Privacy Policy

We collect information you provide directly to us when you create an account, interact with the Blipko Telegram bot, or use the web dashboard. This includes:

• Personal Identification: Name and email address (from Google sign-in).
• Telegram Identity: Your Telegram user ID and username, collected when you link your Telegram account.
• Transaction Data: The amounts, categories, notes and dates of the expenses and income you log, plus the original text of the message you sent, which we keep alongside the entry so you can see how it was interpreted.
• Voice Notes: Audio files you send to the bot for voice-to-text transcription. The audio is written to temporary storage during transcription and deleted immediately afterwards; the resulting text is kept.
• Chat History: Your recent messages to the bot and its replies, used to give the AI context on follow-up questions.
• Parse Logs: For every message the AI interprets, we store the original text, the structured result, and a confidence score. This is what lets us find and fix cases where the bot misread you.
• Budget Settings: Your monthly income, payday, currency, timezone, bucket split and per-category budgets.
• Usage Data: Page-view analytics for the web dashboard, collected via Vercel Analytics. Hosting and application logs are handled by Railway.

We use the collected data to provide, maintain, and improve our services. Specific use cases include:

To understand a message like “chai 30”, Blipko sends it to an AI service. This is unavoidable — it is how the product works. These are the services that receive your data, and what each one gets:

• OpenAI — The primary parser. Receives the text of your message, your category names, and your recent chat history for context. If you ask the bot a question about your spending, it also receives the results of read-only queries against your own financial data.
• Google Gemini — The fallback parser, used only when OpenAI is unavailable or times out. Receives the same information.
• Sarvam AI — Voice-to-text transcription for Indian languages. Receives the audio of any voice note you send.
• Telegram — Every message you send and every reply the bot sends, including amounts and balances, travels over Telegram.
• Google — Handles sign-in, and provides your name, email and profile picture.
• Resend — Receives your name and email address to send the welcome email when you first sign in.
• Railway — Hosts the application and the database, and processes server logs.
• Vercel Analytics — Anonymous page-view analytics on the web dashboard.

Your data is sent to these processors solely to operate Blipko. We do not sell your data to anyone. Each processor handles what it receives under its own privacy policy and terms, including whether they retain it — we would encourage you to read OpenAI’s and Google’s if that matters to you.

Several of these providers operate outside India, so using Blipko involves transferring your data internationally.

Your data is stored in a managed Postgres database, reachable only by the application. Traffic is served over HTTPS, every record is scoped to your account, and the Telegram webhook is verified with a shared secret so nobody else can post messages as you.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Blipko is an early-access project run by one person; please weigh that when deciding what to record in it.

How long we keep things. We want to be precise here, because “we delete your messages” is easy to say and usually only half true:

• Chat history used for AI context is deleted automatically after 7 days.
• Voice audio is deleted immediately after transcription.
• The original text of a logged transaction is kept for as long as that transaction exists, because it is stored with the entry. Deleting an entry in the app hides it from your views; it is retained in the database until your account is deleted.
• Parse logs — original text plus how the AI interpreted it — are retained while your account is active.
• Everything is deleted when you ask us to delete your account.

The Blipko web dashboard uses session cookies for authentication (via NextAuth) and Vercel Analytics for anonymous page-view tracking. We do not use third-party advertising cookies.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, refusing session cookies will prevent you from logging in to the dashboard.

Blipko is operated from India and built to follow the Digital Personal Data Protection Act, 2023 (DPDP Act).

• Data Fiduciary: Blipko (Sadik KP), Kerala, India.
• Grievance Officer: Sadik KP — sadik.build@gmail.com
• Grievance Redressal: Blipko is run by one person. We aim to acknowledge grievances within a few working days and resolve them within 30 days.
• Purpose Limitation: We collect data only for the purposes stated in this policy, and do not use it for anything else without your consent.
• Age: Blipko is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, tell us and we will delete it.
• Breaches: If your personal data is exposed in a security incident, we will notify you and the Data Protection Board without undue delay once we understand what happened.
• Changes: If this policy changes materially, we will update the date above and note it in the changelog.

Under applicable law including the India DPDP Act 2023, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to erasure — request deletion of your account and all associated data.
• The right to data portability — receive your transaction data in a structured format.
• The right to withdraw consent at any time, by unlinking Telegram or asking us to delete your account.
• The right to grievance redressal.
• The right to object to processing for specific purposes.

How to exercise them. Some of this you can do yourself today: edit or delete any transaction from the dashboard or the bot, change your income and budget settings under Account, unlink Telegram at any time, and export your expenses, income or a box ledger as CSV.

For anything else — a full copy of everything we hold, or deleting your account entirely — email sadik.build@gmail.com and we will action it within 30 days. We would rather tell you plainly that these two are handled by hand right now than imply there is a button for them. Self-serve export and deletion are on the roadmap.