Privacy, with the files kept close.

The core Studio reads and transforms selected product images inside your browser. Source images and generated pack files are not sent to Bloomcomp by the on-device processing workflow.

Your browser may temporarily hold decoded images and the generated ZIP in memory. Closing or reloading the page clears that transient processing state unless your browser preserves it.

If you create an account, we process the identifiers needed to authenticate you and operate the service, such as your email address, display name, avatar, authentication provider, account timestamps, and security logs.

When you choose Google sign-in, Bloomcomp requests only the standard openid, email, and profile scopes. Google provides your account identifier, email address, email-verification status, display name, and profile image so we can create or resume your Bloomcomp account.

Bloomcomp does not receive your Google password, request Gmail, Drive, Contacts, Calendar, or other Google product data, or retain Google access and refresh tokens. Supabase processes the Google identity token to establish your Bloomcomp session.

You can remove Bloomcomp from your Google Account connections and request deletion of your Bloomcomp account data through the privacy contact below.

We may process messages you send to support, licence and billing records, product preferences, error diagnostics, and coarse technical information needed to secure and improve the service.

We do not sell personal information or use private product-image contents for advertising.

We use carefully selected service providers for authentication, database hosting, transactional email, deployment, and security. Those providers process only the information needed to deliver their part of the service under their own contractual and security obligations.

Data may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers.

We retain account and operational records only as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent abuse. Retention periods vary by record type.

We use access controls, encrypted transport, least-privilege credentials, and row-level database policies. No online service can guarantee absolute security.

Depending on where you live, you may ask to access, correct, export, restrict, object to, or delete personal information. You may also withdraw consent where consent is the legal basis for processing.

Send privacy requests to molimbogs@gmail.com. We may need to verify your identity before completing a request.

We may update this policy as Bloomcomp changes. Material changes will be announced in the service or by email when appropriate.

Effective 29 July 2026. Privacy contact: molimbogs@gmail.com.