Your Security
Data Protection
Last updated: June 7, 2026
"Your memories are precious. We protect them like it."
When you write your memoir on The Blue Sky Project, you are sharing the most personal parts of your life — your childhood, your family, your loves, your struggles. That is an extraordinary act of trust.
We want you to write freely, openly, and without worry. So here, in plain language, is exactly how we keep everything you share completely private and completely safe.
Here is what we promise you, simply put:
🔒
Your memoir is private — only you can read it
Nobody at The Blue Sky Project reads your memoir. No other users can see it. It is stored in a locked, encrypted space that belongs only to you. Think of it like a personal diary kept in a bank vault.
🚫
We never sell your information — to anyone, ever
Your name, email, and everything you write are never sold, shared, or given to advertisers or data companies. Your information exists only to give you access to the platform. Nothing else.
🤖
Your stories are never used to train AI
The AI reads your answers to help write your memoir — and that is all. Your personal stories are never stored or used to teach any AI system — not ours, not anyone else's.
💳
We never see your credit card details
Payments go directly through Stripe — the same payment system used by Amazon and millions of major companies. Your card details never touch our servers. We only receive confirmation that payment was successful.
🗑️
You can delete everything, anytime
Your memoir and account belong to you. If you ever want to close your account and remove all your data, simply email us and everything will be permanently deleted within 30 days. No questions asked.
What we store and how it's protected
This table shows exactly what information we keep, where it lives, and the security protecting it. We use the same systems trusted by major banks, hospitals, and universities worldwide.
| What |
Where it's stored |
How it's protected |
| Your memoir writing & stories |
Supabase
SOC 2 Certified |
Encrypted at rest — scrambled into unreadable code when stored. Only you can access it. |
| Your password |
Supabase
SOC 2 Certified |
Never stored as plain text — immediately converted into an irreversible code (hashed & salted). Even we cannot read your password. |
| Your payment & card details |
Stripe only
PCI-DSS Level 1 |
The highest payment security standard in the world. Your card details never reach our servers — ever. |
| Your name & email address |
Supabase
SOC 2 Certified |
Encrypted and protected. Used only to give you access to your account. Never shared or sold. |
| Your language preference |
Supabase |
Stored only to remember your preferred language (English, French, or Spanish). |
🏦
As secure as your bank — genuinely.
The security certifications on this page — SOC 2 and PCI-DSS Level 1 — are the same standards required of major banks, hospitals, and government institutions. Supabase and Stripe are trusted by thousands of serious companies worldwide, including many you use every day. When we say your memoir is secure, we mean it in the most rigorous, professionally certified sense of that word.
For Schools & Assisted Living Facilities
We understand that institutions have specific privacy responsibilities — especially when it comes to students or elderly residents. The Blue Sky Project is built to meet those needs:
- Each person's memoir is completely private — no administrator, teacher, or staff member can read a user's memoir without their explicit permission
- Student data is never used for advertising or shared with third parties
- We are happy to sign a Data Processing Agreement (DPA) with your institution
- Bulk account deletion can be requested at any time
- Contact us to discuss your institution's specific requirements
Your Rights — In Plain English
You are always in control of your data. Here is what you can ask us to do, any time:
- See your data — ask us to send you everything we hold about you
- Correct your data — ask us to fix anything that is wrong
- Delete your data — ask us to permanently remove your account and memoir
- Download your memoir — export your complete memoir as a file at any time
- Stop hearing from us — unsubscribe from emails with one click, any time
To use any of these rights, simply email hello@theblueskyproject.org — we respond within 2 business days.
"Your story belongs to you. Always."
The Blue Sky Project was built on a single belief: every person's story deserves to be told — and protected. We are the guardians of your memories, not the owners. We will always treat your writing with the privacy, respect, and security it deserves.
If you ever have a concern about how your data is handled, email us personally. We will respond — not a bot, not a form letter — within 2 business days.
Verify Our Partners' Certifications
We believe in complete transparency. Every security claim on this page can be independently verified. Below are direct links to each partner's official security documentation — no need to take our word for it.
Data Processing Agreement (DPA)
A Data Processing Agreement is a formal legal document that defines how personal data is handled between your organization and ours. It is required under GDPR for European users, and is increasingly requested by schools, universities, and healthcare institutions in the United States.
📄
We offer a DPA to all institutions upon request
If you are a school, university, assisted living facility, or any other institution and require a signed Data Processing Agreement before adopting The Blue Sky Project, we are happy to provide one.
Our DPA covers:
- The specific types of personal data we process
- The purpose and legal basis for processing
- Data retention and deletion schedules
- Sub-processor agreements (Supabase, Stripe, Anthropic, Vercel)
- Your rights as a data controller
- Our obligations as a data processor
- Security measures in place
- Breach notification procedures
To request a DPA, email hello@theblueskyproject.org with the subject line "DPA Request" and your institution's name. We will respond within 2 business days.