BlueFlash is in BETA. We're a small team building an aviation oral-exam tutor.
This page describes what we collect, what we don't, and what you can turn off.
Microphone
- We capture your voice only while a session is active (after you tap "Start session").
- Audio is sent to our backend for the tutor’s existing speech-to-text processing and is not retained. We may retain the resulting transcript, typed commands, tutor replies, study-page and session actions in a private operator-only journal to diagnose errors and improve the service. We do not run a second transcription for analytics.
- The session journal may include your account or guest identifier, device/browser information, IP address and browser-reported timezone/language. These are approximate network/location hints, not GPS tracking. By default, events expire after 30 days and are subject to storage limits; the operator can disable recording, switch off text/IP storage, or delete the journal independently of account and payment records. Contact us to request deletion of your recorded history.
- Tap Pause or Stop any time to cut the mic immediately.
Camera (attention tracking, optional)
- If you allow camera, BlueFlash runs a lightweight face-landmark model on your device (MediaPipe / WebAssembly).
- Only a single label per second — focused, away, or dozing — is sent to our backend. Video frames never leave your device.
- You can turn the camera off any time with the "Attention: ON/OFF" button, or decline on first visit.
What we store on our server
- If you sign in with Google, Apple or Facebook, we store your provider account identifier and the basic profile details you approve (such as name, optional email and profile picture) to keep your study progress and access linked to your account. We do not receive your social-account password. Sign-in is not permission to read your posts, friends or groups.
- A random device ID your browser generates on first visit (so we can say "welcome back, you were on Q12").
- Your MCQ progress per pack: which questions you've seen, correct/wrong counts, total time spent.
- Basic server logs (timestamp, response times) for debugging. Rotated periodically.
What we do not store
- Raw audio recordings.
- Camera frames of any kind.
- Your social-account password, private social messages, friends list or precise GPS location.
- Analytics cookies, third-party trackers, or advertising SDKs.
Third-party services
When you use API mode, your transcribed text (not audio) is sent to
DeepSeek's chat API to generate the tutor's reply. See
DeepSeek's
own terms for how they handle it. When you use Local mode, no cloud LLM is called at all —
everything runs on the local machine hosting BlueFlash.
Deleting your data
To wipe the device ID and progress from this browser, open DevTools → Application → Local Storage →
clear entries for this site. To have us purge your device ID from our server, email us at
the contact address on the landing page (beta feedback welcome at the same place).
Changes
We'll update this page if anything material changes. No tracking, no newsletters, no spam.