Privacy

The data controller is the BLASH publisher, reachable at [email protected].

Account: email address and technical identifiers needed to sign in (including via Apple or Google, where applicable).

Usage: scan history, Blashlist, Crushlist, notes, tags, shopping lists and product contributions — stored on your device and, if signed in, synced with your account.

Camera: only to read barcodes and photograph products you choose to add. No video of your surroundings is recorded.

Age: the app is for people aged 15 or over.

No third-party advertising, no sale of your personal data.

Your data is used only to:

• Create and secure your account.

• Provide scanning, personal lists and cross-device sync if you use it.

• Keep the service stable (limited technical error logs).

Processing is based on performance of the contract (providing the service). Data is kept while the account is active. Deleting the account erases associated data (on device and on the account side).

You have rights of access, rectification, objection and erasure, among others.

Erasure: delete the account from the app Settings.

Other requests: [email protected].

Complaint: CNIL (cnil.fr) in France.

The account and optional sync are hosted in the European Union via our technical provider. The marketing site is served by Cloudflare Pages.

For users in Morocco, processing follows Law No. 09-08 (CNDP — cndp.ma). Transfers to the EU may occur for the account and sync, limited to providing the service.

The marketing site does not create accounts. Contact page messages are delivered to [email protected] via a form delivery service (FormSubmit) so we can reply; they do not create an account and are not used for advertising. No third-party ads on this site.