Bloo opens your car from your phone. The sensitive parts are encrypted, and it keeps nothing about you on a server, because there isn't one. Here is the full version, in order.
Short versionYour password and service PIN are encrypted on your phone. We run no server, track nothing and sell nothing. The code is public, so you can check.
Short versionWe are an independent app. We are not Hyundai, Genesis or Kia.
Bloo is an independent app that talks to the Bluelink and Connected Car services of Hyundai, Genesis and Kia. It is not made by, endorsed by, or affiliated with Hyundai Motor Company, Genesis, Kia, or any of their subsidiaries. If you were hoping for a corporate tie-in, we're sorry to disappoint. Our marketing budget is one biscuit.
Short versionYour password and service PIN are encrypted before they are saved, with the key kept in your phone's security chip.
Every sensitive thing Bloo keeps is encrypted before it is written to your phone:
In plain words: Bloo encrypts your password once, and then the phone encrypts the app's storage as well. The password is never lying around as text. Not on the phone, not on a server, not in a log.
What that means in practice: if you change your phone's lock, or your phone resets its security key, your saved sign-ins may have to be entered again. Nothing can recover them without that key, so we cannot either.
A note on the phrase "nothing unencrypted." It is accurate for your phone and for everything Bloo writes to it. It is not a claim about your car maker's servers, which have their own policy, or about what Google does with a file in your Google Drive if you turn sync on. Those are covered below.
Short versionYour car maker, when you use your car. GitHub, to check for updates. Nowhere else.
If you turn on Drive sync, your settings (never your password) are written to a file in your own Google Drive, so your other devices can read them. We cannot see that file. We would not know what to do with it if we could.
The on-device AI summaries run on your phone. Nothing you summarise leaves it.
Short versionWe sell nothing and take no payments. Your car maker handles any charges.
Bloo does not sell anything. There is no shop, no subscription, and no button that begs you to upgrade. It does not take payments, hold money, or store card details. It is not a bank, a car dealer, or a fairground ride.
A transaction, meaning something you asked the car to do, works like this:
If you ever see a charge on your card with the word "Bloo" on it, it was not us. We would like to know who is impersonating us, and we would like a word with them about their taste.
Short versionChange your car maker password, sign out of Bloo, and call your car maker.
This is the part where policies start making promises, so we will stick to facts. Nobody can promise a determined criminal will never get into your car. What Bloo does is make sure the app is not the weak link, and that you always have a plan.
What protects you already:
What to do if you think your car has been taken over:
If we learn of a weakness in the app that a pirate could use, we will fix it, record it in the change log below, and tell you what to do. We would rather you heard it from us than from a news story about a car that drove itself into a lake.
Short versionNo name, address, contacts or phone location. Only your car's location, from your car maker.
Short versionEvery permission is optional, and each one unlocks one feature.
Bloo asks only for what a feature needs, and every one of them is optional. Location, to find your car and to run AutoLock. Notifications, for car alerts. Bluetooth, for AutoLock with your car's own connection. Activity recognition, so AutoLock knows when you are driving. Say no to any of them and that feature sulks quietly. Nothing else breaks.
Short versionSign out to delete your credentials. Uninstall to delete everything else.
There is nothing for us to export, delete, or correct, because we do not have it. This is the one time a lack of infrastructure works in your favour.
Short versionThe code is public on GitHub, so you can check every claim here.
Bloo is open source. The whole app, including the encryption code, is on GitHub, and you do not have to take our word for any of this:
shared/src/main/java/com/bloo/bluelink/data/SecureVault.kt.shared/src/main/java/com/bloo/bluelink/data/CredentialStore.kt.shared/src/main/java/com/bloo/bluelink/data/UpdateApi.kt.If you are suspicious, good. Go and look. If you find something that does not match this page, please tell us, and we will fix the code or the page, whichever is wrong.
Short versionBloo is not for children.
Bloo is not for children, and we do not knowingly collect anything from them. If you are a child reading this, go and ask a grown-up to show you a car instead.
Short versionEvery change is dated in the change log below.
When this policy changes, the date at the top changes too, and the change is written below in plain words. We do not make quiet edits in a drawer.
Short versionQuestions go to adi1.perets@gmail.com.
Questions, complaints, or a pirate who would like to apologise: adi1.perets@gmail.com.
The cat is not a data processor. The cat has never been consulted. The cat is fine with this.
Bloo is unofficial. It is not affiliated with, endorsed by, or operated by Hyundai Motor Company, Genesis, Kia, or any of their subsidiaries.