Privacy policy
Last updated 24 October 2026
The short version
- Your photos stay on your device. Bluehour edits them in your browser.
- When you ask the AI for an edit, a small preview goes to the AI to do the work. We don't keep it.
- Our server keeps your account, your AI edits balance and your style notes. Never your photos.
- We don't sell your data, and we don't use your photos to train AI.
- You can download or delete everything we keep, at any time, from the app.
Who we are
Bluehour (itsbluehour.com) is run by [Your legal name], a sole proprietor in [Province], Canada ("we", "us"). We're responsible for the personal information described here. Questions or requests: support@itsbluehour.com.
What stays on your device
Opening, decoding and editing photos happens in your browser. Your photos, your library, imported Lightroom catalogs, your edit history, the chat with the AI and the AI's notes about each photo are stored in your browser on your device. They don't reach our server, and they're gone if you clear your browser's data for Bluehour.
What leaves your device, and why
When you ask the AI for an edit
To make the edit, we send a small preview of the photo (about 768 pixels on the long side), your message, the photo's current settings and the AI's notes about it. It goes to our server and on to Anthropic, whose Claude models do the editing. We don't store the preview or the conversation. Anthropic processes them on our behalf, doesn't train its models on them and deletes them after a limited period under its commercial terms ([up to 30 days: confirm]). It may keep content longer if it's flagged for breaking its usage policy.
When you choose "Enlarge 2× with AI"
Only if you turn it on when you export: we send the edited photo (never your original file) through fal.ai to Topaz Labs to be enlarged. It's deleted as soon as you have it back, and within the hour at the latest. We ask before the first time.
What our server keeps
| What | Why | How long |
|---|---|---|
| Your email address, and your Google account ID if you sign in with Google | To sign you in and keep your AI edits on every device | Until you delete your account |
| Your plan, AI edits balance and its history: amounts, dates, and a code computed from each photo that can't be turned back into it | To run your balance and limits (one photo costs at most 2 AI edits a day) | Until you delete your account |
| AI usage numbers: which model ran, word (token) counts, time taken and cost. Never content | Spending limits and keeping prices fair | 13 months |
| Your style: the lines you add and those learned from your edits (text and numbers, never photos) | So the AI edits your way on every device | Until you delete it or your account |
| One-time sign-in links (stored scrambled) | Email sign-in | One day |
| Your network address, briefly | To limit abuse, such as creating many free accounts | Kept in memory, a day at most; our host's server logs for a short time |
Payments
Payments are handled by Paddle.com, our reseller and the merchant of record. Paddle collects your payment and billing details under its own privacy policy. We never see your card number. Paddle tells us what you bought, so we can add your plan or AI edits.
Usage analytics and error reports
We use PostHog to count how Bluehour is used (for example, how many people try the AI or open the plans page) and to receive error reports so we can fix bugs. We send what happened and when, never your photos, your messages or your file names. Before you sign in, this works without cookies.
Who else handles your information
Besides Anthropic, fal.ai and Topaz Labs (above), these service providers process information for us, only to run Bluehour:
- Render: hosts our server and database, in the United States.
- Resend: sends sign-in emails.
- Google: "Continue with Google" sign-in, if you use it.
- Paddle: payments, receipts, tax.
- PostHog: usage analytics and error reports.
Some of them are in the United States or other countries, so your information may be processed outside Canada, where it's protected by our contracts with them but may be accessible to authorities there. We don't sell or rent personal information, and we don't share it for advertising.
Your choices and rights
- Download your data: in the app, from your account menu.
- Delete your account: in the app, from your account menu. It removes everything our server keeps about you right away. Paddle keeps its own payment records as the law requires.
- Access, correction and other requests: email us and we'll answer within 30 days.
- Complaints: you can contact the Office of the Privacy Commissioner of Canada, or your local data protection authority if you live in the EU, UK or elsewhere.
If you're in the EU or UK, we rely on our contract with you to provide Bluehour (your account, the AI edits you ask for) and on our legitimate interest in keeping it secure and improving it (limits, analytics, error reports). You can object to analytics by emailing us.
Security
Connections are encrypted (HTTPS). Sign-in tokens and links are stored scrambled (hashed). Access to our systems is limited to us.
Children
Bluehour isn't meant for children under 16, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top, and for important changes we'll tell you in the app or by email before they take effect.