Privacy Policy — Blackbird
Blackbird lets you enter a username or email address and checks it against a bundled list of public websites to see which ones have a matching account. It does this by sending a request to each site's own publicly-reachable "does this account exist" endpoint — the same information visible by visiting each site directly.
What data we collect
The username or email you search: Used only to build the request sent to each third-party site being checked, and to the optional AI summary feature described below. It is not sent to, or stored by, any server operated by us. It is not logged, retained, or used for any purpose other than performing the search you asked for, for the duration of that search.
Search results: Found-account results are kept only in the app's memory for the current session, and are written to a file only when you explicitly choose to export to CSV or PDF, to a location you choose. We do not receive a copy of your results or exports.
AI summary (optional feature): If you tap "Analyze with AI," the names of the sites where an account was found (for example, "GitHub, Reddit, Steam") are sent to our hosted AI summary service (ai.blackbird.run) to generate a short behavioral summary. The username or email you searched is never included in this request — only the list of site names. This service issues a temporary device-scoped API key and enforces a daily usage quota; no account or sign-in is required.
What data we share with third parties
The sites being checked: By design, the username or email you enter is sent directly from your device to each third-party site's public endpoint as part of the check — that's how the app determines whether an account exists. We don't control what those individual sites log on their end; the request is equivalent to what a browser would send visiting that site directly. Blackbird only reads whether the response indicates an account exists — it does not access private pages or bypass authentication on any site.
AI summary service: As above, only found-site names are sent to ai.blackbird.run for this optional feature.
What we don't do
- No account creation or sign-in
- No advertising, no ad SDKs, no advertising identifiers collected
- No analytics or crash-reporting SDKs
- No location, camera, microphone, or contacts access
- No data sold to third parties
Data storage and deletion
Blackbird stores, locally on your device only:
- A cached AI-summary API key (cleared any time from Settings → "Clear cached AI key," or by clearing the app's storage/uninstalling)
- Any CSV/PDF files you explicitly chose to export, wherever you saved them
Because no search data is transmitted to or stored on servers we operate, there is nothing on our end to request deletion of. Uninstalling the app removes all locally cached data.
Network security
All requests to our own AI summary service use HTTPS. Requests to the individual third-party sites being checked use whichever scheme (HTTPS, or in a small number of legacy-site cases, HTTP) that site's own public endpoint requires; this is unrelated to your search terms' handling by us and mirrors what a browser sends to that same site.
Responsible use
Blackbird only surfaces whether a public account page exists at each site — the same information visible by visiting each site yourself. Please only use Blackbird for accounts you're authorized to look up: your own, or research where you have a legitimate basis. Don't use it to harass, stalk, or monitor another person.
Changes to this policy
If this policy changes, the "Last updated" date above will change and the current version will always be reachable at this same URL.
Contact
jacob@leafrunnertechnologies.com