Back to Home

Privacy Policy

Last updated: July 24, 2026

Welcome to Blue Kiwi. This Privacy Policy explains how we collect, use, process, and protect your information when you use our website and all related services.

1. Information We Collect

1.1 Information You Provide

We collect personal information when you:

  • Create an account
  • Upload images or product details
  • Generate slideshows
  • Connect a TikTok, Facebook, or Instagram account
  • Subscribe to a plan
  • Contact support

This may include: name, email address, mobile number, phone-verification status, SMS consent choices and timestamps, user-uploaded images, brand information, product details, prompts or text used for script generation, and Stripe subscription metadata.

Authentication is handled by Supabase Auth, verification messages are delivered through Twilio, and automated signup abuse is screened with Cloudflare Turnstile. We do not store your password or the one-time security code sent to you.

1.2 Information We Collect Automatically

We automatically collect:

  • IP address
  • Device information
  • Browser type
  • Usage data (pages visited, features used, actions taken)
  • Cookies and similar tracking technologies

We use Vercel Analytics to collect anonymized performance and usage statistics.

1.3 Information from Third Parties

We may receive data from TikTok (analytics data and video performance data), Meta (the Facebook profile identifier and name used to authorize access, granted permissions, Pages, linked Instagram professional accounts, Page tasks, account eligibility, and publishing results), Stripe (billing status and subscription events), and AI API providers (processing results only).

We do not receive your TikTok, Facebook, or Instagram password. TikTok tokens are securely managed by getlate.dev. Meta access tokens are encrypted server-side and are never sent to the browser.

2. How We Use Your Information

We use your information to:

  • Operate and maintain Blue Kiwi
  • Generate scripts and images using AI models
  • Provide recommendations, templates, and example slideshows
  • Improve our Services and user experience
  • Handle billing and subscription management
  • Provide customer support
  • Show you analytics and performance data
  • Prevent abuse, fraud, or misuse
  • Send one-time account security codes you request
  • Send product news and offers by text only when you separately opt in
  • Comply with legal obligations

3. Mobile Information & Text Messaging

We use your mobile number to send the one-time security code required to verify a new account. If you separately opt in to product texts, we may also use that number for recurring automated marketing messages. The two choices are independent, and the optional marketing checkbox is unchecked by default.

We do not sell, rent, or share mobile numbers or SMS opt-in and consent data with third parties or affiliates for their own marketing or promotional purposes. We may provide mobile information to service providers such as Supabase and Twilio only as needed to verify accounts, deliver messages, prevent abuse, maintain consent and opt-out records, and comply with law.

You can opt out of text messages at any time by replying STOP. For help, reply HELP or email hello@bluekiwi.ai. We retain consent evidence for as long as reasonably necessary to document compliance and honor your preferences.

4. AI Processing & Third-Party Model Use

To generate slideshows, scripts, and images, we send user-provided text, brand information, prompts, and uploaded images to external AI providers including OpenAI, Anthropic, and Google.

AI processing occurs server-side through our Vercel backend. These AI providers may process your data according to their own terms, which may include data retention or model-improvement practices.

5. Use of User Content to Improve Blue Kiwi

We may use anonymized or aggregated user content to improve internal features, recommendation systems, templates, and platform functionality.

You may opt out at any time by emailing: hello@bluekiwi.ai

6. AI Safety, Accuracy & Content Liability

AI-generated outputs may contain inaccuracies, offensive or inappropriate material, NSFW content, or branding inconsistencies.

Blue Kiwi does not guarantee accuracy, safety, legality, or suitability of AI-generated content. Users are fully responsible for reviewing all content before posting or scheduling it.

7. TikTok Integration

Blue Kiwi allows you to connect your TikTok account using OAuth via getlate.dev, which securely stores and encrypts your TikTok tokens.

With your permission, we may access TikTok analytics, video performance data, and content metadata. We do not receive TikTok passwords, store OAuth tokens, post on your behalf without scheduling, or access private messages.

8. Facebook and Instagram Integration

When you connect Meta, Blue Kiwi uses the permissions you grant to discover Facebook Pages and linked Instagram Business or Creator accounts you can manage, determine whether each destination is eligible for publishing, publish only content you expressly submit or schedule, and retrieve publishing status and final post identifiers or links.

Blue Kiwi stores the authorizing Meta profile identifier, non-secret profile and destination metadata, granted permission names, Page task information, encrypted user and Page access tokens, publishing instructions, provider operation status, and final publishing results. We use this data only to provide and secure the connected publishing features, troubleshoot delivery, prevent duplicate posts, and meet audit or legal obligations. We do not sell this data or use it for third-party advertising.

You can disable one destination or remove an entire Meta authorization in Blue Kiwi settings. Removing an authorization revokes its stored credentials and cancels work that has not been submitted. You can also trigger Meta's automated deletion flow from Facebook or Instagram settings and check its status on our Data Deletion page.

9. Payments & Subscriptions

We use Stripe to process payments. We do not store credit card numbers. Stripe may collect payment information, billing address, and transactional details.

We store only: Stripe Customer ID, subscription tier, billing cycle, subscription period, and subscription status.

10. User-Generated Content & Copyright

You are responsible for ensuring you have the legal right to upload any images or content you use. Blue Kiwi is not liable for copyrighted or unlicensed content uploaded by users and may remove content that violates copyright.

11. Pinterest Inspiration Images

Blue Kiwi displays Pinterest-sourced images strictly for creative inspiration. Users may not use them in final slideshows or treat them as licensed assets. You must upload your own images or use legally licensed images for any public or commercial use.

12. Cookies & Tracking

We use cookies to authenticate users, store preferences, track usage, improve the site, and analyze behavior. You can disable cookies in your browser, but some features may not work properly.

13. Account Deletion & Data Retention

You may delete your account through Blue Kiwi account settings or by emailing us. You may remove a social authorization without deleting your Blue Kiwi account. For a verified Meta deletion request, we revoke encrypted credentials, remove authorization links, pseudonymize the disconnected Meta identity, and scrub destination identity data that is no longer reachable through another active authorization.

Deletion does not remove posts already published to a third-party platform. Limited immutable publishing and security records may retain destination references, content snapshots, provider operation outcomes, and timestamps needed to prevent duplicate publishing and document user-authorized actions. We also retain only the metadata and records reasonably necessary for billing, fraud prevention, legal obligations, SMS consent and opt-out compliance, deletion receipts, and dispute resolution. Meta deletion receipts contain opaque hashes, status, timestamps, and aggregate counts rather than raw Meta, workspace, account, or token data.

14. Children's Privacy

Blue Kiwi is not intended for individuals under 13 (or 16 in certain regions). We do not knowingly collect data from children. If we discover such data, we will delete it promptly.

15. Data Transfers

Your information may be processed in countries other than your own. By using Blue Kiwi, you consent to transfers according to applicable laws.

16. Security

We implement administrative, technical, and physical safeguards. However, no system is completely secure. You use the platform at your own risk.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. If changes are significant, we may provide additional notice.

18. Contact Us

Blue Kiwi

138 E 12300 S Ste C-1064
Draper, UT 84020
United States

Email: hello@bluekiwi.ai