Privacy policy

1. Information we use

Your account

If you create an account, we process your email address, account identifier, authentication information, and confirmation or password-reset requests. Amazon Cognito handles authentication. The native app stores your email and session credentials in the phone’s protected credential storage so you can stay signed in.

Your Bloomies

We process device identifiers, account-to-device links, device names and appearance choices, settings, connection information, firmware information, and remote-access status. Your Bloomie measures carbon dioxide, temperature, and humidity. Readings, recent measurement history, and device state can be sent to our cloud services to support connected features.

The app stores device profiles, network addresses, Wi-Fi network names, preferences, and cached readings on your phone. During setup, the Wi-Fi name and password you enter are sent to your Bloomie over Bluetooth so it can join your network. The app’s setup flow does not send your Wi-Fi password to our account API.

Notifications, when available and enabled

If you enable cloud notifications, notification providers process a push token and alert information to deliver messages to your phone. A token identifies the app installation for delivery; it is not your account password.

Support and service operation

If you email us, we receive your email address, message, and any attachments you choose to send. Our hosting and infrastructure providers may process IP addresses, request times, browser or device information, and technical logs to deliver and protect the services. These pages are part of the ABOUND website. Squarespace may use cookies and collect website traffic information to operate the site and provide website analytics.

2. Why we use it

• Set up your devices and display their readings and settings.
• Authenticate your account, associate Bloomies with it, and provide remote access.
• Deliver enabled alerts and supported firmware updates.
• Respond to support requests, diagnose failures, prevent misuse, and maintain the service.
• Handle account deletion and other privacy requests.

We do not use the app’s account or sensor data for targeted advertising, and we do not sell it. Where applicable data-protection law requires a legal basis, we use information to provide the services you request, maintain secure and reliable services, meet legal obligations, or act on your consent where consent is required.

3. Who processes information

We use Amazon Web Services for authentication, device connectivity, cloud storage, and service operation. The current cloud environment is hosted in the United States. When cloud notifications are enabled, Expo and the relevant platform notification service, such as Apple Push Notification service, process delivery information.

These public pages are hosted by Squarespace as part of the ABOUND website. Email services process support messages sent to our contact address. Providers process information needed to perform their services, subject to their service and data-protection terms. Information may be processed outside your country.

We may also disclose information when required by law or when necessary to protect the rights, security, or safety of users and the service. We do not include advertising networks in the BLOOMIE app.

4. Retention and account deletion

Account and ownership information is kept while needed to provide your account and connected features. To delete your account, open Account → Delete account in the app, review the explanation, type DELETE, and confirm.

Successful deletion removes your login account, account-to-device links, and cloud push registrations, and clears the app’s saved login and account-specific device profile cache. If a connection error interrupts deletion, return to Account and retry.

Account deletion is not a device factory reset. Wi-Fi settings, device credentials, device-level readings and state, and firmware remain associated with the physical Bloomie. Other locally cached readings or preferences may remain on your phone. Before giving a device to someone else, remove personal settings from it; contact us if you need help. You can also contact us about remaining device information.

A technical account identifier is temporarily retained to prevent requests already in progress from recreating deleted records. After deletion succeeds, it becomes eligible for automatic removal after one day; removal may take longer to complete. API application logs are configured for 30-day retention. Backups and other infrastructure records follow their service retention cycles, and information may be retained when required by law or necessary to resolve a dispute or protect the service.

Support correspondence is retained for as long as needed to address your request and maintain relevant support records. Where notification delivery records or queued retries exist, they expire under their configured retention periods. Contact us with questions about a particular record.

5. Your choices and requests

You can choose Continue without an account for local app use. Signing out or choosing local use does not necessarily disconnect a Wi-Fi-connected Bloomie from its device cloud services.

You control Bluetooth, local-network, and notification permissions in your phone’s settings. Disabling a permission may prevent the feature that depends on it. You can stop using cloud features, delete your account in the app, or contact us about your information.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to certain processing, withdraw consent, or complain to a data-protection authority. Email us to make a request. We may need to verify that a request relates to you before acting on it.

Children

BLOOMIE is not directed at children. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and address it.

Policy updates

We will update this page when our practices change and revise the effective date. Where required, we will give additional notice of material changes.

6. Contact us

ABOUND ASIA Co Ltd is responsible for the BLOOMIE app and service described here.

For privacy requests or questions, email conctact@abound-china.com. Please do not send passwords, Wi-Fi passwords, or login confirmation codes.