How Blyzko handles data

Version of 17 October 2026.

Who is responsible for the data

Controller: [full name], a sole proprietor (FOP) registered in Ukraine, taxpayer number [number]. Email: support@blyzko.app. We follow the Law of Ukraine “On Personal Data Protection” and, because families in the EU use the service, the EU General Data Protection Regulation (GDPR). Our representative in the EU under Article 27 GDPR: [name, address]. Full details are on the Impressum page.

We are based in Ukraine; family data is stored on a server in Germany.

Below, “the parent” means the person the family looks after: mum, dad, grandma or another loved one.

In brief

Documents (numbers, notes, files) are encrypted with the family key. Not even we can read them.
Everything else (medicines, the card for the doctor, expenses, the parent’s answers) is stored encrypted on a server in Germany, but we hold the key to that encryption. Without it, the bot couldn’t remind anyone about a tablet or raise the alarm. We won’t look at this data without a reason.
There are no ads. We don’t sell data to anyone.

What data we store

Your name and what you have written about yourself: how you’re related, your city.
The parent’s name, age, city and phone number.
What the family has recorded itself: expenses, hours of help, medicines, doctor’s appointments, tasks.
Information about the parent’s health, if you have entered it: allergies, diagnoses, blood type, the list of medicines and ticks showing when a medicine was taken.
The history of the parent’s answers: when they answered the morning question and whether they asked for help.
Documents: numbers, notes, discharge letters, test results and other files. They are encrypted with the family key, see below for details.
The Telegram chat ID of those who have connected the bot, and the parent’s Telegram @username, if they have one.
The parent’s location, only if they have tapped “Show where I am” («Показати, де я») themselves. It is erased when the alert is cleared or the parent answers “I’m fine” («Усе добре»), and in any case after 24 hours. The map link the bot sends to the family stays in the Telegram chat until you delete it. We do not track the parent continuously.
Short replies and reactions under events in the family feed.
The contact details you left in a request on the website. We delete requests after one year.
The address for app notifications, if you have turned them on on your phone. Turn notifications off and the address is deleted.
We keep IP addresses in the server’s memory for no longer than an hour, to protect against code guessing. They are not written to the database or logs.
For payments: which payment belongs to which family and the date until which it is paid. Card details never reach us.

We have no passwords. Sign-in is tied to the device, and the database holds only a fingerprint of the sign-in key.

Documents: only the family has the key

Document numbers and notes that you enter in the app are encrypted on the phone itself with a key that only family members have. The server holds only the encrypted data: neither we nor anyone who gains access to the server can open it. For the same reason, we cannot hand these documents over on request.

A file sent to the bot passes through Telegram and our server. The server encrypts it with the family key straight away, and no unencrypted copy remains with us. Exception: if no phone in the family has set up the key yet, the file waits for this under the server’s key, and then the app re-encrypts it with the family key. The file itself also remains in your Telegram chat with the bot: delete it there if you need to.

The key is locked with a 32-character family code. Relatives receive the code inside the invitation link: this part of the link is not sent to the server. A new phone receives the code only after someone in the family confirms it. If the code is lost on all phones and has not been written down, the documents cannot be recovered, and we cannot do it either.

If the lock is turned on, the phone keeps a copy of the documents, also encrypted, so that they open without internet. They can only be opened with your face, fingerprint or phone passcode.

The server can see the type of document (for example, “Passport”), whether it has a file, the file type (PDF or photo) and its size. It cannot see the content.

Why we need the data and on what legal basis

To make the service work: show the family the overall picture, message the parent in the morning, send alerts, calculate expenses. Legal basis: our contract with you (Art. 6(1)(b) GDPR).
Health information: only with the parent’s explicit consent (Art. 9(2)(a) GDPR). When creating a family, the organiser ticks a box confirming that the parent knows about the service and agrees. Then the bot itself asks the parent in its first message, and we record when they tapped “Yes, message me” («Так, пишіть»).
Protection against code guessing and abuse: our legitimate interest (Art. 6(1)(f) GDPR).
We keep payment records for as long as Ukrainian tax law requires.

The service does not give medical advice. How to take medicines is for a doctor to decide.

The parent’s consent

The parent decides for themselves whether to receive messages. The bot asks about this in its very first message. They can opt out at any time by writing “стоп” (stop) to the bot. The parent can also write to us at support@blyzko.app themselves and ask us to delete their data.

Who sees the data

Family members invited by the organiser see everything.
Helpers (a neighbour, a carer) see alerts, the parent’s location during an alert, medicines and how to contact the parent. We show them the card for the doctor, doctors, visits, tasks or documents only if someone in the family has turned this on. We never show them the family’s expenses.
We, the owner of the service, access the database only to fix faults. We cannot read the family’s documents.

Where and for how long data is stored

On a server of Hetzner Online GmbH in Germany.

For as long as the family uses the service.
If there has been no subscription for a year, we warn the family in Telegram 30 days in advance and then delete its data.
A deleted family is erased from the working database immediately and from backups after 14 days.
If a member is removed from the family, they lose access immediately. What they recorded (expenses, hours of help, replies in the feed) stays with the family under their name. It can be deleted completely by deleting the family, or by writing to our email address.

Who we share data with

Hetzner Online GmbH (Germany): hosting, Blyzko runs on their server. We have a data processing agreement with them.
Telegram (a company outside the EU): the bot writes to the parent and to you through it. Messages may contain names and doses of medicines, alert messages and a link to the parent’s location. Files you send to the bot also go through Telegram.
Notification services of Apple, Google, Mozilla or Microsoft, if you have turned on app notifications. The notification text is encrypted with your phone’s key, and the service cannot read it.
Paddle (Paddle.com Market Ltd, United Kingdom): takes payments in euros as the merchant of record. Paddle receives card or PayPal details, email, country and the address needed to calculate tax. Card details never reach us.
monobank (JSC Universal Bank, Ukraine): takes payments in hryvnias. The bank receives the card details; they never reach us. The phone’s time zone suggests the price in hryvnias.
Tribute, if you pay through Telegram: it receives the payment details, and we only receive your Telegram number and the subscription end date.
Anthropic (USA), if you photograph a medicine package: only that photo is sent there, to read the name and dose and write a short note on what the medicine is usually prescribed for. We do not store the photo. Do not photograph the package together with a prescription that shows a name.
OpenStreetMap, when the app shows a map with the parent’s location: they can see the map area and your IP address. No name is sent there.
Google Maps, if you tap “On the map” («На карті») or “Directions” («Маршрут»), or open a link from the bot: Google will see the coordinates of that point and your IP address.

Some of these companies are located outside the EU, mostly in the USA. Transfers are based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Cookies

The website has no cookies and no visitor counters. The app stores on your phone only what it cannot work without: sign-in, settings and, if the lock is turned on, encrypted documents.

Your rights

You can ask us to show, correct, export or delete your data, to restrict its processing or to object to it. Write to support@blyzko.app and we will reply within a month. The organiser can remove any member and delete the whole family: in the app, in the “Family” section («Родина»), at the bottom. Consent can be withdrawn at any time with the same email or by writing “стоп” (stop) to the bot.

If you believe we have violated your rights, you can complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection supervisory authority in the EU country where you live.

What the service does not promise

Blyzko helps the family notice in time that something is wrong. It is not an emergency or medical service. A message may not get through if the parent has no connection. In an emergency, call 103 or 112.