How Blū keeps what you give it

1. Who is responsible

Selin Erguncu runs this pilot and is responsible for your data. Questions, requests and complaints go to selinerguncu@gmail.com. Blū is not a medical service and nothing in it is a diagnosis or treatment; it is a structured way of noticing.

2. What Blū records

Your account

You sign in with Google. Blū receives from Google your email address, your name and your profile picture address, and nothing else — no access to your mail, calendar, contacts or files. You may set a display name inside Blū. Blū keeps no password.

What you enter, day by day

• Morning: how long you slept; how you woke, on a seven-point rail; what you mean to do, from a list, and how tightly you hold it; the breath you took; the intentions you carry, from sixteen words, and any words of your own.
• Through the day: feelings — a family, a finer word if one fits, how much of the day it took, and anything you write about it; things done — the kind, the name, the minutes, and anything you write.
• Evening: your marks, from 0 to 4, on six statements for each of seven centers, and anything you write under a statement.
• Closing: which self led, what was yours to do and what was not, and anything you write.
• Deeper: a journal, the centers you tag it with, your marks on the terms of karma yoga, kriya yoga and avidyā, and anything you write under them.

Around your entries

The date and time each entry was made, how long an entry took and the order its parts were answered in, the time zone of the device you made it on, the time zone and start date of your ten-week journey, which six statements each center showed you on a given evening, and the version of the questionnaire in use. Two small cookies: one that keeps you signed in, one that carries your device's time zone so the day begins when your day begins.

What Blū does not record

No location. No contacts. No analytics or advertising trackers of any kind — the pages load no third-party scripts. No recording from the microphone: when you use the microphone to write, your phone's own speech recognition turns your voice into text on the device and Blū receives only the text.

3. Where it is kept

Your data is stored in a database operated by Supabase, Inc., and the application is served by Vercel, Inc. Both are engaged only to host; neither is permitted to use your data for any purpose of their own. Sign-in is handled by Google LLC under Google's own terms. All connections are encrypted in transit.

4. How it is protected

Your rows are yours. Every table that holds a person's entries is guarded by row-level security enforced by the database itself: a signed-in account can read and write only rows that carry its own identifier. This is not a setting in the app but a rule in the database, and it is tested automatically every time the application changes — a second account attempting to read, update or delete another's rows is refused on every table.

Your words are sealed. Everything you write — notes under statements, the journal, the karma lines, your own words for intentions and activities, the name of a thing you did — is encrypted before it is stored, with a key that lives only in the application's hosting environment and never in the database or in your browser. A database view, an export or a backup shows only ciphertext. Your marks — the numbers on a rail, which activity, which family of feeling, how many minutes — are stored as they are, because those are what the method reads.

What the study lead can and cannot see. Selin Erguncu operates the database and can therefore see the marks, the timestamps and the account identifiers of everyone in the pilot, and can decrypt written text because the key is held by the application she runs. She undertakes not to read anyone's written text during this pilot; the pilot's analysis is performed on the marks alone. If a future analysis would need written text, you will be asked for that separately and specifically, and you can decline without leaving the pilot.

5. What it is used for

• To run the practice: to show you your own days, weeks and patterns.
• To evaluate the pilot: whether the method is usable and whether the marks gather into anything worth naming. This evaluation uses marks, timings and counts, not written text, and reports nothing that identifies a person.

Blū does not sell data, does not use it for advertising, does not share it with anyone outside the three operators named above, and does not send your written text to any artificial-intelligence service. No decision about you is made automatically.

6. How long it is kept

For the length of the pilot and until you ask for it to go. When you ask, your account and every row that carries its identifier are deleted from the database; the operators' routine backups expire on their own within thirty days after that.

7. What you can ask for

• A copy of everything Blū holds about you, in a readable form.
• A correction of anything that is wrong.
• Deletion of everything, or of a single day.
• To stop taking part, at any time, without giving a reason.

In this pilot these are done by hand: write to selinerguncu@gmail.com from the address you signed in with, and it is done within seven days. The Export and Delete rows inside the app say "not set up in this build" for now; that is true, and this is the way instead.

8. Who may take part

Blū is for adults. By taking part you confirm you are eighteen or older. Taking part is voluntary; the pilot asks for roughly ten minutes a day across a morning, an evening and a closing, and nothing is owed if you miss a day or stop.

9. Changes to this notice

This is version 1.0. If what is recorded, who can see it, or what it is used for changes, the version changes and you are asked to agree again before continuing; the date you agreed to each version is kept with your account.