Privacy Policy — 365 Blossom
Effective: July 22, 2026
365 Blossom ("we", "us") is a habit-tracking app. This policy explains what we collect, why, and what control you have. The short version: we collect only what the app needs to work, we don't run ads or analytics trackers, and we never sell your data.
What we collect
- Account details — your name, email address, and a password (or your Apple ID identifier if you use Sign in with Apple). Used to create and secure your account.
- Habit and mood data — the habits you create, your daily logs, mood check-ins, notes, and your garden progress. This is the content of the app; it is stored on our servers (the app is online-only and keeps no local database).
- AI conversations (Premium) — messages you exchange with the AI coach and the habit/mood context needed to generate weekly reviews and recommendations.
- Subscription state — whether you have an active subscription, validated with Apple or Google. We never see your payment details; billing is handled entirely by the App Store or Google Play.
- Preferences — settings such as timezone, week start, and reminder times.
We do not collect your location, contacts, photos, advertising identifiers, or usage analytics. The app contains no third-party analytics, advertising, or tracking SDKs.
How we use it
- To provide the service: sync your habits, compute streaks and stats, grow your garden, and send the reminders you configure.
- To provide AI features (Premium): your relevant habit, mood, and conversation data is processed by OpenAI acting as our service provider. OpenAI processes this data on our behalf to generate responses and does not use it to train its models under our agreement. AI requests are subject to daily usage limits.
- To manage your subscription: store receipts from Apple/Google are validated on our servers.
We do not sell or rent your data, and we do not share it with anyone except the service providers strictly necessary to run 365 Blossom (hosting, email delivery, and OpenAI as described above), each bound to process it only on our instructions.
Legal basis
We process your data to perform our contract with you (providing the app), and where applicable with your consent (e.g. optional AI features).
Retention & deletion
Your data is retained while your account exists. You can delete your account at any time in Settings → Delete account — this permanently deletes your account and all associated data (habits, logs, moods, garden, AI conversations) from our servers. You can also email us at [email protected] to request deletion.
Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored hashed. Access to production systems is restricted.
Children
365 Blossom is not directed at children under 13, and we do not knowingly collect data from them.
Changes
We'll post any changes to this policy on this page and update the effective date. Material changes will be announced in the app.