Privacy Policy

Last updated: December 6, 2025

At BloomBox, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our app.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Display name (if provided)
• Profile photo (if provided via Google or Apple Sign-In)
• User ID (generated automatically)

1.2 Authentication Data

When you sign in using third-party services, we receive:

• Google Sign-In: Email, name, profile picture
• Apple Sign-In: Email (if shared), name (if provided)
• Anonymous Sign-In: Only a unique user ID

1.3 Device Data

We collect information about your connected devices:

• Device names and IDs you assign
• Bluetooth device identifiers (e.g., Mi Flora sensor MAC addresses)
• Sensor readings (temperature, moisture, light, conductivity)
• Device connection status and history

1.4 Usage Data

We may collect:

• App usage statistics
• Error logs and crash reports
• Device type and operating system version

2. How We Use Your Information

We use the collected information to:

• Provide and maintain the BloomBox service
• Authenticate users and manage accounts
• Store and display your plant sensor data
• Sync your devices across multiple platforms
• Improve app functionality and user experience
• Send important service notifications
• Respond to support requests
• Detect and prevent technical issues

3. Data Storage

Your data is stored using Firebase services:

• Firebase Authentication: Manages user accounts and credentials
• Cloud Firestore: Stores device information and sensor data
• Firebase Hosting: Serves web content

All data is encrypted in transit and at rest. Firebase infrastructure is located in secure data centers with enterprise-grade security.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We only share data:

• With your consent: When you explicitly authorize sharing
• With service providers: Firebase (Google Cloud Platform) for hosting and authentication
• For legal compliance: If required by law or to protect our rights

5. Third-Party Services

BloomBox integrates with the following third-party services:

• Google Sign-In: For authentication (Privacy Policy)
• Apple Sign-In: For authentication (Privacy Policy)
• Firebase: For backend services (Privacy Policy)

These services have their own privacy policies and data practices.

6. Bluetooth Permissions

BloomBox requires Bluetooth permissions to:

• Scan for nearby plant sensors
• Connect to your devices (e.g., Mi Flora)
• Read sensor data

Bluetooth data is only used locally on your device to communicate with sensors. We do not collect Bluetooth data from other nearby devices.

7. Data Retention

We retain your data as long as your account is active. When you delete your account:

• Your personal information is deleted immediately
• Device and sensor data is removed from our servers
• Anonymous usage data may be retained for analytics

8. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Delete your account and all associated data
• Export: Download your device and sensor data
• Withdraw consent: Opt out of data collection (may limit functionality)

9. Children's Privacy

BloomBox is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided us with personal information, please contact us.

10. Security

We implement appropriate security measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Secure authentication mechanisms
• Regular security updates and monitoring
• Access controls and authentication requirements

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Updating the "Last updated" date
• Displaying a notification in the app
• Sending an email to your registered address

Your continued use of BloomBox after changes constitutes acceptance of the updated policy.

12. International Data Transfers

Your data may be transferred to and stored on servers located outside your country. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: mk.pyts@gmail.com

14. Your California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA), including the right to know what data we collect and the right to deletion.