Privacy Policy

Blueprint is private by design. It grades a building from official public records, and it does that work on your device. We do not run accounts, we never sell your data, and we collect only what this page describes. From version 1.3.5, the apps record the searches you make (the address, the market, and the result) to improve coverage; there is no setting to turn this off, and grading itself still happens entirely on your device. See section 5 below for exactly what is sent, and for how this worked in earlier versions. This website records the lookups made on it, including the address searched and the result shown, so we can see which places people need and whether results are good; see section 5 below for exactly what that means. Address lookups themselves go directly from your browser to the city's data portal; if your browser or network blocks that, the lookup is relayed through our server, which forwards the address to the city and does not log it (it keeps the city's reply for up to five minutes so a repeat lookup is fast, then discards it). Blueprint is part of Vasly.

1. The short version

• We never sell your data, in the apps or on the website.
• From version 1.3.5, the apps record each search you make; there is no setting to turn this off; see section 5 for exactly what that sends and how earlier versions worked.
• There is no account and no sign in.
• No analytics SDK and no advertising in the iOS or Android apps.
• This website records the lookups made on it: the address you typed, which market, the outcome and grade shown, and a random ID for this install (so we can see how many lookups come from the same install), kept for one year. It is cookieless and there is no account behind it. Lookups themselves go directly from your browser to the city's data portal; if your browser or network blocks that, the lookup is relayed through our server, which forwards the address to the city and does not log it (the city's reply is kept for up to five minutes, then discarded). Requests to the US Census also go through our server so the site can use the Census API key server-side; the address fragment queried there is not stored.
• Grading runs on your device by calling public data sources directly.
• The Pro subscription is handled by Apple or Google, not by us.

2. What data is used, and where it goes

The address you search

In the iOS and Android apps, the address (or the location you choose) is sent directly from your device to public and government data sources to look up the records for that building. That lookup is separate from the search record described in section 5: from version 1.3.5, the app also sends us the search details described there for every lookup, with no setting to turn this off. Earlier versions worked differently; see section 5.

On this website's free lookup page, the lookup itself works the same way (straight from your browser to the city's own data portal, or our relay if that is blocked), but the search is also recorded on our own server for one year: the address you typed, the market, the outcome and grade shown, and a random ID for this install. See section 5, "Analytics and tracking," for the full disclosure and why we do this.

Approximate location

If you grant location access, Blueprint may use your approximate location to help with search, augmented reality (AR), and the point-and-grade feature, so it can find the building near you. Location is used on your device to perform the lookup. It is not stored on a server by us. You can use the app by typing an address instead, and you can turn off location access at any time in your device settings.

The on-device AI advisor

Blueprint's AI advisor runs locally on your device. Your questions to the advisor are processed on the device and are not collected by us.

Records and results

The public records and the computed A to F grade are fetched for your view and cached on your device so the app is fast. This cached data lives on your device and is cleared when you delete the app.

3. Public and government data sources

Blueprint reads from official public records (for example code violations, complaints, litigation, and hazards). The A to F grade is Blueprint's own calculation based on those records. It is not an official rating, and the source data may be incomplete or delayed. See the Terms of Service for the full disclaimer.

When your device contacts a public data source or a map provider, that provider receives the network request needed to answer it (for example the address being looked up). Those providers handle that request under their own privacy terms.

For an address in England or Wales, Blueprint's server looks up that address's public Energy Performance Certificate from the MHCLG register and returns the band, score, and a short list of recommended improvements. This lookup is cached on our server for up to 7 days (so a repeat lookup of the same postcode is fast) and is not combined with any other data we hold, including the search records described in section 5. MHCLG is the source, and we never request or show the assessor's name or contact details, even where the register carries them.

For an address anywhere in the United Kingdom, the UK report shows a link to Ofcom's own broadband coverage checker. Tapping it opens Ofcom's website in your browser; nothing is sent to our server for this, and no postcode or address is looked up on your behalf.

4. Purchases

Blueprint Pro is an annual subscription of $14.99 per year. Payments are processed by the Apple App Store or Google Play. We do not see or store your card details. Your purchase and any receipt are handled by the store under its own privacy policy.

5. Analytics and tracking

This section covers two separate things: what the apps always record for each search, and what this website's lookup page always records.

The apps: search history (always recorded, from 1.3.5)

This has changed twice, and we want to be precise about each version rather than blur them together. Before version 1.3.4, the apps sent nothing to us. Version 1.3.4 added an optional "Share searches to improve coverage" setting in Settings, off by default, and an app on that version with the setting left off still sent nothing. From version 1.3.5, the apps always record each lookup; there is no setting to turn this off. The app's setup screens and Settings > Privacy describe this. Grading itself still happens entirely on your device either way; this section is only about the search record sent afterward.

For each lookup, the app sends to Blueprint's own server, blueprint.vasly.app (the same first-party counter this website already uses; not a third party, and not an analytics SDK):

• the address searched: as you typed it, or as the app resolved it (for example the building Point and grade found from your location, or a link that adds the city name), and the result shown (market, grade, score), the date window for US cities, and, for international reports, a short summary line,
• a random ID for this install, so we can see how many lookups each install makes, and
• the platform (iOS or Android).

A few other actions. With the same random install ID and the same one-year retention, we are also adding these events ahead of the app version that ships them, so this disclosure is in place before any of them starts sending: saving a building, using a refresh-this-report or "refresh and compare" action, a share sheet opened or a link copied, the app opened from a shared Blueprint link, and a Pro subscription purchase or renewal (the product id and billing period only, never a price or a receipt). None of these include note contents, contact details, or anything else that could identify a person.

Point and grade (AR). From the app version that adds UK energy ratings to Point and grade, tapping a pin in the camera view is recorded like a search (the building's address and the grade or energy band shown, with the random install ID above). Each AR session also sends one summary line: the postcode district (UK) or city (US), how many pins were shown and the mix of grades or bands. Pins that are only shown on screen, your GPS position, the route you walk and camera images are never sent.

What this does not send. No account, no name, no advertising identifier, no location coordinates (the AR summary above names only a postcode district or city), and no contacts. The random install ID above is not any of these: it is not linked to your account, your Apple ID or Google account, or any advertising ID. Grading still happens on your device either way; this record is only the search itself, sent after the fact.

Abuse detection and retention. We do not store the IP address behind a search. To spot abuse, each record carries a short one-way hash of the IP made with a random salt that changes every day and is then discarded, the same method described for the website below. The hash stays with the record until the record is deleted, but because the salt is gone it cannot be turned back into an IP, and it cannot link a search on one day to a search on another. Records are deleted automatically after one year. They are never sold, never shared, and never used for advertising or tracking.

Why we record it. Seeing which cities and countries people search tells us where to add coverage next, and seeing which addresses fail tells us what to fix.

There is no setting to turn this off. If you would like a specific search deleted sooner than its automatic one-year expiry, email hello+blueprint@vasly.app with the address and roughly when you searched it. Deleting the app resets the random install ID described above.

On iOS, the privacy manifest (PrivacyInfo.xcprivacy) reflects this: it declares two collected data types, Search History and Device ID (the random install ID described above), both not linked to you, used for the Analytics purpose. NSPrivacyTracking stays false for both, this is not tracking.

The website

On this website's free lookup page, we record what you search. This is separate from the apps, and we want to be plain about it rather than bury it. When you run a lookup at /grade, we record:

• the address as you typed it,
• which city or country you searched in,
• the outcome and the grade or score shown, the date window, and when a data source fails, which one,
• a random ID for this install, so we can see how many lookups come from the same browser,
• a timestamp.

Separately, and without the address, the page also counts a few actions: opening the records behind a result, tapping an install button, and adding or removing a building from compare. We are also adding these events ahead of the feature that will use them, so this disclosure is in place before any of them starts sending: saving a building, using the refresh-this-report action, a share sheet opened or a link copied (the shared link carries a marker so an open from it can be counted as "arrived from a share," market only), and the page being opened from a shared Blueprint link. None of these include the address, note contents, or anything else that could identify a person.

Why we record it. Seeing which addresses and markets people search, and how many lookups come from the same install, tells us where to add coverage next; seeing whether the results we gave were good, and where our coverage has gaps, tells us what to fix instead of guessing. It is sent directly to this site's own server, not to any third-party analytics service.

What this is not. There is no account behind it. We do not store your IP address or a cookie alongside the search. The random install ID described above is not linked to you, your account, or any advertising ID; it only shows that several lookups came from the same browser, and clearing your browser's site data resets it. To spot abuse, each record does carry a short one-way hash of your IP made with a random salt that changes every day and is then discarded. Searches from the same source on the same day share that hash, which lets us see whether a single source is flooding the service; because the salt is thrown away, the hash cannot be turned back into an IP or used to recognise you on another day. A stolen log therefore reveals nothing about who searched. To enforce request limits, the server also keeps per-minute counters keyed by the same kind of daily-salted hash; they are deleted within a few minutes.

There is no setting to turn this off. If you would like a specific search deleted sooner than its automatic one-year expiry, email hello+blueprint@vasly.app with the address and roughly when you searched it.

Hosting logs. Like any website, our host (IONOS) keeps standard web server access logs under its own policy. They record the page addresses requested, so a /grade link or a relayed lookup that contains an address appears there. We do not use these logs for analytics.

Point and grade (AR) and these logs. From the app version that adds UK energy ratings to Point and grade, the app downloads small location files of public address points (Ordnance Survey and ONS open data) for the area around you, from this site. Each file covers a square from a few hundred metres to five kilometres across, so the host's access log for that request shows, together with the requesting IP address, roughly which area the view was used in. Like the other access logs, these are kept by IONOS under its own policy and are not used by us for analytics or to follow anyone.

The lookup request itself is separate from that record. The address you type is sent from your browser straight to the city's own open-data portal to fetch the records, exactly as the apps do; if your browser or network blocks that, our relay forwards the request on your behalf without logging it; it keeps the city's reply for up to five minutes so a repeat lookup is fast, then discards it. That relay promise is unchanged. What changed is that this site's own server now also keeps the search record described above, separately from the relay, for the one year noted.

6. Data retention

Because grading and caching in the apps happen on your device, the data the apps use stays on your device. Cached records and your settings are removed when you delete the app or clear the app's data. From version 1.3.5, the apps always send us the search record described in section 5, so there is server-side app data for every search; earlier versions differed (see section 5).

This website's recorded searches, and the app searches described in section 5, are the data we hold on our own server, and both are deleted automatically after one year.

7. Children

Blueprint is intended for adults making housing decisions. It is not directed at children, and we do not knowingly collect personal data from children. Nothing is tied to an account or identity, so there is no profile to remove.

8. Your rights

Privacy laws such as the GDPR, UK GDPR, and CCPA give you rights over your personal data, including the right to access, correct, or delete it. The apps do not collect personal data linked to your identity, so there is generally nothing tied to you for us to provide or erase; any data on your device is under your control and is removed when you delete the app. The exceptions are this website's recorded searches and the app searches described in section 5: neither is tied to any account or identity, but if you want a specific recorded search deleted before its automatic one-year expiry, contact us with the address and roughly when you searched it and we will remove it.

9. Changes to this policy

We may update this policy as the app changes. When we do, we will revise the date at the top of this page.

• 12 October 2026: for an address anywhere in the United Kingdom, the UK report now shows a link to Ofcom's own broadband coverage checker. Nothing is sent to our server for this, and no postcode or address is looked up on your behalf.
• 10 October 2026: disclosed, ahead of the app and website versions that will send them, five new events the same analytics will record: saving a building, a refresh action, sharing (sheet opened or link copied), the app or site being opened from a shared link, and a Pro purchase or renewal (product id and billing period only).
• 7 October 2026: for England and Wales, an address lookup now also fetches that address's public Energy Performance Certificate from the MHCLG register, server-side and cached for up to 7 days.
• 6 October 2026: search records now include a random ID for this install and are kept for one year.

10. Contact

Questions about privacy? Email hello+blueprint@vasly.app. We usually reply within a couple of days.