Privacy Notice
Last updated: May 6, 2026
1. Who we are
Bloomly (the "Service") is operated by Harold Jay Judd, trading as Bloomly ("we", "us", "our"). We are the data controller for personal data processed in connection with the Service. Contact: utahinspired@hotmail.com.
2. Personal data we collect
- Account data: name, email address, login credentials.
- Profile & planner content: goals, habits, journal entries, prompts you submit, and AI outputs generated for you.
- Support communications: messages you send to us.
- Usage & telemetry: pages visited, features used, error logs.
- Device & technical data: IP address, browser, device identifiers, approximate location derived from IP.
- Billing identifiers: Paddle customer/subscription IDs (full payment details are collected and stored by Paddle, not by us).
3. Why we use your data & legal basis
- Provide the Service (account creation, generating planners and insights) — performance of contract.
- Customer support — performance of contract / legitimate interest.
- Security & fraud prevention — legitimate interest and legal obligation.
- Product improvement & analytics (in aggregated form) — legitimate interest.
- Marketing communications (only if you opt in) — consent.
- Compliance with legal obligations — legal obligation.
4. Who we share your data with
- Service providers / sub-processors we rely on to run the Service: hosting and database (Supabase / Lovable Cloud), AI model providers (Google, OpenAI) for generating planner and insight content, and email delivery (Microsoft Outlook / Microsoft 365).
- Paddle.com — our Merchant of Record for the sale of subscriptions. Paddle handles payments, subscription management, tax compliance, invoicing and refunds, and is a separate data controller for that data.
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law, court order, or to protect our rights.
5. AI processing
When you generate a planner or insight, the prompts and relevant context you provide are sent to third-party AI model providers (e.g. Google Gemini, OpenAI) to generate the response. We do not use your private content to train third-party models beyond what is needed to fulfill your request.
6. International transfers
Our service providers may process data outside your country, including in the United States and the European Union. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) for those transfers.
7. Data retention
We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce agreements. Planner content is deleted (or anonymized) when you delete your account, subject to backup retention windows.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion ("right to be forgotten");
- restrict or object to certain processing;
- request portability of your data;
- withdraw consent at any time (where processing is based on consent);
- lodge a complaint with your local data protection authority.
To exercise these rights, email utahinspired@hotmail.com. We respond within one month.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and audit logging. No system is 100% secure, but we work to keep your data safe.
10. Cookies
We use essential cookies needed for the Service to function (authentication, preferences). We do not run third-party advertising cookies. If we add analytics or marketing cookies in the future, we will request your consent first.
11. Children
Bloomly is not directed to children under 16 and we do not knowingly collect their data.
12. Changes to this notice
If we make material changes, we will notify you by email or in-app notice.
13. Contact
For privacy questions or to exercise your rights, contact utahinspired@hotmail.com.