BlumonOpen app

Privacy Notice

Last updated: July 13, 2026

1. Who we are

Blumon is operated by Islam Assem Abdel-Karim ("we", "us", "our"). We act as the data controller for the personal data described in this notice. You can reach us via the in-app feedback form.

2. Data we collect

  • Account data: email address, display name, hashed authentication credentials, sign-in provider identifiers.
  • Content you create: plans, tasks, calendar entries, subscription entries, and feedback messages you submit.
  • AI inputs & outputs: the prompts you send to the AI planner and the generated plans.
  • Usage & device data: pages viewed, features used, timestamps, IP address, browser and device identifiers, and error logs.

3. Why we use it (purposes & legal bases)

  • Provide the Service — creating your account, saving your plans, syncing your calendar, powering AI planning. Legal basis: performance of the contract with you.
  • Security & fraud prevention — detecting abuse, protecting accounts. Legal basis: legitimate interests and legal obligation.
  • Product improvement — understanding how features are used to improve blumon. Legal basis: legitimate interests.
  • Customer support — responding to your questions and feedback. Legal basis: legitimate interests / performance of the contract.
  • Marketing — only where you have opted in. Legal basis: consent, which you can withdraw at any time.

4. Who we share data with

  • Hosting & infrastructure: Lovable Cloud (which uses Supabase and Cloudflare) for authentication, database, and application hosting.
  • AI providers: the AI model provider that processes your planning prompts on our behalf.
  • Payment processing (Merchant of Record): Paddle.com acts as the Merchant of Record and reseller for all paid subscriptions. When you subscribe, Paddle receives your name, email, billing address, and payment details in order to process the transaction, calculate and remit sales tax/VAT, issue invoices, manage renewals and cancellations, handle refunds, and prevent fraud. Paddle is an independent data controller for that payment data. Card details are collected by Paddle directly and are never stored on our servers.
  • Professional advisers (legal, accounting) where necessary.
  • Public authorities where required by law or to protect rights and safety.

5. International transfers

Some of our providers are located outside your country, including in the United States. Where personal data is transferred out of the UK/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we need to retain it to comply with legal obligations or to resolve disputes.

7. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your data;
  • request restriction of, or object to, certain processing;
  • request a portable copy of the data you provided;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with your local data protection authority.

We aim to respond to rights requests within one month. To exercise a right, contact us via the in-app feedback form.

8. Security

We use appropriate technical and organizational measures, including encryption in transit (TLS), encryption at rest for our database, and strict access controls, to protect your data. No system is ever perfectly secure, and we can't guarantee absolute security.

9. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in and to remember your preferences. We may also use minimal analytics to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies will prevent the Service from working.

10. Changes to this notice

We may update this notice from time to time. Material changes will be communicated in-app or by email.