BLAMETREV PRIVACY POLICY

1. About our Privacy Policy

QA Pro Pty Ltd ABN 82 072 534 877, trading as Blametrev ("QA Pro", "we", "us" or "our"), operates the Blametrev website at www.blametrev.com and associated mobile applications. We provide AI-based text tools for venting, reflection, personalisation, mood check-ins, guided apologies and cheer content ("Services"). The Services are intended for individual consumers in Australia who are at least 18 years old. This policy also covers website visitors and people who buy or redeem gift or staff packs. Mobile applications are covered when made available; each recipient’s account remains for personal adult use.

Our Privacy Policy explains how we collect, hold, use and disclose personal information, including health and other sensitive information. Personal information is information or an opinion about an identified or reasonably identifiable individual. We apply the Australian Privacy Principles and comply with applicable Australian privacy and health-information laws.

Trev is an AI character. He is not a person, therapist or emergency service. Information you enter is processed by our systems and relevant service providers, including overseas AI services. Access to that information is not limited to you, and it does not remain entirely on your device or in Australia.

We publish updates to this policy when our practices change. Where a change materially affects how we handle your information, we will provide an appropriate notice before the change and obtain further consent where required.

2. Why we collect, hold, use and disclose personal information

We handle personal information to provide and manage the Services and our relationship with you. These purposes include:

• creating and securing your account, authenticating sign-in and sending email-confirmation and password-reset messages;
• providing AI replies, summaries, memory search, personalisation, guided apologies, cheer content and your Trev portrait;
• saving and displaying the chats, memories, profile, mood check-ins, schedules and notes you use;
• administering trials, subscriptions, payments, cancellations and refunds, and delivering and managing gift or staff codes and recipients’ access;
• checking eligibility for another website free trial using the limited coded email record described in section 10;
• applying usage and safety controls, investigating reported replies, responding to support and privacy requests, and maintaining and protecting the Services; and
• keeping necessary business records, resolving disputes and meeting legal obligations.

We do not sell or rent your identifiable conversation content for advertising. We do not use your chats to train a general-purpose AI model.

3. What kinds of personal information we collect

Depending on how you use the Services, we collect and hold:

• account information: your email address, chosen name, sign-up and email-verification details, password hash, email-confirmation and password-reset codes and sign-in session information, including IP address and browser/device information;
• profile information you provide, including your name or nickname and optional age band, sex or gender, broad location and pastimes;
• conversation information: your messages, Trev’s replies, titles, dates, chat summaries, guided-apology answers and drafts, and information included in a report or support request;
• memories inferred from conversations, their dates and status, your edits and pinned notes, and numerical representations used to search related information;
• mood check-ins, their dates and associated chats; positive notes and answers; reminder schedules, time zone and settings; and the generated portrait of your Trev character;
• subscription and gift information, such as account or purchaser identifiers, email, pack size, code and payment/redemption status, payment channel, plan, entitlement, expiry and renewal status, and limited transaction/accounting information we receive;
• a code derived from your email address, together with the date that record was created, retained following deletion of an account that has had a website free trial or a subscription, including a gift subscription, as described in section 10; and
• technical and usage information needed for security, troubleshooting and limits, including feature usage, timestamps, request identifiers, status and error information.

Chats, moods, memories and AI-generated inferences may contain health information or other sensitive information, such as information about mental health, sexuality, religion or ethnicity. An AI inference may be inaccurate. You can review, correct or delete memories through the available controls or contact us. A numerical search representation is not necessarily anonymous.

We do not store your full payment-card details. The relevant payment provider handles them. Your Trev portrait is an AI-generated character image, not a photograph of you; its generation uses age band, pastimes and style choices rather than your chat history, name, location or sex.

An account and necessary sign-in information are required to use the interactive app; there is no guest chat mode. Buying a gift or staff pack does not require a Blametrev account, but it does require the contact and payment information needed for the purchase. Each recipient creates or uses their own account. Optional profile details, mood entries and additional disclosures are your choice. Withholding information needed for a feature may prevent it from working. Avoid unnecessary sensitive information, identifying details about others, and confidential workplace or client information.

4. What kinds of website visitor information we collect

We use a necessary sign-in/session cookie and related authentication information to keep you signed in and secure your account. The current session period is up to seven days from last use. Technical request information may include IP address, browser/device details, request path, referring page, timestamp and status. Our public website also loads fonts from Google Fonts. When you choose to play the embedded presentation, it loads a Vimeo player and connects your browser to Vimeo.

External font, video and payment services may receive technical request information, such as IP address, browser/device details and referring-page information. Vimeo may also receive playback information and use cookies or similar technologies. We use its privacy settings to limit optional tracking; this does not prevent every cookie or the sending of cookies already in your browser. Their handling is explained in Google’s Privacy Policy and Vimeo’s Privacy Policy. We do not currently use Google Analytics or advertising trackers in the app. Disabling necessary cookies can affect sign-in or payment. You can browse without playing the presentation.

5. How we collect personal information

We collect information directly from you when you register, complete a profile, send messages, use optional features, start a trial or subscription, buy or redeem a gift code, change settings or contact us. We also collect information automatically through operation of the Services, including sessions, technical requests, feature usage and gift entitlement/redemption records.

AI processing generates replies, summaries, memory notes and search representations from relevant information. For a reply, this may include recent messages, a summary of older messages, profile facts and relevant memories. Background processing can extract or retire memories and summarise a long chat. An additional AI check may assess a draft response and conversation for safety before the response is displayed. These processes are not a guarantee that unsafe content will always be detected.

We receive purchase, subscription, payment and redemption-status information from RevenueCat and the relevant payment platform. A gift buyer receives their code and purchase confirmation and can share the code with intended recipients. We may receive information from you or an authorised representative when handling support, a complaint or a legal matter. Minimise identifying details about other people and ensure you have authority to provide them. A gift buyer or employer cannot give sensitive-information consent on a recipient’s behalf.

When an account that has had a website free trial or a subscription, including a gift subscription, is deleted, we create the coded email record described in section 10. We lowercase the email address and remove any “+tag”; for Gmail addresses only, we also remove dots. Some variations therefore match the same code. A later website subscription address can be matched against it solely to decide whether another website free trial is available. This check is not used for Apple or Google purchases, which have their own trial rules. Contact us to review a match you believe is incorrect.

Where consent is required for handling sensitive information, we will explain the handling and seek consent before collection. Contact our Privacy Officer to withdraw consent to future handling. Stopping an optional activity stops new submissions through it, but does not itself delete earlier information or tell us to stop other processing. We will explain the effect on relevant features, what handling will stop and what information must lawfully be retained. Withdrawal does not undo lawful processing already performed. Retained information remains protected and subject to applicable restrictions.

6. When you will have the option of not identifying yourself

You may browse public information or make a general enquiry without identifying yourself, where practicable, and use a nickname in your profile. An email/password account is required to use the app. You can buy a gift pack without an app account, although the purchase requires contact/payment information. A nickname does not anonymise stored information. We may need proportionate identity verification to grant access, change an account, or process a purchase.

7. Use of personal information for direct marketing

The app does not currently use your conversation content, moods or inferred memories for targeted advertising. Necessary account, password-reset, billing and safety communications are service messages. If we introduce optional marketing communications, we will obtain any consent required by law, provide a clear unsubscribe method and respect your choice to opt out. Withdrawing marketing consent will not stop necessary service messages.

8. How we disclose personal information

We disclose relevant information to providers that help operate the Services, for the purposes explained in this policy. Current and proposed arrangements include:

• Neon, using AWS infrastructure in Sydney, for the application database, including account and saved feature data; and Vercel for the website/API and technical request information, with application processing configured in Sydney;
• OpenRouter, which routes AI requests, and the selected model-hosting endpoints: Anthropic Claude through Amazon Bedrock or Google Vertex for text functions, Microsoft Azure for OpenAI embedding-based memory search, and Google Vertex for Google image generation;
• Resend for password-reset email delivery, receiving the email address and message content;
• RevenueCat and Stripe for website payments and subscription/gift administration, or Apple App Store and Google Play for purchases through those channels when available;
• Google Fonts to display website fonts and Vimeo to play the embedded presentation, receiving relevant technical request information and, for Vimeo, playback information as explained in section 4; and
• if introduced, Sentry for error monitoring with chat content and sensitive user information excluded from error reports.

Our AI processing arrangements involve the United States. Resend and RevenueCat operate in the United States; Stripe and app-store providers process information internationally. Website font and video services also process technical information internationally under Google’s and Vimeo’s arrangements, including in the United States. If introduced, Sentry’s intended location is Iowa in the United States. Australian database hosting does not mean all processing, support or service records remain here. We identify countries as far as practicable and update disclosures before material changes.

We configure AI routing to selected endpoints designated as zero-data-retention, with other-provider fallback disabled, and do not enable optional prompt logging or training use. This concerns the handling of AI input and output content for the selected route. It does not mean no information exists elsewhere: our saved chats, backups, usage metadata, email and payment records have separate retention rules. Provider policies can distinguish temporary caching, security or legally required handling from model training. We do not promise that no supplier ever retains any information.

We assess changes to AI models and providers before using them, including privacy, retention, processing locations and safety. Further notice or consent will be given where required. Relevant provider information is available from OpenRouter, AWS, Google Cloud and Microsoft.

Authorised administrators can access stored account and feature information where needed to operate, secure or support the Services or investigate a report. We do not promise that only you can see it. We may also disclose information to professional advisers or authorities where reasonably necessary and lawful, or where required or authorised by law, including a permitted serious-threat situation. We do not provide an employer with access to your conversations through this consumer service. Buying or funding a gift or staff pack does not give the buyer or an employer access to a recipient’s chats, memories, moods or profile. Each recipient controls their own account, subject to the administrator access and lawful disclosures described here.

9. How we use Stripe, RevenueCat, Apple and Google payment processing services

Website card payments, including gift purchases, are handled using RevenueCat and Stripe. Apple and Google handle purchases through their respective stores when those channels are available. These services may receive identifiers, name, email, payment/billing details, purchase history and device/security information. We receive information needed to administer subscriptions, gift codes, entitlements, transactions and support; we do not receive or store full card details. A gift purchase is separate from any subscription the recipient already has.

Their privacy information is available from Stripe, RevenueCat, Apple and Google. Deleting your Blametrev account does not erase payment records held independently by these providers. Subscription cancellation and refunds are also addressed in our Terms of Use.

10. How we hold and protect personal information

Application information is held electronically in the Neon database on AWS infrastructure in Sydney. It is encrypted at rest and protected by TLS during transmission. Passwords are stored as hashes, not plain text. These protections are not end-to-end encryption: information must be processed by the app and relevant AI providers to supply the features.

We use reasonable technical and organisational measures appropriate to the information, including authentication and access restrictions. No internet transmission or storage system is completely secure. Contact us promptly if you suspect unauthorised access. We will assess security incidents and notify affected individuals and regulators where required by law.

We keep saved accounts, chats, summaries, memories and search indexes, profiles, moods, schedules, positive notes and portraits while reasonably needed for the purposes in this policy or as required by law. We also review whether information remains needed. You can request deletion through the relevant controls or account deletion, subject to the specific exceptions below. Retired memories remain hidden until deleted. Deleting a chat is separate from deleting memories learned from it. Controls include deleting chats or all chats, editing/deleting memories, deleting all memories, deleting mood check-ins and deleting the account. Positive notes may require account deletion for removal; contact us for assistance.

Account deletion removes ordinary live account and feature records, subject to legal retention, the coded email record below and necessary separate gift/purchase records. Where the mobile apps are available, their deletion option opens our website for sign-in and confirmation. Deleted database information may remain in Neon’s automatic backups for up to seven days; we keep no separate manual database backups. Vercel logs and AI usage counters ordinarily expire after one day without chat content. Resend email/delivery information may remain for 30 days. If Sentry is introduced, redacted error-report retention is intended to be 30 days.

We request deletion of the relevant RevenueCat customer record when the account is deleted; deletion in the provider’s systems may not be immediate. Stripe, Apple and Google retain their own transaction records under their legal obligations and policies. QA Pro keeps relevant bank and accounting records for seven years. Support, complaint or incident records may be retained where reasonably needed for the matter or required by law.

Gift purchase, code and redemption records are retained while reasonably needed to deliver and administer purchased entitlements, deal with payment/redemption problems and meet legal obligations. They may need to remain after a buyer or recipient deletes an app account: closing one account does not reverse the purchase or remove other recipients’ unused places. A buyer without an app account can contact our Privacy Officer about their information. These records remain protected, are reviewed for necessity and are deleted or de-identified when no longer needed, subject to law.

When we delete an account that had a website free trial or subscription, including a gift subscription, we retain a coded identifier derived from its email address, along with the date the record was created at deletion. The code is generated using a secret key kept separately from the database and application code. The email address itself, name, user ID, chats and payment details are not held in that record. It remains personal information because we can match it against an email address supplied later. Our access to the record is restricted to authorised, named administrators and server processes. We use it only to check eligibility for another website free trial, to help prevent repeat trials following account deletion. It does not prevent registration or paid access and does not shorten a trial already granted.

The trial restriction expires 12 months after the qualifying account deletion. It restarts only if a later account with the same matched email address has had a website free trial or a subscription and is then deleted. Signing in, a trial check or deleting an account without that qualifying history does not restart it. Expired records are deleted before every website free-trial check and during daily automatic cleanup. A record may remain until that cleanup but is never used after expiry. Copies may remain in automatic backups for up to seven days after the record is deleted. If a backup is restored, the system removes expired records before the next trial check or at the next daily cleanup, whichever comes first. Any record retained because law requires it is protected and restricted to that lawful purpose; neither a legal hold nor a backup extends the 12-month trial restriction.

Legal retention can override a deletion request. We will keep legally required records protected, restrict access and routine use, and explain an applicable restriction when responding to your request. This does not mean that every account record has the same legal classification or retention period. Closing an account does not waive a legal obligation.

Where any law requires a note of lawful disposal, we retain the information required for that note, which may include your name, the period covered and the deletion date. It is separate from the limited coded email record used for website trial eligibility.

We take reasonable steps to destroy or de-identify information when no longer required for an authorised purpose, subject to law. Deletion does not recall information already processed or independently retained by a provider. After a trial, subscription or gift-access period ends, paid AI features cease, but you can still sign in to view or delete saved information and request account deletion, subject to lawful retention.

11. How to access and correct your personal information

You can view available chats, moods and memories through the app and correct or delete memories using the relevant controls. You may also request access to or correction of personal information we hold by contacting our Privacy Officer. We will take reasonable steps to verify your identity without collecting more information than needed.

You may ask our Privacy Officer for access to or correction of a coded email record, or ask us to review an incorrect trial-eligibility match. We may need an email address you use to check for a match. We will explain the outcome, subject to lawful verification and any permitted access restriction.

We will respond within a reasonable time, generally within 30 days, or within any applicable statutory period. Where reasonable and practicable, we will provide access in the manner requested. Any lawful access charge will be explained in advance and will not exceed an applicable statutory limit; we do not charge for making a request or correcting information.

If we cannot provide access or make a requested correction, we will give reasons, except where law permits otherwise, and explain available complaint options. You may ask us to associate a statement of disagreement with disputed information and, where applicable, notify another recipient of a correction. Where any law applies, additional access, correction or transfer rights may be available. An inaccurate AI memory is not treated as a verified fact about you.

12. How to make an enquiry or complaint

Please contact our Privacy Officer with details of your concern and the outcome you seek. We review the customer-service mailbox daily and will assess privacy complaints and respond within a reasonable time, generally within 30 days. If more time is reasonably required, we will explain why and keep you informed. The mailbox and “Report this reply” feature are not emergency services and are not continuously monitored. If you are dissatisfied with our response, or it is not appropriate to complain to us first, you may contact the Office of the Australian Information Commissioner or, for Victorian health-information matters, the Victorian Health Complaints Commissioner, subject to their jurisdiction and complaint requirements.

13. How to contact us

If you have questions about this Privacy Policy or wish to exercise a privacy right, please contact our Privacy Officer using the following details:

Privacy Officer
QA Pro Pty Ltd trading as Blametrev

Email: customerservice@blametrev.com

This version of the Privacy Policy is dated 23 October 2026 and takes effect when published for the Services, subject to any required notice and consent.