Privacy policy

Version 1 · in effect from 22 September 2026

Short version: we don't collect personal data. Blip has no accounts, asks for nothing about you, and is built so there is nothing about you to hand over — that is a property of how it works, not a promise to be careful.

What Blip never collects

• No name, email address, phone number, password or account.
• No contacts, photos, calendar or advertising identifier.
• No analytics or tracking SDKs of any kind.
• No location in the background. Blip can only see where you are while it is open, and the app ships with no background location permission at all. Anyone can check that in the App Store listing.

What a report contains

When you report a place, Blip stores:

• the area the report is in, about 100 m across — never the exact spot you pressed;
• the tags you chose;
• your note, if you wrote one;
• the time.

Your own position is used once, rounded to about 500 m, to check the place you are reporting is within 2 km of you. It is not stored.

What other people see

Only totals for an area: how often it has been reported, and which tags people chose. Notes are never shown to anyone else — not in the app, not to us in a form that is attached to you, and never as text another person can read. That is deliberate: it is what keeps Blip out of the business of moderating what people write about each other.

Nothing on the map identifies who reported anything.

How spam is stopped without an account

Your iPhone proves it is a real device using Apple's App Attest, which gives us a random key for that installation. We store a scrambled version of that key so we can slow down a device that is abusing Blip. It is not linked to your Apple Account, and it tells us nothing about you.

Official warnings

In Germany, Blip also shows official warnings from NINA, the federal warning system run by the BBK. Blip downloads every active warning in the country at once and your iPhone works out on its own whether any of them covers where you are. Your phone never contacts the warning service, so no authority learns that you use Blip or where you are, and neither do we.

Which warnings you choose to show is kept on your iPhone and never sent to us.

When things are deleted

• Reports are deleted after 30 days.
• An area keeps a score that fades over time once people stop reporting it, so an old problem disappears on its own. That score is a number attached to a piece of ground, not to a person.
• Your own list of reports lives on your iPhone. Deleting the app deletes it.

Feedback

If you send feedback, we receive what you typed and — only if you leave that switch on — your iPhone model, iOS version and app version. No device identifier is stored with it, which is why we genuinely cannot reply to you.

Where data is held

Blip's server runs in Germany and its database in Ireland, both inside the EU. No data is sold, shared or used for advertising, because there is none to sell.

Your rights

GDPR gives you rights over personal data held about you. We hold none that can be connected to you, so there is nothing to export, correct or delete on request — and no way for us to find "your" data even if you asked, because nothing links it to you. Deleting the app removes what is on your phone; reports already sent expire on their own within 30 days.

Children

Blip is not directed at children and collects nothing that would identify anyone, of any age.

Changes

Material changes to this policy are published here at least 30 days before they take effect, and the app shows you what changed. Every earlier version stays available.

Contact

hello@blip.city