains a private key or many keys is not uploaded at all. Our servers check again before storing it. Masking is best-effort and cannot be guaranteed to recognize all sensitive content, so please do not paste keys into a conversation. Attachment files, strategy code, and workspace files are not uploaded. Images in older conversations are not uploaded. Images in replies to a turn sent from your phone are uploaded, and are kept for the same period as that conversation.
• Who can see it: the masked desktop copy is only for you to view and continue these conversations. You must be signed in to the same Blave account in a paired Blave App. We do not use these copies to send reminder emails or for statistical analysis. Push notification content is sent through Apple and Google (see Section 3); when you use a model, conversations are handled as described in Section 9.2; other than that, we do not provide them to third parties.
• Retention and deletion: each conversation in the masked desktop copy is kept for 30 days from its last activity. When you delete a conversation in the app or the desktop app, it is deleted on both sides (if the computer is offline at the time, it is deleted the next time it connects; if the computer stays offline for more than 30 days, the copy on our servers is deleted automatically when the retention period ends at the latest, and the conversation on the computer is not deleted). When you turn this feature off, sign out of the desktop app, or delete your account, we immediately delete this computer's conversations from our servers. If you are offline when you turn it off, the desktop app requests the deletion again the next time it connects, and the conversations are deleted automatically when the retention period ends at the latest; if you are offline when you sign out, they are deleted automatically when the retention period ends at the latest. Conversation history on your computer is not affected.
• Push notifications: "reply ready" push notifications contain the conversation title and the first 60 characters of the reply, are delivered through Apple's and Google's push services (see Section 3), and appear on your lock screen. You can turn them off in the app under Me › Notifications, or hide notification previews in your phone's system settings. When a new phone is paired, we also send a push notification with its model name to the other phones paired to your account, delivered the same way through Apple's and Google's push services.
• How to revoke: you can revoke one or all phones on the website's Paired Phones page, or log out and unpair this phone in the app. After a phone is revoked, messages it sent that have not run yet are withdrawn, and any that are running are stopped.
• How to turn it off: this feature is off by default. You can turn it on or off at any time under Settings › Connections in the desktop app. To turn it on, you confirm on the computer; no verification code is required. While it is on, every phone currently paired to your account can connect to this computer.
• Cloud machine: when you chat with your cloud machine in the app, the masking and retention rules in this section do not apply. See Section 10.

10. Cloud Machine and Website Conversations

This section applies to your conversations with your Blave Agent cloud machine on the website's workspace, in the app, and through Telegram.

• Where they are stored: conversations are stored on Blave's servers and on your cloud machine. Records on our servers do not go through the masking in Section 9.4.
• Records on our servers: kept for 30 days after the last write, and the period restarts with each new message. Each account can have up to 50 conversations; beyond that, the one idle the longest is deleted. Conversation titles are cleared the next time the conversation list is read after the records expire, and with the machine at the latest.
• Images: images in conversations are stored separately in cloud storage and kept for 90 days from upload.
• Records on the machine: messages are kept for up to 1 year, conversation summaries until the machine is deleted, and uploaded attachments for 7 days.
• Deleting a conversation: you can delete it on the website or in the app. A conversation that is still replying can be deleted once the reply finishes. Records and images on our servers are deleted with it. Records on the machine are not deleted and stay for the period above.
• Deleting the machine: data on the machine is deleted with it. Conversations and images on our servers are deleted as well.
• When a plan ends: the machine stops, and is deleted when the grace period ends.
• Deleting your account: we delete your cloud machine. If the machine is changing state at the time, it is deleted after the plan expires and the grace period ends. Conversations on our servers are deleted automatically within 30 days at the latest.
• Models: the machine sends conversation content through Blave's proxy to model providers, currently Anthropic and DeepSeek. DeepSeek is the default; messages with images use Anthropic's Claude instead. Requests use Blave's provider accounts. The proxy does not keep conversation content. For how providers handle it, see the links in Section 9.2. This item does not apply if you switch to another AI on the machine yourself.
• Event records: we record the suggestions the Agent offers, the one you tap, and strategy names. We use these records to improve the product and keep them for 90 days. They are not deleted when you delete a conversation, the machine, or your account; they are cleared when that period ends.
• Telegram: when you chat with your cloud machine through Telegram, messages are sent through Telegram. These conversations are written to the same records on the machine and follow the same retention. Telegram's handling of the data is governed by its own privacy policy.
• Operations access: operations staff access the machine under Section 7 of the Terms of Service. Unless you explicitly request technical support, we do not read your conversation records.

11. Policy Updates

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: info@blave.org