Privacy Policy

Key Points (Plain-Language Summary)

1) What Blossi Does

Blossi is a personal organizer and assistant for hand-weaving, knitting, crocheting, and related fiber crafts. It helps you keep track of your yarn/thread/fiber stash, plan projects, and arrange color cards and pattern notes. Optional AI features can help you identify a material from a photo, or suggest patterns, colors, and quantities for a project you describe in text.

Your personal catalogue, project notes, and color cards are stored locally on your device. We do not upload, copy, or sync this information to our servers.

2) Information We Collect

Blossi is designed to collect as little information as possible.

2.1 Information you provide

• Weaving-material catalogue, project notes, color cards, photos in the catalogue: stored locally on your device only.
• Customer-support emails (if you write to us): we receive whatever you put in the email (your email address and the message body), used solely to respond to you.

2.2 Information NOT collected

Blossi does not include third-party analytics SDKs (no Google Analytics, no Firebase Analytics, no Facebook SDK, no AppsFlyer, no Adjust, no Mixpanel, etc.). We do not collect:

• your name, email, phone number, address, age, or gender;
• your contacts, calendar, microphone audio, or health data;
• your precise or approximate location;
• advertising identifiers (IDFA) or persistent tracking identifiers;
• browsing or behavioral history outside the app.

2.3 Minimal technical metadata during an AI request

When you trigger an AI feature, the HTTP request that delivers your content to our server includes standard protocol metadata: a timestamp, an anonymous random request ID, and the IP address used to reach the server. The IP address is used only to route the response and apply short-term abuse protection (rate limiting). It is not linked to a profile and is discarded within 24 hours.

2.4 No facial recognition, no biometrics

The AI image-recognition feature analyzes only weaving-material characteristics (fiber, color, texture, etc.). It does not perform facial recognition and does not extract or store biometric identifiers. Please do not submit photos of people.

3) How We Use Information

We use the very limited information described above only to:

• run the AI feature you explicitly requested and return the result to your device;
• briefly rate-limit requests for security and abuse protection;
• respond to your support emails.

We do not use your information to train, fine-tune, evaluate or benchmark AI models, to build user profiles, to serve advertising or marketing, to enrich data with third parties, or to generate cross-app tracking identifiers.

4) AI Processing — Detailed Disclosure

This section is provided in compliance with Apple App Store Review Guideline 5.1.1(i) and 5.1.2(i). It describes exactly what happens when you use an AI feature in Blossi.

5) Data Retention

• Your craft data (catalogue, project notes, photos in the catalogue): stored on your device only. We do not retain a copy. Uninstalling the app removes this data via iOS.
• AI inputs (images and prompts): deleted from our servers immediately after the response is returned (within seconds). No backups.
• AI outputs (responses): returned to your device and immediately deleted from our servers. Whether you keep the result on your device is up to you.
• Request metadata (timestamp, IP used for routing, random request ID): retained up to 24 hours for rate limiting and abuse protection, then deleted.
• Customer-support emails: retained up to 6 months after the issue is resolved, then deleted, unless a longer period is required by law.

6) How We Share Information

We do not share, sell, rent, trade, license, or otherwise transfer your information to any third party for their own use, including advertisers, data brokers, marketing networks, AI model providers, analytics companies, or social platforms.

The only narrow circumstances in which information could be touched by a third party are:

• Hosting infrastructure: our AI server runs on rented hardware/bandwidth from a reputable cloud/IDC provider. The provider acts strictly as an infrastructure host (like a landlord); they do not access, process, or analyze your content and are contractually prohibited from doing so.
• Legal compliance: if we receive a valid, legally binding request, we will comply only to the extent strictly required by law. Because we do not retain AI inputs/outputs or user accounts, in practice there is almost no user content to disclose.

We do not sell personal information and we do not engage in cross-context behavioral advertising.

7) International Data Transfers

Our AI servers are located in regions chosen for low-latency response. Because we do not retain your AI inputs or outputs, no long-term cross-border storage of your content takes place. Where short-term transit is required, we use TLS end-to-end and apply appropriate safeguards where required by law.

8) Security

• TLS (HTTPS) encryption in transit between the app and our server.
• Memory-only handling of AI inputs and outputs (no disk writes).
• Strict access controls; only Blossi Team operators with legitimate operational need can reach the server.
• Rate limiting and abuse detection to protect the service.

No system is 100% secure. We minimize what we retain so that there is as little as possible at risk.

9) Your Privacy Rights and Choices

Depending on your location, you may have legal rights such as access, correction, deletion, restriction, objection, and withdrawal of consent.

Because Blossi does not require an account and does not retain AI inputs, outputs, or any user identifier:

• There is no profile to access or export.
• There is no AI history to delete (already deleted immediately after each request).
• You can revoke AI consent at any time in Settings > Privacy.
• You can delete all locally-stored craft data by uninstalling the app or using "Reset all data" in Settings.
• For any other request, email johanwahl318533@outlook.com. We respond within 5 business days where feasible.

10) Children

The Service is intended for users aged 17 and older. We do not knowingly collect personal information from children.

11) Third-Party Links

The Service may contain links to third-party websites (for example, a yarn brand's website). This Privacy Policy does not cover those third parties. Please review their policies before providing information to them.

12) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes — especially any change that would involve sending your data to a third party — we will notify you in the app and ask for your renewed consent before any such change takes effect. The Effective Date above indicates the current version.

13) Governing Law; Binding Arbitration

This Privacy Policy is governed by the laws of the jurisdiction where Blossi Team is primarily established/operates, excluding its conflict-of-laws rules.

Disputes arising out of or relating to this Privacy Policy will be resolved through binding arbitration in that jurisdiction, except that either party may seek injunctive or equitable relief to protect intellectual-property or confidentiality rights.

14) Contact

Blossi Team
Email: johanwahl318533@outlook.com