Privacy Policy

What we collect

When you buy a product: your email address and name (if provided), the product you bought, and payment status. Card details are processed entirely by our payment provider WayForPay — we never see or store your card number.

When you join the newsletter or take the ADHD quiz: your email address, name (if provided), quiz result type, and preferred language.

When you create an app account: your email, password (stored encrypted by our infrastructure provider Supabase), and the content you create — tasks, habits, brain dumps, settings.

Why we collect it

To deliver purchased files, send order confirmations, provide the app service, send newsletter emails you signed up for, and improve the product. We also use advertising and analytics cookies on the blog — but only if you agree to them first. See Cookies and advertising below.

Who processes your data

We use a small number of trusted processors: Supabase (database and authentication, EU-hosted), Vercel (website hosting), Brevo (transactional and newsletter emails, EU-based), and WayForPay (payment processing). Each receives only the data needed for its function.

If you consent to them, two further providers may process data in your browser: Google AdSense (advertising on the blog) and Google Analytics (anonymous usage statistics). Both are operated by Google Ireland Limited.

How long we keep it

Order records are kept as long as required for accounting purposes. Newsletter data is kept until you unsubscribe — every email has an unsubscribe link. App account data is kept until you delete your account; you can export everything you've created at any time from Settings.

Your rights (GDPR)

If you're in the EU/EEA, you have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. To exercise any of these rights, email us at hello@bloomfocus.org — we respond within 30 days.

Cookies and advertising

Essential cookies are always active: session cookies for app login, a language preference, and a record of the cookie choice you make. These are needed for the site to work and don't track you anywhere else.

Analytics cookies are used only with your consent. We use Google Analytics to count page views and see which articles are actually read, with IP anonymisation enabled. We use this to decide what to write more of — not to build a profile of you.

Advertising cookies are used only with your consent. The blog is funded by Google AdSense. When you allow advertising cookies, Google and its partners may set and read cookies on your device to show ads, to limit how often you see the same ad, and to measure whether ads work. Google may use this data to show you personalised advertising based on your prior visits to this and other websites.

You can refuse advertising cookies entirely — the blog stays fully readable, you'll simply see non-personalised ads or none at all. You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page; withdrawing is as easy as giving consent, and takes effect immediately.

To understand how Google uses data from sites that use its services, see How Google uses information from sites that use our services. You can also opt out of personalised advertising directly with Google at Google Ads Settings, review Google's Privacy Policy, or opt out of third-party vendor cookies at aboutads.info/choices.

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and/or other sites on the internet.

Children

Our products and app are intended for adults (18+). We do not knowingly collect data from children.

Contact

Questions about this policy or your data: hello@bloomfocus.org. Full legal details of the business are available on request.