Privacy Policy

This Privacy Policy (“Policy”) explains how UAB DRYND, operating the Blome service (“Blome”, “we”, “us”, or “our”), handles Personal Data in connection with the Blome website, applications, and related services (collectively, the “Service”).

Blome is currently in a pre-launch stage. At this time, the Blome product does not collect or process email content, connected email-account data, OAuth tokens, contacts, calendars, payment information, product analytics, or advertising data.

We do not sell Personal Data and we do not use Personal Data for cross-context behavioral advertising.

This Policy may be updated as Blome develops and new features become available. Before we begin collecting or processing additional categories of Personal Data, we will update this Policy to explain what is collected, why it is collected, and how it is used.

For purposes of this Policy:

• “Personal Data” means information relating to an identified or identifiable natural person.
• “Processing” means any operation performed on Personal Data, such as collection, storage, use, disclosure, transmission, or deletion.
• “Service” means the Blome website, applications, and related products and features.
• “User” or “you” means an individual who visits or uses the Service.
• “Controller” and “Processor” have the meanings given to them under the EU General Data Protection Regulation (“GDPR”).

Blome is currently in a pre-launch stage and the product itself does not currently collect Personal Data from email accounts or provide active email-processing functionality.

In particular, we do not currently collect or process:

• email content or attachments;
• email metadata such as senders, recipients, subjects, or timestamps;
• Gmail, Outlook, iCloud, Yahoo, or other connected-account data;
• OAuth access or refresh tokens;
• contacts or calendars;
• payment-card or billing information;
• product analytics or behavioral profiles;
• advertising identifiers;
• precise location data;
• biometric data; or
• data for AI-model training.

If you voluntarily contact us, send us a message, or otherwise provide information directly to UAB DRYND, we may process the information you choose to provide solely to respond to your request or communication.

Our website may rely on hosting, networking, domain, security, or infrastructure providers that technically process limited information necessary to deliver and secure the website.

Depending on the infrastructure in use, this may include basic request information such as:

• IP address;
• browser or device information;
• request time;
• requested page or resource; and
• security or error information.

We do not use this information to build advertising profiles or track users across unrelated websites.

Where technically possible and commercially reasonable, we aim to minimize the collection and retention of such information.

Blome does not currently use advertising cookies or cookies for cross-site behavioral tracking.

If we introduce analytics, preference, marketing, authentication, or other non-essential cookies in the future, we will update this Policy and provide consent controls where required by applicable law.

Strictly necessary technologies may be used where required to operate, secure, or deliver the website or Service.

At the current pre-launch stage, Personal Data is processed only where necessary to:

• operate, deliver, and secure the Blome website;
• respond to communications or requests that you voluntarily send to us;
• prevent fraud, abuse, or security incidents;
• comply with legal or regulatory obligations; and
• establish, exercise, or defend legal claims where necessary.

We do not use Personal Data to train AI models.

We do not sell Personal Data.

We do not use Personal Data for cross-context behavioral advertising.

Where the GDPR applies, we process Personal Data only when we have a lawful basis.

Depending on the situation, this may include:

• Legitimate interests — operating and securing our website, responding to ordinary communications, preventing abuse, and protecting our rights;
• Consent — where we specifically ask for your consent;
• Performance of a contract — where processing becomes necessary to provide a Service you request; and
• Legal obligations — where processing is required by applicable law.

Where processing is based on consent, you may withdraw that consent at any time.

Where processing is based on legitimate interests, you may have the right to object.

We do not sell Personal Data.

We do not share Personal Data with advertisers for behavioral advertising.

Limited Personal Data may be processed by service providers that are necessary to operate our website or business, such as hosting, infrastructure, security, or communications providers.

Such providers may process Personal Data only as necessary to provide their services to us and subject to applicable data-protection requirements.

We may also disclose Personal Data where required by applicable law, a valid court order, or another legally binding governmental request.

Blome is being developed as an email application and email service.

Future versions may allow users to:

• connect third-party email accounts;
• access and manage email content;
• use an @blome.app email address;
• use a custom domain; and
• synchronize messages and related account information.

These features are not covered by the statement that Blome currently does not collect email data once they become operational.

Before such functionality begins processing Personal Data, this Privacy Policy will be updated to describe, as applicable:

• what email and account data Blome processes;
• the purposes and legal bases for processing;
• retention periods;
• subprocessors;
• international transfers;
• security measures;
• account deletion and data export;
• connected-account permissions; and
• any other information required by applicable Data Protection Laws.

UAB DRYND is based in Lithuania.

If a service provider processes Personal Data outside the European Economic Area (“EEA”), we will use an appropriate transfer mechanism where required by law, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.

We will update this Policy with more specific information if our processing activities materially expand.

We retain Personal Data only for as long as necessary for the purpose for which it is processed, or for as long as required by applicable law.

Because the Blome product is currently in pre-launch and does not currently collect email-account data, there is currently no Blome email-content retention period.

Information voluntarily submitted through communications with us may be retained for as long as reasonably necessary to respond, maintain relevant business records, resolve disputes, prevent abuse, or comply with legal obligations.

Technical security or infrastructure logs, where generated by our service providers, are retained only for the period reasonably necessary for security, reliability, and legal purposes.

We take reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure.

Because Blome is still under development, this Policy does not make claims regarding security certifications, encryption architecture, data-residency guarantees, or other controls that have not yet been formally implemented and verified.

As the Service evolves, we will update this Policy and related security documentation to accurately describe the protections in place.

Blome is not intended for children under the age of sixteen (16).

We do not knowingly collect Personal Data from children under 16.

If we become aware that we have collected Personal Data from a child in circumstances where doing so is not lawful, we will take reasonable steps to delete it.

Depending on your jurisdiction and the circumstances, you may have the right to:

• request access to your Personal Data;
• request correction of inaccurate Personal Data;
• request deletion of your Personal Data;
• request restriction of processing;
• object to processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data-protection authority.

Because Blome currently collects very limited Personal Data, some requests may result in confirmation that we do not hold the requested information.

To exercise your privacy rights, contact UAB DRYND through the privacy or support contact information published on blome.app.

If you are located in the EEA, you have the right to lodge a complaint with your local supervisory authority.

As UAB DRYND is based in Lithuania, the competent Lithuanian supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

You may also contact the supervisory authority in the EU/EEA country where you live or work.

If UAB DRYND is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, Personal Data may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections.

Where required, affected users will be informed of material changes to the controller or the applicable Privacy Policy.

We may disclose Personal Data where we reasonably believe disclosure is required to:

• comply with applicable law or valid legal process;
• respond to a binding request from a competent authority;
• investigate or prevent fraud, abuse, or security incidents; or
• protect the rights, property, or safety of UAB DRYND, our users, or others.

Where legally permitted and appropriate, we will seek to limit disclosure to the information reasonably necessary for the request.

We may update this Policy as Blome develops, including when we introduce accounts, email integrations, @blome.app addresses, custom-domain email, payments, analytics, applications, or other new features.

The “Last updated” date at the top of this Policy shows when it was most recently revised.

If a change materially expands how we process Personal Data or reduces your privacy rights, we will provide notice where required by applicable law.

This Policy is governed by the laws of the Republic of Lithuania, subject to mandatory rights and protections available to you under applicable data-protection law.

Nothing in this Policy limits rights that cannot legally be waived.

For questions about this Privacy Policy or to exercise your privacy rights, contact:

UAB DRYND
Vilnius, Lithuania
blome.app

Privacy and support contact details may be published or updated on blome.app.