Privacy Policy.

Information we collect

Information you provide

• When you create an account or sign in
• When you contact us for support or feedback
• When you create notes, tasks, projects, or other content inside the app
• When you participate in surveys or beta testing

This may include your name, email address, and any content you choose to write into the app.

Your content and preferences

We store your notes, tasks, projects, focus sessions, and app preferences so your experience stays consistent across devices. This is the data that makes BlumaSpace uniquely yours; it is yours to export or delete at any time.

Usage data

We gather basic usage statistics to improve BlumaSpace, such as which features are used most or where users encounter friction. Whenever possible, this data is anonymised and aggregated.

How we use your information

We use your data solely to operate and improve BlumaSpace. We do not sell your information, and we do not use it for advertising.

• Sync your notes, tasks, and preferences across devices
• Provide support when you need help
• Refine BlumaSpace based on activity and feedback
• Notify you of important updates about your account or the service
• Protect the platform and our users from fraud and misuse

Information sharing and disclosure

We never sell your personal data. Information is shared only under specific circumstances:

• When you explicitly grant permission
• To comply with legal obligations
• To protect our rights or the safety of our users
• With trusted service providers who help us run BlumaSpace (under strict agreements)
• In rare cases such as a business transfer, merger, or acquisition

Sign in with Google

If you choose to sign in with Google, we request only the basic scopes Google uses to verify your identity: openid, email, and profile. We do not request access to your Gmail, Drive, Calendar, or any other Google service. We do not use any Google user data to train or enhance AI/ML models, nor do we share it with third parties.

Data security

We prioritise the protection of your information. Your data is encrypted both in transit and at rest, stored on infrastructure operated by Supabase and Vercel, and accessed only by people who need it to maintain and improve BlumaSpace.

Although we take strong security measures, no system is completely invulnerable. We continually monitor and improve our practices and will inform you promptly if your data is ever compromised.

Data retention

Your account data is retained only while your account is active. If you delete your account, all personal information is permanently removed within 30 days. Aggregated usage data may be kept longer for reporting and security purposes, but it will not identify you personally.

You can export or delete your data at any time from your account settings.

Your privacy rights

You have significant control over your information:

• Access and review your personal data through account settings
• Correct any inaccuracies
• Delete your account and associated data at any time
• Export your content
• Manage the communications you receive from us

To exercise these rights, contact us at hello@bluma.space or use the tools in your account settings.

International users

BlumaSpace is based in the European Union, and your data is processed and stored in accordance with EU privacy laws, including the General Data Protection Regulation (GDPR).

If you are located outside the EU, your data may be transferred to countries where our service providers operate. In such cases, we ensure appropriate safeguards are in place to protect your personal information in line with GDPR standards.

You have the right to access, correct, or delete your personal data, restrict processing, and exercise other GDPR rights. We are committed to helping you exercise these rights easily.

Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, technical, or operational reasons. Significant updates will be communicated via email or through the platform. The “Last updated” date at the top of this page reflects the latest revision.