Privacy Policy

Effective 24 April 2026. This Privacy Policy explains what Mossbloom (the "App") does — and doesn't — do with your information. We believe in collecting as little as possible.

1. What we collect. • On-device only: your intentions, affirmations, journal entries, growth-stage data, reminder preferences, and the display name you enter (if any). All of this lives in SwiftData and UserDefaults on your device. We do not transmit this content to our servers, and we cannot read it. • Notifications: if you enable the daily reminder, the App schedules a local notification on your device. If push notifications are enabled, your device's APNs token is sent to our notification back-end (see §3) so a short, gentle reminder line can be delivered remotely. No journal content is ever included. • AI-generated text: when AI personalisation is on (Settings → Personalisation), the App sends the title and seed type of the intention being viewed, the days-since-planted count, and up to three anonymised mood scores to our AI provider (see §3) to generate the affirmation shown on the card. For the pressed-flower narrative (written once at bloom) and the weekly garden letter (for Mossbloom+ subscribers), the same inputs are sent plus up to five of your most recent reflection notes for that intention. On eligible devices running iOS 26+, the daily affirmation is generated on-device instead, and no data leaves your phone. • Purchases: if you subscribe to Mossbloom+, Apple processes the transaction. Apple shares a transaction receipt with our subscription-management partner (see §3). We receive only subscription status (e.g. active / expired / trial) tied to an anonymous user identifier that is generated per install.

2. What we don't collect. We don't collect analytics, tracking identifiers, advertising IDs, crash telemetry, contacts, photos, location, microphone, camera, health data, or your email address. Mossbloom does not track you across apps or websites.

3. Third parties. • Apple processes App Store purchases, handles subscription billing, and delivers push notifications via APNs under Apple's privacy terms. • RevenueCat (revenuecat.com) manages subscription entitlements on our behalf. RevenueCat receives a random anonymous identifier and your subscription receipt from Apple in order to tell the App whether you're a subscriber. RevenueCat's handling of this data is governed by their privacy policy. • Anthropic (anthropic.com) provides the Claude Haiku model that generates affirmations, pressed-flower narratives, and weekly letters when AI personalisation is on. Anthropic does not train on API requests and retains them for 30 days for abuse monitoring per their commercial data policy. Opt out any time in Settings → Personalisation. • Supabase (supabase.com) runs our notification back-end. We send it your device's APNs token + reminder-hour preference + time zone so a scheduled job can deliver the daily reminder. No personal content is stored server-side. We do not share your personal content with any third party beyond the above.

4. Children. Mossbloom is intended for users 13 and older (or the minimum age of digital consent in your jurisdiction). It is not directed to children under that age, and we do not knowingly collect information from them.

5. Your choices. • Deleting the App removes all on-device data (intentions, affirmations, preferences). • You can cancel a subscription anytime via Settings → Apple ID → Subscriptions. • Because the App stores your content locally and does not sync to our servers, requests to access or delete server-side data typically don't apply — there's nothing for us to return or erase on our side, only the anonymous subscription identifier held by our payments partners.

6. Security. On-device data relies on the security features of iOS (sandboxing, device encryption when your passcode is set). Subscription data shared with Apple and RevenueCat is protected by their respective security practices.

7. International users. If you use Mossbloom outside the publisher's country of establishment, the subscription data described above may be processed in a different country by our processors. By using the App, you consent to that processing to the extent allowed under the laws applicable to you.

8. Changes. If we update this Privacy Policy we'll change the effective date above and, for material changes, surface a notice in-App.

9. Contact. For privacy questions, please use the contact method listed on the App Store page.