Privacy Policy
Last updated: 2026-06-10
Applies to: the Blyck desktop app (blyck.dev) · Contact: support@blyck.dev
1. Summary — Principles
Blyck is a local-first desktop app. Your code, terminal contents, database data, and passwords are never sent to Blyck servers. We do no behavioral analytics. The app talks to the outside world in exactly four cases, listed below.
2. What we collect and why
| Item | Data | When | Retention |
|---|---|---|---|
| ① Update check | App version requested from update.blyck.dev (a standard HTTP request — your IP address may appear in server logs) | Automatic (at startup + every 4 hours) | Not stored separately |
| ② License validation | License key + a device identifier (derived from hostname, username, OS) sent to Lemon Squeezy | When you enter a key + periodic revalidation | Per Lemon Squeezy's policy |
| ③ Send diagnostics | Recent error log (secrets auto-masked) + app version and OS type | Only when you press the "Send diagnostics" button (opt-in) | Auto-deleted after 90 days |
| ④ AI features | The AI CLI you installed and signed into yourself (Claude → Anthropic, Codex → OpenAI) sends the prompts you type and any code or files you include to that provider under your own account, subject to that provider's data policy. Never routed through Blyck servers | When you use AI chat | Per that AI provider's policy |
3. How diagnostics are handled (details of ③)
- What: the recent portion of the app's error log. Passwords, tokens, API keys, connection strings, and usernames in home paths are automatically masked (
***) — once at write time and once again right before upload. - How: a consent dialog shows you the exact content that will be sent; nothing is transmitted unless you press [Send]. There is no automatic upload.
- Where: a private AWS S3 bucket operated by us (Seoul region). A ticket number is issued on receipt.
- Who: accessible to the operator (developer) only. Never shared or sold.
- How long: auto-deleted after 90 days by a storage lifecycle policy.
- Deletion: email support@blyck.dev with your ticket number and we will delete it immediately, even within the retention period.
4. What we do NOT collect
- Code or documents you edit, terminal I/O, database query results, or SSH/SFTP/DB/VNC/WinRM connection details
- Usage analytics (clicks, screens, feature statistics) or advertising identifiers
- Saved connection passwords — encrypted with OS facilities (Windows DPAPI / macOS Keychain / Linux keyring) and stored only on your PC; they never leave it.
5. Third-party processors
| Processor | Role | Data shared |
|---|---|---|
| Amazon Web Services (AWS) | Update delivery (CloudFront), diagnostics storage (S3) | Items ① and ③ |
| Lemon Squeezy (a Stripe company) | Payments and licensing (Merchant of Record) | Item ②, plus payment details at purchase (card data never reaches us) |
6. Your rights
You may request access to or deletion of your diagnostic uploads (ticket number required). License and billing data can be managed directly in the Lemon Squeezy customer portal. Contact: support@blyck.dev
7. Changes
Changes to this policy will be announced on this page and in app release notes.