Legal
Privacy Policy
This policy explains what personal information Blushing collects and how we use it. The data controller is Cakesfam Online Shop (DTI Business Name No. 5462110), Taguig City, Philippines. For any privacy request, email hello@blushing.app. We handle personal data in line with the Data Privacy Act of 2012 (R.A. 10173).
What we collect
- Creator details: the email address you give when you create an ask.
- Invitation content: the recipient's first name and the question you write, plus any date, time, or place a recipient enters when responding.
- Payment metadata: the reference and status of an unlock payment from PayMongo. We never receive or store your card, bank, or wallet credentials.
- Minimal analytics: first-party event counts and identifiers to understand how the service is used. We do not use third-party advertising trackers, and our analytics store IDs and counts — not names or emails.
How we use it
To deliver and display invitations, send transactional emails (such as a "your invite is ready" notice or a payment receipt), process unlock payments, provide support, keep the service secure, and understand product usage in aggregate.
Who we share it with
We use trusted providers to run the service, and share only what each needs:
- PayMongo — payment processing;
- Resend — sending transactional email;
- Fly.io — application hosting;
- Cloudflare — content delivery and security.
We do not sell your personal information.
Retention and your rights
We keep personal data only as long as needed for the purposes above or as required by law. Under the Data Privacy Act you may request access to, correction of, or deletion of your personal data, and you may withdraw consent. Recipients and creators can unsubscribe from emails using the link in any message, and you can ask us to delete an invitation. To make a request, email hello@blushing.app.
Security
We protect your data with reasonable safeguards — encrypted connections (HTTPS), signed payment webhooks, and data minimisation (we collect first names and emails, not sensitive identifiers). No system is perfectly secure, but we work to keep your information safe.
See also our Terms of Service and Refund & Cancellation Policy.