Privacy Policy

Last updated: October 30, 2026

Bloopsie is made by Cache Lab LLC (“Cache Lab”, “we”, “us”, “our”). This policy explains what we collect when you use the Bloopsie app and getbloopsie.com, what we do with it, and what we never do.

Short version: we collect as little as we can. You sign in with your phone number, and everything else in Bloopsie is picked from our lists, so we don’t know your real name, your email or where you are. We don’t sell your data, show ads or track you.

1. Who we are

Bloopsie is a product of Cache Lab LLC, based in the United States. You can reach us anytime at hello@cachelab.co or at cachelab.co.

2. What we collect

• Your phone number. You sign in with your phone number and a code we text you. Firebase Authentication, a Google service, sends the code, checks it and keeps your number as your sign-in. Our own servers don’t store your phone number, nobody else in Bloopsie ever sees it, and we never use it to text you anything else or to find your contacts.
• Your profile. A first name you pick from our list (it doesn’t have to be your real one), a last initial you tap, an optional title made from our word lists, your blob avatar and your vibe answers. Every part of it is picked, never typed.
• What you do in Bloopsie. Your bloops (the starter, action and spice you picked, and when you posted), with your phone’s time zone, so “today” means your today. The hearts you give, the pokes and notes you send and get, your friends and the badges you earn. Also your secret bestie picks, mutes and blocks, which stay private (see section 4).
• Notifications. If you turn them on, a push token from Apple, so we can tell your phone when a friend sends you something. We keep it until you turn notifications off, sign out or delete your account.
• Server logs. When the app talks to our servers, we log the request, your account’s ID, your IP address and the app version, to keep Bloopsie running and secure. Logs are deleted after about a week.

3. What we don’t collect

• Your real name, email address, birthday or photos.
• Your contacts. Friends are only added in person, by scanning a QR code.
• Your location.
• Anything you type. Apart from your phone number and its code at sign-in, there’s nothing to type.
• What your camera sees. The camera only scans a friend’s QR code, and the picture never leaves your phone.
• Advertising IDs. The app has no ads and no analytics or tracking tools, and it never asks to track you. The website has no cookies and no analytics.

4. Who sees what

• Your friends see your name, avatar, title, vibe and badges, your bloops, and the hearts you give. Someone becomes your friend when one of you scans the other’s QR code in person.
• Your friends’ other friends can see your name and avatar next to a heart you gave on your friend’s bloop. Nothing else.
• Everyone else can’t find you or see your bloops. There’s no search and no public profile.
• Pokes and notes are only seen by you and the friend on the other end.
• Secret besties. Nobody is told who picked them unless it’s mutual. You only see how many people picked you.
• Mutes and blocks are never shown to the other person.
• Cache Lab. The people at Cache Lab who run Bloopsie can see account data when they need to run it, fix a problem or keep people safe.

5. How we use it

• To run Bloopsie: show your bloops to your friends, deliver pokes and notes, and send notifications.
• To keep it fair and safe: daily send limits, blocks and stopping abuse.
• To fix bugs and keep the app fast.
• To answer you when you email us.

We never sell your data, share it with advertisers or data brokers, or use it for ads.

6. Companies that help us

A few companies help run Bloopsie, and each one only gets what its job needs:

• Google Firebase handles sign-in: it texts your code, checks it and keeps your phone number as your sign-in. To stop abuse, it may check that the request comes from a real iPhone, or show a quick reCAPTCHA check. Firebase’s privacy information explains more.
• Amazon Web Services hosts our servers and database in the United States.
• Apple delivers notifications to your phone, if you turn them on.
• Beeper Box, Cache Lab’s own monitoring service, keeps our server logs for about a week.

7. How long we keep it

• Your account data stays until you delete your account.
• Server logs are deleted after about a week.
• When you delete your account in the app, we delete your profile, bloops, hearts, pokes, notes, friends, badges, picks, mutes and blocks, and your sign-in with Firebase. Copies in our backups are gone within 14 days.

8. How we keep it safe

• Everything between the app and our servers is encrypted with TLS.
• Our database is encrypted at rest.
• Only the people at Cache Lab who run Bloopsie can reach its data.

9. Your choices and rights

• Change your name, initial, title, avatar and vibe anytime in the app.
• Turn notifications off anytime in your iPhone’s Settings.
• Delete your account anytime in the app.
• Email hello@cachelab.co to get a copy of your data, fix it or have us delete it. We may need to check that the account is yours first.

If you live in California or another state with its own privacy law, you have these rights under it too, and we won’t treat you differently for using them. We don’t sell or share personal information, as those laws define it.

10. Kids

Bloopsie isn’t for children under 13, and we don’t knowingly collect data from them. If you think a child under 13 is using Bloopsie, email us and we’ll delete the account.

11. Where your data lives

Bloopsie is run from the United States, and your data is stored there.

12. Changes to this policy

If we make big changes, we’ll tell you in the app and update the date at the top. Using Bloopsie after a change means you accept the new policy.

13. Contact

Questions, requests or worries? Email hello@cachelab.co and a real person will get back to you.