Privacy Policy

We try to collect only what we need to help your plants thrive.

• Account details — your email address and a password when you sign up, the name you'd like Sprig to call you, and a username if you set one. (If you use Sign in with Apple, we get the name and email Apple shares with us — which can be Apple's private relay address.)
• Your jungle — the plants you add, their photos, your notes and care history, and your reminder schedules.
• Photos you snap — the images you take or upload to identify a plant or check its health, plus any note you type to describe symptoms.
• Getting-to-know-you answers — what you tell us during onboarding, like your gardening experience, the light in your home, and your reminder preferences.
• Subscription status — whether you're on Bloom Pro, your plan and renewal dates, received from the app store via our subscription partner RevenueCat (which also receives basic device details as part of processing purchases — see §05). We never see or store your card details.
• Notification plumbing — if you allow notifications, your device's push token; and if you turn on reminders, your timezone so they arrive at the right moment.
• Technical basics — standard server logs (like your IP address and the time and type of each request, tied to your account ID) and counts of feature use (like how many identifications you've run) so we can keep Bloom fast, fair, and affordable. IP addresses are used for security and rate-limiting, never to locate you. We don't collect advertising IDs or precise location — and we strip location data out of photo files before storing them.

Your information helps us:

• Identify your plants, diagnose their health, and personalize their care.
• Send you gentle, timely watering and care reminders.
• Keep your jungle in sync across your devices.
• Keep Bloom safe and sustainable — preventing abuse, limiting spend on our AI features, and fixing problems.
• Send you service messages that matter, like password resets or changes to these policies.

For our friends in Europe: running your jungle and syncing it is how we perform our contract with you; security, rate-limiting, and server logs rest on our legitimate interest in keeping Bloom safe and working; and notifications and sending a photo to our AI partner happen with your consent, which you can withdraw anytime.

Bloom only uses your camera when you choose to snap a photo. To identify a plant or diagnose its health, your photo (and any symptom note you add) is sent to our servers and then to Anthropic, the AI provider whose Claude models power identification. Anthropic processes photos only to give us the answer — under its commercial terms it does not use them to train its models, and it retains them only for a limited period for safety monitoring.

Photos you save are stored in your jungle with our cloud storage provider so you can look back on how each plant has grown. We strip hidden metadata (like GPS location) from every photo before it's stored, photos live at long, unguessable addresses, and identification photos are never linked to your name when processed.

When you delete your account, we delete your photos. Deleting a single plant removes it from your jungle right away, and its remaining data — including photos — is fully erased when your account is deleted. As described in our Terms, an especially clear photo may serve as a species' reference image in Bloom's shared catalog, never linked to you; catalog reference images can outlive your account, so tell us anytime — even after deleting — and we'll swap yours out.

If you allow them, we send push notifications for watering and care reminders, and to let you know when a plant identification is ready — they may mention your plants by name. You're always in control: adjust your reminder schedule in Bloom's settings, and switch notifications off anytime in your device's notification settings. When you sign out, we deregister your device so it stops receiving that account's notifications, and any token that goes unused for 90 days is deleted automatically.

We do not sell your personal information, and we don't share it for advertising. Ever.

We share data only with the service providers who help us run Bloom, each getting only what it needs:

• Anthropic — analyzes your plant photos and symptom notes to power identification and diagnosis.
• Supabase — hosts our database and handles sign-in.
• Cloudflare — stores your plant photos.
• Apple (and Google, on Android) — processes payments and delivers push notifications.
• RevenueCat — processes your purchase receipts and subscription status on our behalf; it receives your account ID and basic device details, never your card number.
• Fly.io — hosts our servers.
• Sentry — helps us catch errors (error reports can include your account ID, never your photos or email).

Our service providers that act on our instructions — Anthropic, Supabase, Cloudflare, RevenueCat, Fly.io, and Sentry — are bound by agreements requiring them to protect your data to the same standard we promise here and to use it only to provide their service to us (Anthropic may briefly retain photos for safety monitoring, as described above). Apple and Google handle payments and notification delivery under their own privacy policies. Beyond that, we'd only disclose information if the law genuinely requires it — and if Bloom is ever acquired or merges with another company, your data may move with it; the new home will have to honor the promises in this policy, and we'll tell you before anything changes.

There's no third-party analytics or advertising SDK in Bloom — no trackers, no ad profiles, no selling of attention. To understand what's working we rely on our own server-side records, like error logs and counts of how often features are used.

We keep your information for as long as your account is active — your care history and identification records stay with your account so your jungle's story stays intact. Push tokens are deleted after 90 days of inactivity, and routine server logs are kept only for a short, fixed period.

If you delete your account, your data — profile, plants, photos, care history, identification records, and reminders — is erased immediately. A few things can linger a little longer: short-lived server logs and backups (which expire on a fixed schedule), subscription records our billing partners must keep, a photo serving as a species' reference image in the shared catalog (never linked to you — ask us anytime and we'll remove it), and anything we're legally required to hold on to.

It's your data. You can:

• Access and review the information we hold about you.
• Correct anything that's wrong.
• Export a copy of your plants, care history, and account data — just ask us.
• Delete your account and data entirely, right in the app: *You tab → Delete Account*. Deletion is immediate and permanent.

Depending on where you live — for example under Europe's GDPR or California's CCPA — you may also have rights to data portability, to restrict or object to processing, to non-discrimination for exercising your rights, and to complain to your local data-protection authority. Where we rely on your consent (like notifications, or sending a photo for AI identification), you can withdraw it at any time — withdrawing doesn't affect what happened before. Since we never sell or share your data for advertising, there's nothing to opt out of — but for anything else, just reach out and we'll help.

Deleting your Bloom account doesn't cancel a Bloom Pro subscription — do that in your App Store or Google Play settings, ideally first.

We protect your information with encryption in transit and at rest, store your sign-in session securely on your device, limit who can access our systems, and strip sensitive metadata from photos. No app or service can promise perfect security, but we work hard to keep your jungle safe.

Bloom isn't designed for children under 13, and we don't knowingly collect their information. If you believe a child has given us data, let us know and we'll remove it.

Bloom's servers and service providers are located in the United States, so your information is stored and processed there — which may be a different country than yours. Wherever it travels, we protect it under this policy, and our providers commit to recognized transfer safeguards (like standard contractual clauses) for data from the EU, UK, and elsewhere.

If we make a meaningful change to this policy, we'll let you know in the app or by email before it takes effect. Questions about your privacy, or want to exercise any of your rights? The Bloom team is always happy to help — write to us at hello@bloomsprout.app.

Bloom is made by Solac Labs LLC, 8895 Marlene St, Riverside, CA 92503, USA.