BLML Privacy Policy

Last updated: 11 August 2026

BLML is a private chat app for a family or small group. It is self-hosted: your messages live on a server run by the person who invited you, not on a service owned by a large company. This policy describes what that means for your data.

Who is responsible for your data

Each BLML server is run independently. The person or family operating the server you use is responsible for the data on it. For the server at chat.blml.app, that is Hung Ngo, reachable at hungnv26@gmail.com.

What is stored on the server

• Your account — the username you chose, your display name, your profile picture, and a cryptographically hashed version of your password. The password itself is never stored.
• Your messages and media — text, photos, videos, documents and voice notes you send, kept so they can be delivered and so you can scroll back through a conversation.
• Optional contact details — a phone number or email address, only if you add one. These are used so people who already have your number can find you, and to recover your account.
• Basic technical logs — connection times and IP addresses, kept briefly so the operator can keep the server running and diagnose problems.

Your address book

If you allow the app to access your contacts, it checks which of them already use your BLML server so it can show them in your contact list. This check happens against your own server. Your address book is not uploaded anywhere else, and it is not used for advertising or recommendations.

Third-party services

Two categories of data leave your group's server. We would rather list them plainly than claim they do not exist.

• Google Firebase — the iOS and Android apps use Firebase for crash reporting and push notifications. If the app crashes, a technical report describing the crash is sent to Google. Push notifications, where enabled, are delivered through Google and Apple’s notification services, which necessarily see that a message is waiting for your device.
  
  Usage analytics are switched off. The analytics component ships as part of Firebase, but BLML disables it explicitly on both platforms, so no usage or advertising identifiers are collected.
• Content delivery networks (web version only) — the browser version loads some shared code and fonts from cdn.jsdelivr.net, fonts.googleapis.com and polyfill-fastly.io. Those providers see your IP address when the page loads. The mobile apps do not do this.

The content of your messages is never sent to any of these services.

What we do not do

• No advertising, and no advertising identifiers.
• No selling or renting of your data to anyone.
• No profiling of you to decide what you see. Conversations appear in the order they happened.
• No data brokers, and no cross-app tracking.

Who can see your messages

Messages are protected in transit with TLS. On the server they are stored so they can be delivered and re-read, which means the operator of your server has the technical ability to read them, in the same way that anyone running a mail server could. BLML does not currently offer end-to-end encryption. Choose a server run by someone you trust.

Keeping and deleting your data

• Messages stay until you or the server operator delete them.
• You can delete your entire account from inside the app, under Settings → Account and Security → Delete account. This removes your account and your messages from the server.
• Backups of the server may hold a copy for up to 14 days before rotating out.

Children

BLML is invite-only and intended for private groups such as families. Children may be members of a family group. No data is collected from anyone for advertising, and no profiles are built.

Changes to this policy

If this policy changes in a way that affects you, the date at the top will be updated. Material changes will be mentioned in the app.

Contact

Questions about your data, or a request to delete it: hungnv26@gmail.com.