Privacy Policy

PawBloom (“PawBloom,” “we,” “us”) helps you care for your plants and pets. This Privacy Policy explains what we collect, why, who we share it with, and the choices you have. We built PawBloom to collect as little as possible and to keep what you share under your control.

If you have questions, email us at support@pawbloom.app.

Information we collect

Information you provide

• Account details — your email address, and a username, display name, avatar, and bio if you choose to add them. You can also start in a guest session and create a full account later.
• Your companions — the plants and pets you add, including names, species or breed, acquisition dates, notes, and the photos you take.
• Care activity — the tasks and schedules you set, the care logs you complete, and any photos attached to them.
• Community content — posts, captions, comments, likes, the privacy setting you choose per post, and any reports you submit.
• Support messages — anything you send us by email.

Information collected automatically

• Device and notification tokens — if you enable reminders, we store a push notification token so we can deliver them.
• Optional location — if you grant foreground location permission, PawBloom uses your device’s precise coordinates to show local weather and asks the platform geocoder for a city label. If you deny permission or location is unavailable, we may fall back to an approximate city-level location from your IP address through ipapi.co. Coordinates are sent to Open-Meteo to retrieve weather. We do not use location for advertising.
• Crash diagnostics — PawBloom sends anonymous crash and performance reports to Sentry so we can detect failures that would otherwise leave users stuck. Reports exclude your account ID, name, email, authentication headers, care content, and photos.
• Optional usage analytics — PostHog product analytics are off by default. If you turn them on in Account & Privacy, we collect anonymous app events such as screen views and feature interactions. You can turn this off again at any time.

We do not sell your personal information, and we do not use it for cross-app advertising or tracking.

How we use your information

We use your information to:

• Provide core features — reminders, care logging, photo journals, and AI care tips.
• Identify plants and pets from photos and generate care advice you request.
• Operate the community feed and keep it safe (see Moderation below).
• Send the notifications you’ve enabled.
• Provide customer support and respond to your messages.
• Maintain security, prevent abuse, and meet legal obligations.

How your information is shared

We share information only with the service providers that make PawBloom work, and only as needed:

Provider	Purpose	What is shared
Supabase	App backend — authentication, database, photo storage	Account data, companions, care logs, photos, community content
RevenueCat	Subscription and purchase management	An anonymous user ID and your subscription/trial status
Sentry	Essential anonymous crash and performance diagnostics	Error reports and performance data without account identity, care content, photos, or authentication data
PostHog	Optional product analytics, if you opt in	Anonymous app events such as screen views and feature interactions
Google Gemini (primary) and OpenAI (fallback)	AI features and AI-assisted community moderation, only after explicit consent	The text, photos, plant or pet details, medication context, or records needed for the feature you choose, sent through our secure server
ipapi.co	Approximate (city-level) location from IP, for weather	Your IP address at the time of the request
Open-Meteo	Local weather for care tips	Precise coordinates if you grant location access; otherwise approximate coordinates; no account identifier
Expo / Apple (APNs) / Google (FCM)	Delivering push notifications	A device push token
Apple App Store / Google Play	Processing subscription payments	Handled by the stores under their own privacy policies

Before any information is sent to an AI provider, PawBloom identifies Google Gemini and OpenAI, explains the categories of information involved, and asks for your explicit consent. If you do not consent, AI features do not send your information. You can withdraw consent at any time in Account & Privacy. Photos and text you submit for AI features are used by us only to return a result to you or moderate a post and are not used by us to train AI models. AI providers process this data under their own terms as our processors.

We may also disclose information if required by law, to protect the rights and safety of our users, or as part of a business transfer, in which case we will notify you.

Community content and moderation

When you post publicly, your photo, caption, and username are visible to others. Before a public post goes live, its photo and text are screened by an automated AI scan if the author has consented to AI processing; otherwise it remains pending for human review. Public captions, comments, usernames, display names, and bios also pass server-side objectionable-text checks. You can set any post to public, friends-only, or private, block other accounts, and report posts, comments, or profiles for human review. See our Community Guidelines.

Photos and storage

Your private care photos are stored in access-controlled storage and are only accessible to you, except for photos you choose to attach to a public or friends-only post. Deleting a companion, a log, or your account removes the associated photos.

Data retention

We keep your information for as long as your account is active. When you delete your account, we permanently delete your profile, companions, posts, comments, and personal files. If you recorded care for a companion owned by someone else, that care entry and any attached care photo remain in the companion owner’s history, but your account reference and display name are removed and the entry is labeled as coming from a former caregiver. Some records may persist briefly in backups or where retention is required by law.

Your rights and choices

• Access and export — you can export a copy of your data at any time from Settings → Account & Privacy → Export my data.
• Deletion — you can permanently delete your account and personal content from Settings → Account & Privacy → Delete account. Care entries contributed to someone else’s companion remain anonymously in that companion’s history so their care record stays complete. This cannot be undone.
• Notifications — you control reminders and can turn them off in the app or your device settings.
• AI processing — grant or withdraw consent for third-party AI processing from Settings → Account & Privacy. Withdrawing consent disables AI features until you opt in again.
• Analytics — optional PostHog analytics are off by default and can be enabled or disabled from Settings → Account & Privacy. Anonymous, content-free crash diagnostics are part of operating the service.
• Regional rights — depending on where you live (for example, under the GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of your data, and to lodge a complaint with a regulator. The export and deletion tools above let you exercise the core of these rights directly; for anything else, email support@pawbloom.app. We do not “sell” or “share” personal information as those terms are defined under U.S. state privacy laws.

Children’s privacy

PawBloom is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will remove it.

International users

We operate in the United States and may process and store your information there or in other countries where our providers operate. We rely on appropriate safeguards for international transfers where required.

Security

We protect your data with encryption in transit, access-controlled storage, and database row-level security that restricts each person’s data to their own account. AI provider keys and other secrets are held server-side and never shipped in the app. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

Changes to this policy

We may update this policy as PawBloom evolves. When we make material changes, we’ll update the date above and, where appropriate, notify you in the app.

Contact us

PawBloom — support@pawbloom.app