Privacy Policy

Last updated August 11, 2026

BloomsEye is built to be useful with as little personal data as possible. This policy covers the BloomsEye website, the Studio at studio.bloomseye.com, and the BloomsEye mobile app, and explains exactly what we collect and where it goes.

Who we are

BloomsEye is operated by an independent developer (referred to here as "we", "us", or "the operator"). For any privacy question, or to exercise a right described below, contact us at support@bloomseye.com.

What we collect

Browsing this site and the plant library needs no account and no personal information. Using the Studio as a signed-out guest keeps your work on your own device, in your browser's storage; nothing is sent to us.

If you create an account, we store the email address you sign up with, your password in hashed form, the gardens and plant lists you choose to save, and, if you set it, your hardiness zone. That is the whole account record. There is no advertising profile behind it.

Reporting a problem with a plant

Every plant in the Studio carries a Report button for telling us that something in its information is wrong. What you type in that box is stored by us and emailed to support@bloomseye.com through Resend so that we can act on it. Stored alongside it are the plant you were looking at and whether you were signed in at the time. To stop the form being abused we also store a one-way fingerprint of your network address, which cannot be turned back into that address and is used only to count how many reports have come from one place today. You do not need an account to report a plant, and a report is not added to your account record or used to build any profile.

Please keep what you write to facts about the plant. Whatever you type is what reaches us, so there is no need to include your name, your address, or anyone else's details.

Where your data lives

Accounts and saved gardens are stored with Supabase, our database and sign-in provider, on servers in the United States, protected so that each account can only ever read its own data. Our websites and app updates are delivered by Cloudflare. Sign-up and password emails are sent through Resend from no-reply@bloomseye.com, which also carries the plant reports described above. The mobile app sends crash reports to Sentry so we can fix bugs; a crash report describes the error, not your gardens. Product-usage events go to PostHog in the United States, as described under Analytics below. When you buy Premium, checkout and card processing are handled by Stripe and your subscription is managed through RevenueCat: they receive your account id, the email you enter at checkout, and your payment details on their secure pages, and we never see or store your card number. These providers process data on our behalf, under their own security and privacy commitments; we do not sell your data to anyone.

AI features

One feature uses an outside AI service, and only when you choose to use it. In the Studio, importing a garden from a photo of a plan sends that photo to Anthropic to read the drawing; we do not keep the photo, and the result is a plan you can edit. Photos you use in the Photo Studio never leave your device; those effects run entirely in your browser.

Location

If you tap "use my location", your approximate coordinates are used once to find your hardiness zone and place name (through BigDataCloud and phzmapi.org in the app, and OpenStreetMap-based geocoding in the Studio's map import). We keep the resulting zone if you save it. We do not track or store your location.

If a garden you open in the Studio has a saved location pin, its coordinates are sent to the US National Weather Service (weather.gov, a US government service) to check the coming week's forecast for garden-threatening weather - a frost, or a stretch of extreme heat - so the garden can warn you to cover tender plants or water ahead of a heat wave. Only the coordinate is sent - never your account, name, or email - and nothing about the request is stored by us.

Analytics and cookies

We use Cloudflare Web Analytics, which is cookie-free and aggregate: it tells us which pages are useful without identifying you. We also measure how the product itself is used with PostHog (hosted in the United States): a small set of feature events, such as a garden reaching five plants or the 3D view being opened, tied to a random identifier stored in your browser or, once you sign in, to your account id - never to your name or email, and never for advertising. We do not sell personal data, we run no ad network, and we set no advertising or analytics cookies. Your browser's local storage holds practical things only: your theme choice, a guest garden, a cached copy of the plant catalog, and that random analytics identifier.

Affiliate links

Some plant pages carry a "Buy on Amazon" link, labeled as a paid link. If you follow it and buy something, we may earn a commission, at no extra cost to you.

BloomsEye is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.

The link carries a tag that tells Amazon the visit came from BloomsEye. It says nothing about who you are, we set no cookie for it, and no personal data comes back to us. Once you are on Amazon, Amazon's own privacy policy and cookies apply.

How long we keep your data

We keep your account record for as long as your account exists. When you delete your account (see below), we remove it right away. Guest work is stored only on your own device and is never sent to us, so it stays until you clear it. Aggregate analytics and crash diagnostics are retained by those providers in de-identified or aggregated form and are not tied to your name or email.

Deleting your account

You can permanently delete your account and everything saved under it at any time, from inside the product: in the mobile app under Settings, or in the Studio under Profile. Deletion is immediate and removes your saved gardens, your list, your email address, and your sign-in. You can also email support@bloomseye.com and we will delete it for you. Guest work stored on your own device can be cleared from your browser or the app whenever you like.

Your choices and rights

You can ask at any time to see, correct, delete, or receive a copy of the data attached to your account by emailing support@bloomseye.com, and most of it you can already view and remove yourself inside the product.

We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising, so there is nothing for California residents to opt out of on that front; you still have the right to know, delete, correct, and not be discriminated against for exercising these rights. If you are in the United Kingdom, the European Economic Area, or a similar region, you also have the rights to access, correct, erase, restrict, port, and object to our use of your data; our basis for processing it is providing the service you asked for and our legitimate interest in running and improving it. Contact us at the address above to exercise any of these.

Where your data is processed

Our servers and several of the providers above are located in the United States. If you use BloomsEye from outside the United States, your data is transferred to and processed there.

Children

BloomsEye is not directed at children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we will delete it.

Changes

If this policy changes, we will update this page and the date above.

Contact

Questions about this policy: support@bloomseye.com.