Privacy Policy

Last updated September 25, 2026

BloomsEye is built to be useful with as little personal data as possible. This policy covers the BloomsEye website, the Studio at studio.bloomseye.com, and the BloomsEye mobile app, and explains exactly what we collect and where it goes.

Who we are

BloomsEye is operated by an independent developer (referred to here as "we", "us", or "the operator"). For any privacy question, or to exercise a right described below, contact us at support@bloomseye.com.

What we collect

Browsing this site and the plant library needs no account and no personal information. Using the Studio as a signed-out guest keeps your work on your own device, in your browser's storage; nothing is sent to us.

If you create an account, we store the email address you sign up with, your password in hashed form, the gardens and plant lists you choose to save, and, if you set it, your hardiness zone. For BloomsEye Pro we also store the studio and client details described under Professional use below. There is no advertising profile behind any of it.

Plants you create yourself

Anyone with a free BloomsEye account can add their own plants to the library. What you enter is stored on your account: the name you give the plant, its botanical name if you add one, its type, size, colors, bloom months, sun and water needs, and anything you write in the private Notes field. Only you can read them. Your plants are never added to the public plant library and never used to train anything, and nobody else sees them unless you choose to share or post a garden that contains one. If you share a garden by link, a plant you created that is planted in that garden travels with it so the garden makes sense to whoever opens the link; your Notes never do. Deleting a plant removes it, and deleting your account removes them all.

Posting a garden to ONLINE

The Studio has a community space called ONLINE where members can post a garden for other gardeners to see and copy. Nothing is posted unless you choose to post it. When you do, the following becomes public: the garden's plan (its beds, paths, structures and plants, including any plants you created yourself), the title and note you write, your hardiness zone if the garden has one, and the display name you type for that post. Your email address, your account details, your garden's location and ZIP code, and any photos attached to the garden are stripped before posting and are never shown. We review every post before it appears, and we may hide a post at any time. You can update or remove your own posts at any time from My Gardens, and deleting your account removes them all. Hearts on posts are counted only; nobody, including us on the page, can see who hearted what. If you report a post, what you write is stored and emailed to us through Resend, as with plant reports below.

Professional use (BloomsEye Pro)

BloomsEye Pro is for garden designers and landscapers working for clients. If you hold Pro, we store two more things you choose to enter: your studio name and website, which are shown on every garden you share by link for as long as your Pro access lasts, and a client label on each garden you give one, which is private to your account. Your clients never have an account with us, and we never contact them. What you enter about a client is stored only to show it back to you and to print it on the plant list and the scaled drawing you make for that client; we do not use it for anything else, do not share or sell it, and remove it when you delete the garden or your account.

You decide what to enter about a client and you are responsible for it under the privacy laws that apply to your business, including telling your clients what you share; where those laws speak of a controller and a processor, you are the controller of your clients' details and we process them on your behalf to provide the service. A garden link you send a client shows the garden's name, its plan and plants, and your studio name and website; it never shows the client label, the address or ZIP code pinned on the garden, any photos attached to the garden, or your account details. If you pin a client's home on a garden, its coordinates are used as described under Location and never appear on the link. The plant list, the CSV and the scaled drawing are made in your browser when you ask for them; we keep no copy.

Reporting a problem with a plant

Every plant in the Studio carries a Report button for telling us that something in its information is wrong. What you type in that box is stored by us and emailed to support@bloomseye.com through Resend so that we can act on it. Stored alongside it are the plant you were looking at and whether you were signed in at the time. To stop the form being abused we also store a one-way fingerprint of your network address, which cannot be turned back into that address and is used only to count how many reports have come from one place today. You do not need an account to report a plant, and a report is not added to your account record or used to build any profile.

Please keep what you write to facts about the plant. Whatever you type is what reaches us, so there is no need to include your name, your address, or anyone else's details.

Where your data lives

Accounts and saved gardens are stored with Supabase, our database and sign-in provider, on servers in the United States, protected so that each account can only ever read its own data. Our websites and app updates are delivered by Cloudflare. Sign-up and password emails are sent through Resend from no-reply@bloomseye.com, which also carries the plant reports described above. The Studio and the mobile app send crash reports to Sentry so we can fix bugs; a crash report describes the error, not your gardens, and sign-in tokens are stripped from it before it is sent. Product-usage events go to PostHog in the United States, as described under Analytics below. When you buy Premium or Pro, checkout and card processing are handled by Stripe and your subscription is managed through RevenueCat: they receive your account id, the email you enter at checkout, and your payment details on their secure pages, and we never see or store your card number. These providers process data on our behalf, under their own security and privacy commitments; we do not sell your data to anyone.

AI features

Two features use an outside AI service, and only when you choose to use them. In the Studio, importing a garden from a photo of a plan sends that photo to Anthropic to read the drawing, and importing a garden from a guide sends the planting text you paste to Anthropic to read the plant names; we keep neither the photo nor the text, and the result is a plan you can edit. The Photo Studio's effects run entirely in your browser, and the small model that measures depth in a photo is downloaded to your browser from Hugging Face, so no photo is uploaded to run them; a photo you bring into a garden's Photo Studio is kept in that garden's plan, so it is saved with the garden if the garden is saved to your account, and it never travels with a share link or a post. A photo you bring into the Studio's standalone Photo tab, and the plants you arrange on it, stay in your own browser's storage so they are still there when you come back; they are never sent to us, they are kept apart per signed-in account and for guests, and clearing the photo removes them.

Location

If you tap "use my location", your approximate coordinates are used once to find your hardiness zone and place name (through OpenStreetMap-based geocoding in the app and the Studio: Nominatim when you use your location or search an address in the Studio's map import, and Komoot's Photon for the address suggestions as you type there). We do not track your location. If you set a location on a garden, that pin (its coordinates, its zone, and in the United States or Canada the ZIP code or province you entered or your location resolved to) is stored as part of that garden so the Studio can show its zone, its weather outlook and the plants native to its state or province; its coordinates and ZIP code are stripped from any garden you share by link or post to ONLINE (the zone travels with the garden, and a province with a share link), and it is deleted with the garden.

If a garden you open in the Studio has a saved location pin, its coordinates are sent to the US National Weather Service (weather.gov, a US government service) to check the coming week's forecast for garden-threatening weather - a frost, or a stretch of extreme heat - so the garden can warn you to cover tender plants or water ahead of a heat wave. Only the coordinate is sent - never your account, name, or email - and nothing about the request is stored by us.

Analytics and cookies

We use Cloudflare Web Analytics, which is cookie-free and aggregate: it tells us which pages are useful without identifying you. We also measure how the product itself is used with PostHog (hosted in the United States): a small set of feature events, such as a garden reaching five plants or the 3D view being opened, tied to a random identifier stored in your browser or, once you sign in, to your account id - never to your name or email, and never for advertising. We do not sell personal data, we run no ad network, and we set no advertising or analytics cookies. Your browser's local storage holds practical things only: your theme choice, a guest garden, the photo and plants you arrange in the Photo tab, a cached copy of the plant catalog, and that random analytics identifier.

Affiliate links

Some plant pages on this site, and the shopping list and plant cards in the Studio, carry a "Buy" or "Shop" link to a store, labeled as a paid link. If you follow it and buy something, we may earn a commission, at no extra cost to you. We do not learn who you are. A list you copy or download from the Studio carries plain store links with no tracking.

Links to Plant Addicts (plantaddicts.com), an online nursery, go through the Awin affiliate network. The link carries an identifier that tells Awin the visit came from BloomsEye and which plant it was for; it says nothing about you. When you follow it, Awin and Plant Addicts may set their own cookies to credit a purchase to us; their handling of that is under Awin's privacy policy and Plant Addicts' own. We set no cookie for it.

BloomsEye is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.

A "Buy on Amazon" link carries a tag that tells Amazon the visit came from BloomsEye. It says nothing about who you are, we set no cookie for it, and no personal data comes back to us. Once you are on Amazon, Amazon's own privacy policy and cookies apply.

How long we keep your data

We keep your account record for as long as your account exists. When you delete your account (see below), we remove it right away. Guest work is stored only on your own device and is never sent to us, so it stays until you clear it. Aggregate analytics and crash diagnostics are retained by those providers in de-identified or aggregated form and are not tied to your name or email.

Deleting your account

You can permanently delete your account and everything saved under it at any time, from inside the product: in the mobile app under Settings, or in the Studio under Profile. Deletion is immediate and removes your saved gardens, your list, your email address, and your sign-in. You can also email support@bloomseye.com and we will delete it for you. Guest work stored on your own device can be cleared from your browser or the app whenever you like.

Your choices and rights

You can ask at any time to see, correct, delete, or receive a copy of the data attached to your account by emailing support@bloomseye.com, and most of it you can already view and remove yourself inside the product.

We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising, so there is nothing for California residents to opt out of on that front; you still have the right to know, delete, correct, and not be discriminated against for exercising these rights. If you are in the United Kingdom, the European Economic Area, or a similar region, you also have the rights to access, correct, erase, restrict, port, and object to our use of your data; our basis for processing it is providing the service you asked for and our legitimate interest in running and improving it. Contact us at the address above to exercise any of these.

Where your data is processed

Our servers and several of the providers above are located in the United States. If you use BloomsEye from outside the United States, your data is transferred to and processed there.

Children

BloomsEye is not directed at children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we will delete it.

Changes

If this policy changes, we will update this page and the date above.

Contact

Questions about this policy: support@bloomseye.com.