Simple by design
BloomDay is a task planner and virtual garden app. We collect only what is necessary to run the app and understand how it is used. We do not sell data, build behavioural profiles, or share your information with advertisers beyond what is required to serve ads on the free plan.
We believe privacy should be the default, not a setting you have to find. This policy is written to be read, not to obscure. If anything is unclear, write to us.
What we know about you
Account information
When you create an account, we collect your email address and a securely hashed password. This is used solely to authenticate your identity. We do not collect your name, phone number, or any other personal identifier.
App data (local only)
Your tasks, garden progress, plant inventory, streak history, achievements, journal entries, time capsules, and preferences are stored locally on your device using on-device storage. None of this data is sent to or stored on our servers.
Usage analytics
To improve the app, we collect anonymous usage patterns such as which screens you visit, which features you use, session duration, and general device information (model, operating system, app version). This data is not linked to your email or personal identity. You can disable this in Settings → Privacy → Analytics.
Only what runs the app
Authentication
Your email and credentials are used to create and protect your account via Supabase. We support email/password and Apple Sign In.
Local persistence
Your tasks, plants, achievements, and progress are saved to your device's local storage so your garden persists between sessions. Data does not sync across devices or to the cloud.
Notifications
If you enable task reminders, the app schedules local notifications on your device. Notifications are never routed through a server. Daily and weekly recurring reminders fire locally.
Account communications
We may use your email for critical account events only: password reset and account deletion confirmation. We do not send marketing emails, newsletters, or promotional content.
How we understand usage
BloomDay uses PostHog, a third-party product analytics service, to understand how users interact with the app so we can improve it. PostHog is used in a privacy-first mode with no behavioural profiling or cross-site tracking.
What PostHog receives
Screen views, feature interactions (e.g. "completed a task", "opened garden"), session duration, app version, device model, operating system version, and a randomly generated anonymous ID. PostHog does not receive your email, name, tasks, journal entries, or any content you create in the app.
Your control
Analytics are enabled by default to help us improve the app. You can turn them off anytime in Settings → Privacy → Analytics. When disabled, PostHog stops collecting data immediately, and no events are sent from your device.
Storage and retention
PostHog stores aggregated usage data on its EU-hosted servers (GDPR-compliant, ISO 27001 certified). Event data is retained for 12 months, after which it is automatically deleted. We do not export this data or combine it with any other source.
Learn more about PostHog's privacy practices at posthog.com/privacy.
Ads on the free plan
The free plan includes occasional ads served by Google AdMob. Ads appear at most once per day and are never shown during Focus Mode or during onboarding.
App Tracking Transparency (iOS)
On iOS, BloomDay asks for your permission before any tracking occurs. You can choose "Ask App Not to Track" and BloomDay will request non-personalised ads only — no behavioural profile is built on you. If you choose "Allow", Google AdMob may use your device's advertising identifier (IDFA) to show more relevant ads. Either choice is fully respected.
Your control
You can change this permission anytime in iOS Settings → Privacy & Security → Tracking → BloomDay.
Upgrading to any paid plan (Bloom, Forest, or Eden) removes all ads permanently.
Who else touches your data
Supabase
Account authentication only. Stores your email and hashed password. No garden or task data is sent to Supabase.
GDPR compliant · SOC 2PostHog
Anonymous product analytics to help us improve the app. EU-hosted, no behavioural profiling. Opt-out available in Settings.
EU-hosted · Opt-out availableRevenueCat
Subscription management via Apple App Store and Google Play. Receives a transaction token only.
No payment data sharedGoogle AdMob
Ads on the free plan. With your consent (via iOS App Tracking Transparency), uses your advertising identifier to show relevant ads. Without consent, shows non-personalised ads only.
Free plan · Consent-basedWhere your data lives
Local storage
Your tasks, plants, streaks, achievements, journal entries, and all garden data are stored locally on your device. We do not store this data on our servers. Your email address is the only personal data we hold.
Deleting the app
Removing the app from your device deletes all local data permanently, including your garden, tasks, and progress. This cannot be recovered.
Account deletion
Settings → Delete Account removes your email from our authentication system and erases all local data. After deletion, we retain nothing.
What you can ask of us
Under GDPR (EU), KVKK (Turkey), CCPA (California), and similar regulations, you have the following rights regarding your personal data:
Access
Request confirmation of what personal data we hold. The only personal data on our servers is your email address.
Deletion
Delete your account in-app (Settings → Delete Account) or by emailing us. This removes your email from our authentication system. All garden and task data is stored locally on your device and is deleted when you remove the app.
Export
Export your task data anytime from Settings → Export Data. Downloads as a CSV file directly to your device. Since all data is local, you always have full control.
Opt-out of analytics
Turn off analytics collection anytime in Settings → Privacy → Analytics. This takes effect immediately.
Not for children under 13
BloomDay is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.
Questions or requests
BloomDay is operated by an independent solo developer based in Turkey. For all privacy enquiries, data requests, or concerns, we respond within 5 business days.
Reach us for any data request, question, or concern.
bloomday.app@icloud.com