Bluepin Logo
Bluepin

Bluepin Privacy Policy

Effective Date: 14 September 2026
Version: 2.0

Bluepin ("Bluepin", "we", "us", or "our") respects your privacy and is committed to handling your personal and health information responsibly.

This Privacy Policy explains how Bluepin collects, uses, stores, processes, shares, protects, retains, and deletes information when you use our services.

This Policy applies to Bluepin's website, application, and related services, including:

  • bluepin.in
  • app.bluepin.in
  • glucose tracking and management features
  • health-report upload and analysis
  • biomarker extraction and organization
  • report comparison
  • Health Highlights
  • Health Score
  • Health Canvas
  • weight and BMI features
  • Bluepin Intelligence and AI-powered insights

Bluepin is currently focused on helping users manage and understand diabetes-related and other health information they choose to provide.


1. Information We Collect

The information we collect depends on how you use Bluepin.

1.1 Account and Authentication Information

When you create or use a Bluepin account, we may collect or process:

  • your name;
  • email address;
  • account identifiers;
  • authentication information;
  • information associated with your Google account when you use Google Sign-In;
  • account creation and login information; and
  • information relating to your account preferences and settings.

Bluepin currently uses Firebase Authentication and Google Sign-In for user authentication.

1.2 Health and Medical Information

When you use Bluepin's health features, you may provide information such as:

  • glucose readings;
  • HbA1c values;
  • blood-test results;
  • laboratory biomarkers;
  • weight;
  • height;
  • BMI;
  • blood pressure;
  • cholesterol and lipid information;
  • kidney and liver-related biomarkers;
  • thyroid and vitamin-related biomarkers;
  • urine-analysis information;
  • medication information that you choose to provide;
  • information contained in medical or laboratory reports; and
  • other health information that you voluntarily provide.

Health reports may contain additional personal or medical information depending on their contents.

Health and medical information can be sensitive personal information. Bluepin treats such information accordingly.

1.3 Uploaded Reports and Files

If you upload a medical, laboratory, or other health-related report, Bluepin may process:

  • the uploaded file;
  • information contained in the file;
  • extracted biomarkers;
  • report dates;
  • laboratory values;
  • reference ranges;
  • units; and
  • other information necessary to organize and analyze the report.

Bluepin may retain uploaded reports and extracted information as part of your health history while your account remains active.

1.4 Technical and Usage Information

When you use Bluepin, we may automatically process information such as:

  • IP address;
  • browser and device information;
  • operating-system information;
  • session information;
  • application and website interactions;
  • technical events;
  • error and diagnostic information;
  • security events;
  • performance information; and
  • general usage information.

This information helps us operate, secure, maintain, and improve Bluepin.


2. How We Collect Information

We may collect information:

2.1 Directly From You

You provide information when you:

  • create an account;
  • sign in;
  • enter health information;
  • record glucose readings;
  • upload health reports;
  • update your profile;
  • use Bluepin features; or
  • contact us.

2.2 Through Authentication Services

When you use Google Sign-In, information necessary to authenticate your account is processed through Google and Firebase Authentication.

2.3 Automatically

We may collect technical, security, analytics, and performance information automatically when you use Bluepin.

Our use of cookies and similar technologies is described in our Cookie & Tracking Policy.


3. How We Use Your Information

We may use your information to:

  • create and manage your account;
  • authenticate your account;
  • provide Bluepin's health-management functionality;
  • record and organize glucose information;
  • store and organize health reports;
  • extract and structure information from uploaded reports;
  • maintain your longitudinal health history;
  • display health trends and historical information;
  • compare health information over time;
  • calculate or display Health Score information;
  • provide Health Canvas functionality;
  • generate Health Highlights;
  • provide Bluepin Intelligence insights;
  • identify patterns and changes within information you provide;
  • operate and maintain Bluepin;
  • improve the reliability and functionality of the service;
  • detect and prevent unauthorized access, fraud, abuse, or security incidents;
  • diagnose technical problems;
  • understand general product usage;
  • respond to support, privacy, and grievance requests;
  • maintain appropriate records of consent and account actions;
  • comply with applicable legal and regulatory requirements; and
  • protect the rights, safety, and security of Bluepin and its users.

4. Processing of Health Information

Bluepin processes health and medical information to provide the health-management features you choose to use.

Depending on the information you provide, this may include:

  • recording glucose readings;
  • organizing laboratory results;
  • extracting biomarkers from reports;
  • comparing results across reports;
  • identifying changes and trends;
  • maintaining your longitudinal health history;
  • generating Health Highlights;
  • generating Health Score information;
  • providing Health Canvas functionality; and
  • generating AI-assisted informational insights.

Where applicable, Bluepin will obtain the consent required for processing health information.

You may choose not to provide health information. However, features that depend on such information may not function without it.

Where applicable law provides a right to withdraw consent, you may contact us at:

marketing@bluepin.in


5. Bluepin Intelligence and AI Processing

Bluepin uses automated analytical systems and AI models to provide certain informational insights.

Bluepin Intelligence may analyze information such as:

  • laboratory reports;
  • extracted biomarkers;
  • glucose information;
  • health-history information; and
  • other information necessary for the requested feature.

5.1 Third-Party AI Processing

Bluepin currently uses Google Gemini through Google's AI services for certain AI-powered functionality.

Where an AI feature requires such processing, relevant information may be transmitted to the applicable Google AI service to generate the requested output.

Bluepin seeks to limit information sent for AI processing to information necessary for the relevant functionality.

5.2 AI Outputs

AI-generated information may contain errors, omissions, or inaccurate interpretations.

Bluepin Intelligence is intended to help users understand their health information and identify potential trends or patterns.

It is not intended to provide:

  • a medical diagnosis;
  • a prescription;
  • emergency medical care;
  • definitive treatment decisions; or
  • a substitute for professional medical advice.

Important health decisions should be discussed with an appropriately qualified healthcare professional.


6. Future AI Development

Bluepin may develop and improve its own analytical and AI systems as the product evolves.

If Bluepin proposes to use personal or health information for model training, development, or another materially different purpose, Bluepin will update its privacy disclosures and obtain any consent or other authorization required under applicable law before carrying out that processing.

This Privacy Policy does not state that Bluepin currently trains its own AI models using users' health information.


7. Cookies, Analytics, and Similar Technologies

Bluepin uses cookies and similar technologies for purposes such as:

  • authentication;
  • session management;
  • security;
  • analytics;
  • usability measurement;
  • technical performance; and
  • service improvement.

Bluepin currently uses technologies including:

  • Google Analytics 4 (GA4);
  • Google Tag Manager (GTM); and
  • Microsoft Clarity.

Further information about these technologies and available choices is provided in the Bluepin Cookie & Tracking Policy.

7.1 Health Information and Analytics

Bluepin does not intentionally transmit users' health information to analytics services.

Bluepin's analytics implementations are intended to prevent information such as:

  • glucose values;
  • HbA1c values;
  • medical-report contents;
  • medication information;
  • laboratory results; or
  • other health information

from being included in analytics events.

The Bluepin technical team periodically reviews analytics configurations to ensure they remain consistent with this Policy.


8. How We Share Information

Bluepin may share or allow access to information with service providers where necessary to operate the service.

These providers may support functions such as:

  • authentication;
  • databases;
  • cloud storage;
  • application hosting;
  • AI processing;
  • analytics;
  • security;
  • infrastructure;
  • communications; and
  • technical support.

These providers may process information on Bluepin's behalf and according to the services they provide to us.

8.1 Google and Firebase

Bluepin uses Google services and Firebase for functions including authentication, application infrastructure, data storage, and certain AI-powered functionality.

The information processed by each service depends on the particular function and technical configuration.

8.2 Legal and Security Requirements

We may disclose information where reasonably necessary to:

  • comply with applicable law;
  • respond to valid legal or governmental requests;
  • investigate fraud or abuse;
  • protect Bluepin's systems;
  • prevent unauthorized access;
  • enforce our Terms of Service; or
  • protect the rights, safety, or security of Bluepin, our users, or others.

We seek to limit such disclosures to what is reasonably necessary and permitted by applicable law.


9. Marketing and Communications

Bluepin may communicate with users through channels such as:

  • email;
  • WhatsApp; and
  • other communication channels that Bluepin may introduce.

Communications may include:

  • account and security messages;
  • service-related information;
  • educational information;
  • product updates;
  • important notices; and
  • promotional or marketing communications.

Where applicable law requires consent for promotional communications, Bluepin will obtain the required consent and provide appropriate ways to opt out.

Bluepin does not use personal health information for targeted advertising.


10. Data Security

Bluepin uses technical and organizational safeguards designed to protect personal and health information.

Depending on the relevant system, these measures may include:

  • encryption in transit;
  • encryption at rest;
  • authentication and authorization controls;
  • access controls;
  • secure cloud infrastructure;
  • application security controls;
  • monitoring and logging; and
  • measures designed to prevent unauthorized access or disclosure.

No internet-based service can guarantee absolute security. Bluepin therefore continuously works to identify and address security risks appropriate to the information it processes.


11. Data Retention

Bluepin retains personal and health information for as long as reasonably necessary to:

  • provide the service;
  • maintain your health history;
  • operate and improve the service;
  • meet legitimate security and operational requirements;
  • comply with applicable law;
  • resolve disputes; and
  • protect Bluepin and its users.

11.1 Active Accounts

While your account remains active, Bluepin retains information necessary to provide the services you use and maintain your health history.

11.2 Account Deletion

You may delete your Bluepin account using the account-deletion functionality provided by Bluepin.

When you voluntarily delete your account, Bluepin permanently removes the data associated with that account from its active systems as part of the deletion process, subject to information that Bluepin is required or permitted to retain under applicable law.

Bluepin does not automatically delete accounts merely because they have been inactive for a specified period.

Where limited information must be retained for legitimate legal, security, fraud-prevention, or other lawful purposes, it will be retained only for as long as reasonably necessary for that purpose.


12. Your Privacy Rights

Depending on applicable law, you may have rights to:

  • request access to personal information held about you;
  • request correction of inaccurate information;
  • request deletion of your information;
  • withdraw consent where processing is based on consent;
  • ask questions about our privacy practices;
  • submit a privacy complaint or grievance; and
  • exercise other rights available under applicable law.

To submit a privacy request, contact:

marketing@bluepin.in

We may take reasonable steps to verify your identity or account ownership before processing certain requests.


13. Account Deletion

Bluepin provides users with an account-deletion mechanism.

When account deletion is completed, Bluepin deletes associated user data in accordance with its deletion procedures and applicable law.

If you have difficulty using the account-deletion functionality, you may contact:

marketing@bluepin.in

Google Play's account-deletion requirements may also require Bluepin to provide an external web resource for deletion requests.


14. Children's Privacy

Bluepin is not specifically designed for children.

We do not knowingly seek to collect personal or health information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to Bluepin in circumstances where it should not have been collected, please contact:

marketing@bluepin.in

We will review the matter and take appropriate action as required by applicable law.


15. Third-Party Services

Bluepin relies on third-party services to provide certain parts of the service.

These may include services provided by:

  • Google;
  • Firebase;
  • Google Sign-In;
  • Google Gemini;
  • Google Analytics;
  • Google Tag Manager; and
  • Microsoft Clarity.

Third-party providers may have their own privacy policies and terms.

Where a provider independently determines how it processes information, that processing is governed by the provider's applicable policies and terms.


16. International Processing

Bluepin is based in India.

Some technology and service providers used by Bluepin may process information through infrastructure located outside India.

The location of processing may vary depending on the provider, service, and technical configuration.

Where applicable law imposes requirements relating to cross-border processing or international transfers, Bluepin will comply with those requirements.


17. Changes to This Privacy Policy

Bluepin may update this Privacy Policy when:

  • the product or its features change;
  • the information we collect or process changes;
  • our technology providers change;
  • our AI functionality changes;
  • our communication practices change;
  • applicable laws or regulations change; or
  • our privacy or security practices materially change.

The updated Policy will display a revised effective date and version.

Where a material change requires additional notice or consent under applicable law, Bluepin will provide the appropriate notice or obtain the required consent.


18. Contact and Grievance Redressal

For privacy questions, requests, or complaints:

Bluepin
34 Pavilion, Sector 34, Noida, Uttar Pradesh

Email: marketing@bluepin.in

Designated Grievance Officer: Sparsh Chaturvedi
Grievance Email: marketing@bluepin.in

Bluepin will address privacy grievances within the time period required under applicable law.


19. Applicable Law

Bluepin handles personal information in accordance with applicable data-protection, information-technology, consumer-protection, and other applicable laws and regulations in India.

As applicable requirements evolve, Bluepin may update its policies, processes, and technical controls accordingly.