Legal

Privacy policy

Last updated 3 November 2026

Blobby is a desktop design app made by Ravindra Bisht, based in India (“we”, “us”). This policy explains what personal data Blobby and this website collect, why, who else handles it, and your choices. Questions or requests: hello@useblobby.com.

The short version

• Your designs, projects, comments and prompts stay on your computer. We never receive them.
• Your Blobby account holds your email, name, plan and a few counters. That’s all we need to run your account.
• Payments go through Polar. We never see your card details.
• No ads, no analytics or tracking in the app or on this website, and we never sell your data.
• You can delete your account at any time from inside the app.

What we collect, and why

Your account

To sign you in and give you the right plan:

• Your email address and name.
• Your password, stored only as a secure hash by our sign-in provider. If you sign in with GitHub instead, your GitHub username and account id (we don’t get access to your repositories).
• Sign-in records: when you signed in, and the IP address and device type, kept to protect your account.
• Your plan, subscription status and renewal date, and a hash of any license key you activate (never the key).
• How many times this month you used metered features on the Free plan (site and social analyses, image and logo searches), to apply the monthly limits. Only the counts, not what you searched for.

We use this data to provide the service you signed up for (performing our contract with you), to keep accounts secure, and to send emails about your account, such as sign-in codes, receipts and important changes. We don’t send marketing emails unless you agree to them.

Purchases

Polar, our merchant of record, sells Pro on our behalf. It collects your payment details, billing address and tax information under its own privacy policy, and tells us your email, its customer and subscription ids, and your subscription status, so Pro unlocks on your account. We keep these records as tax and accounting law requires.

Updates

The app checks for updates a few times a day by downloading a small file from our download server. That request shows our host your IP address, Blobby’s version and your operating system, as any download would. It carries no account information.

This website

This website sets no cookies and runs no analytics. Our host keeps standard server logs (IP address, page, time and browser) for security and to keep the site running.

What stays on your computer

Projects, pages, images, comments, exports and settings are files in a folder on your computer. Blobby’s connection for AI apps only accepts requests from your own computer. When you ask an AI app (such as Claude, ChatGPT, Codex or Cursor) to work in Blobby, that app reads your designs and handles them under its own terms and privacy policy, not ours. Blobby doesn’t include an AI model and sends nothing to one.

When the app contacts other sites for you

Some features fetch content directly from your computer, without passing through us:

• Site and social analysis opens the pages you ask about.
• Image search asks Wikimedia Commons and Openverse (and Pexels, if you add your own Pexels key) for photos matching your search; logo search downloads logos from jsDelivr.
• Designs that use web fonts or outside images load them from those sites (for example Google Fonts).
• Signing in with GitHub, checkout and the subscription page open in your web browser.

Those sites see your IP address and the request, under their own policies.

Who processes data for us

• Supabase: our account database and sign-in, including sign-in emails.
• Polar: checkout, subscriptions, license keys, receipts and taxes (with Stripe for card payments).
• Cloudflare: this website, downloads and updates.
• GitHub: only if you choose to sign in with GitHub.

They process data only to provide their service to us. Some of them store data outside your country, including in the United States; where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses.

How long we keep it

• Account data: while your account exists.
• When you delete your account, we delete your account data and cancel any subscription right away. Copies in backups are overwritten within 30 days.
• Purchase records: for as long as tax and accounting law requires (usually up to 8 years).

Your rights and choices

Wherever you live, you can ask us to:

• show you the personal data we hold about you, or send you a copy;
• correct it;
• delete it. You can do this yourself in Blobby: Settings, then Account, then Delete account;
• stop or limit how we use it, or withdraw a consent you gave.

Write to hello@useblobby.com; we answer within 30 days. This is also our contact for grievances under India’s Digital Personal Data Protection Act. If you’re in the EU, the UK or another place with a data protection authority, you can also complain to it.

Security

Connections to our services are encrypted. Each account can only read its own data, the app keeps your session in your operating system’s secure storage, and passwords and keys never appear in logs.

Children

Blobby is for people aged 18 and over. We don’t knowingly collect data from children.

Changes

If we change this policy, we’ll update the date above. If a change matters for you, we’ll tell you in the app or by email before it applies.