Privacy Policy
Last Updated: August 22, 2026
This Privacy Policy explains how Avocado Labs ("Blossom," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Blossom mobile application and related services (the "App"). This Policy is incorporated into, and should be read together with, our Terms and Conditions.
By using the App, you acknowledge the practices described in this Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent before conducting that activity.
1. Information We Collect
1.1 Information You Provide Directly
• Account information — email address; phone number (optional, for SMS reminders); name; password (email/password sign-up only — we never see or store your Apple/Google password).
• Profile information — profile photo/avatar; self-selected goals (e.g., wellness intentions). • User Content — journal entries and any other text you write or submit in the App, including AI-generated affirmations you choose to save.
• Communications — messages you send us (e.g., support requests).
• Purchase information — that you have an active subscription and its status; actual payment details (card numbers, etc.) are collected and processed by Apple through the App Store. We do not receive or store your payment card number.
1.2 Information Collected Automatically
• Device and usage data — device identifiers, iOS version, app version, general diagnostic and crash data, feature-usage events (e.g., which screens you open), and timezone (used to schedule your daily reminder correctly).
• Notification data — whether push and/or SMS reminders are enabled, and the times you've scheduled them for.
1.3 Journal and Sensitive Content
Your journal entries are free-form personal content and may reveal information about your mental or emotional state, relationships, health, or other sensitive matters. You decide what to write. Please do not include information you do not want stored electronically, such as another person's private information, financial account numbers, passwords, or government identification numbers.
We do not use your journal content to make inferences about your health status for advertising or unrelated profiling. Journal content is used to provide the journaling and personalized affirmation features you request.
2. How We Use Information
We use the information described above to:
• create and manage your account and authenticate you, including via Sign in with Apple / Sign in with Google;
• provide the App's core features, including storing your journal entries and generating personalized AI affirmations from relevant journal entries and goals;
• process relevant journal entries and goals through our AI service provider to generate the best possible personalized response to your request;
• send you notifications you've opted into (local push reminders and/or SMS text reminders); • process and manage your Premium subscription through Apple;
• maintain, secure, debug, and operate the App;
• respond to support requests; and
• comply with legal obligations and enforce our Terms and Conditions.
We do not use your journal entries, goals, AI requests, or AI-generated responses to train, fine-tune, or improve any artificial intelligence or machine-learning model, and our third-party AI service provider does not use this information to train its models by default. Our AI provider may retain the prompts and responses associated with your request for a limited period — currently up to 30 days — for safety and abuse-monitoring purposes, after which this data is automatically deleted from the provider's systems. Your saved journal entries and other User Content, including affirmations you choose to save, remain stored as described in this Policy because they are part of the App's core journaling functionality.
We do not use your information for third-party advertising, and the App does not currently integrate third-party advertising SDKs. If our practices materially change, we will update this Policy and obtain consent where required by law.
3. AI Processing
3.1 Why We Use AI
Blossom uses third-party artificial intelligence / large language model technology to help generate personalized affirmations. The purpose is to understand relevant context from the journal entry and goals you provide and return a response that is more relevant and useful to you.
3.2 What Is Sent to the AI Provider
When you request an AI-generated affirmation, relevant text from your journal entry and the goals you have provided may be transmitted to our third-party AI service provider. We send only information reasonably necessary to generate the requested response. Our AI service provider is based in, and processes this information in, the United States.
3.3 AI Training and Retention
Blossom does not use your journal entries, goals, prompts, or AI-generated responses to train, fine-tune, or improve AI models, and we do not permit our AI service provider to use this information for that purpose.
Our AI service provider does not use data submitted through its API to train its models by default. However, our AI provider may retain the prompts you submit and the responses it generates for a limited period — currently up to 30 days — for safety and abuse-monitoring purposes, after which this data is automatically deleted from the provider's systems. This limited retention window is a standard security practice used by
major AI providers and is separate from, and does not involve, using your data to train AI models.
This statement does not mean that your journal entries are deleted from Blossom's systems after an AI response. Journal entries that you choose to save, and any AI-generated affirmations you choose to save, remain User Content and are retained according to Section 6.
3.4 AI Limitations
AI-generated affirmations can be inaccurate, generic, repetitive, or inappropriate. AI processing is used to provide a wellness and self-reflection feature, not to diagnose, treat, monitor, or make decisions about your health or mental health.
4. How We Share Information
We do not sell your personal information. We share information only as described below or as otherwise permitted or required by law.
4.1 Service Providers
We use service providers to operate the App. All of the service providers listed below are based in, and process information in, the United States. Categories include:
• Cloud hosting, database, authentication, and file storage — currently Supabase, which stores account, journal, and profile data and hosts backend functions used by the App.
• Sign-in providers — Apple and Google, if you choose those sign-in methods. • App Store / payments — Apple, which processes Premium purchases and subscription billing. We receive subscription status, not your payment card number.
• AI / content-generation provider — relevant journal text and goals are transmitted when needed to generate your personalized affirmation. This information is used solely to fulfill that request; our AI provider does not use it to train its models by default, and automatically deletes it from its systems within a limited period (up to 30 days) used only for safety and abuse-monitoring purposes.
• SMS delivery provider — if you enable text reminders, your phone number and the message content are shared solely to deliver the requested message.
We require service providers that process personal information on our behalf to use it only for the services they provide to us and to provide appropriate privacy and security protections consistent with applicable law and our commitments to you.
4.2 Legal and Safety
We may disclose information if required by law, subpoena, or other legal process, or if we reasonably believe disclosure is necessary to comply with a legal obligation, protect our rights or property, investigate wrongdoing connected with the App, or protect the personal safety of any person, in each case to the extent permitted by law. Blossom does not proactively monitor journal content for safety or crisis purposes and does not represent that it can detect or respond to emergencies.
4.3 Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will provide notice as required by applicable
law.
4.4 With Your Consent
We may share information for another purpose when you direct us to do so or provide consent where consent is required.
5. Subscriptions and Payment Data
All purchases are made through and billed by Apple via the App Store. Apple's collection and use of payment information is governed by Apple's own privacy practices. We only receive confirmation of your subscription tier and status so the App can provide the features associated with your subscription.
6. Data Retention and Deletion
We retain account information and User Content — including saved journal entries and any AI-generated affirmations you choose to save — for as long as your account is active or as otherwise reasonably necessary to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements.
AI-processing data is different: our AI service provider does not use your prompts, requests, or the App's AI-generated outputs to train its models by default, and automatically deletes this data from its own systems within a limited period (up to 30 days), used only for safety and abuse-monitoring purposes. This is separate from your underlying journal entry and any affirmation you choose to save, which remain stored in Blossom as described above.
If you delete a journal entry or your account, we will delete or anonymize the applicable data — including saved affirmations tied to your account — within a reasonable period, except where retention is required by law or limited copies remain in routine backups until they are automatically overwritten or purged.
7. Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls on our backend. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a security incident affecting personal information, we will provide notices required by applicable law.
8. Your Rights and Choices
8.1 Access, Correction, and Deletion
You can review and edit available account information in the App's Settings and delete individual journal entries in the App. To request deletion of your account, request access to your information, or exercise another applicable privacy right, contact us at avocadolabs.team@gmail.com. We will respond within the time required by applicable law.
8.2 Notifications
You can disable push notifications in iOS Settings or in the App. You can opt out of SMS reminders at any time by replying STOP to an SMS or disabling SMS reminders in the App.
SMS consent disclosure: By opting into SMS reminders, you consent to receive automated text messages from Avocado Labs at the phone number you provide. Message and data rates may apply. Message frequency varies based on the reminders you schedule. Consent to receive SMS messages is not a condition of any purchase. Reply STOP at any time to cancel, or HELP for help.
8.3 California Residents — CCPA/CPRA
If applicable, California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information, obtain a portable copy of their information, and receive equal treatment for exercising privacy rights.
Blossom does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not use journal entries for advertising or unrelated profiling. We honor opt-out preference signals, such as the Global Privacy Control, where required by law.
You may exercise applicable rights by contacting avocadolabs.team@gmail.com. We may need to verify your identity before completing a request. Where required by law, you may use an authorized agent.
8.4 EEA/UK/Swiss Residents
Where applicable law provides GDPR or similar rights, you may have rights including access, correction, deletion, restriction, portability, objection, and withdrawal of consent. Where processing is based on consent, you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Our legal bases may include performance of a contract, consent, legitimate interests such as security and service operation, and compliance with legal obligations, depending on the processing activity.
Where required, you may lodge a complaint with your local data protection supervisory authority. 8.5 Do Not Track
The App is a native mobile application and does not currently respond to browser "Do Not Track" signals. 9. Children's Privacy
Blossom is not directed to children under 13, and our Terms require users to be at least 13 years old. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take reasonable steps to delete it as required by applicable law, including COPPA.
Some of our users are between 13 and 17 years old. We encourage parents and guardians to be aware of and, where appropriate, involved in their teen's use of wellness apps like Blossom.
10. International Users
Blossom is operated from the United States, and our service providers — including our cloud hosting and AI service providers — are also based in the United States. If you access the App from outside the United States, your information will be transferred to, stored in, and processed in the United States, subject to
applicable law.
11. Third-Party Links and Services
The App may link to or integrate with third-party services, including Apple, Google, our cloud infrastructure provider, AI service provider, and SMS delivery provider. Their independent privacy practices are governed by their own policies. Our disclosures about third-party processing in this Policy describe the processing performed on Blossom's behalf.
12. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will update the "Last Updated" date and provide notice through the App, email, or another legally appropriate method. Where required by law, we will obtain consent before applying a material change to previously collected information.
13. Contact Us
If you have questions about this Policy or wish to exercise a privacy right, contact us at:
Avocado Labs
Email: avocadolabs.team@gmail.com