Privacy Policy

This page says what bloon keeps about you, why, who helps us, and how to make us delete it. We keep as little as we can, and nothing is sold.

It goes together with our Terms of Service.

1. What we store

Account. Your name, email address, and avatar, supplied by Google when you sign in, plus the date you accepted the terms and whether you told us a grown-up or a child with a grown-up is building.
Ideas and answers. The idea you type and the answers you give to bloon’s design questions.
Generated designs and pictures. The model, instructions, parts list, concept picture, and box art bloon makes for you, with the date and which idea they came from.
Orders. What you ordered, the price, your shipping name and address, the email used for the order, order status, and tracking. Card details stay with Stripe.
Usage counts. How many sets, design steps, and reviews you have used today, so we can apply the daily allowance.
Product analytics. Which screens are visited, which buttons are pressed, browser and device type, rough location from your IP address, and error reports. Analytics are tied to your account ID when you are signed in.
Server logs. Request logs with IP address and time for 30 days, used to stop abuse and to debug.

2. Why we use it

To design and build the set you asked for, and to ship it.
To keep your account secure and your designs private to you.
To apply daily limits that keep bloon affordable for everyone.
To moderate ideas and pictures so bloon stays safe for kids.
To email you about your builds and orders.
To send bloon news, only if you switched that on, and you can switch it off from the Account page or any email.
To improve the compiler using anonymized geometry, as described in the Terms.

Where GDPR or UK GDPR applies, our legal bases are performance of a contract (building and shipping your set), our legitimate interest in keeping the service safe and working, consent for marketing email, and legal obligation for tax and payment records.

3. Who helps us process it

We do not sell personal data. These companies process it on our behalf, under their own data protection agreements:

Google — Sign-in: confirms who you are and gives us your name, email and picture. Sessions are ours, stored in our database. (USA)
MongoDB Atlas — Our database: designs, orders, usage counts, and the account record. (USA)
OpenAI — Reads your idea and answers to plan the model, questions, and concept pictures. We send the idea text, never your name or email. (USA)
Stripe — Takes payment and holds your card details. We only receive a confirmation and the last four digits. (USA)
Resend — Sends transactional email: build ready, order confirmed, shipped. (USA)
PostHog — Product analytics and error reports so we can see what breaks and what is confusing. (USA or EU, depending on project region)
Vercel — Hosts the website and serves it to your browser. (USA, with edge locations worldwide)
Railway — Runs the worker that builds your model in the background. (USA)

We may also share data when the law requires it, or with a buyer if bloon is ever sold, in which case this policy still applies to it.

4. Children

bloon is made for kids to enjoy with a grown-up, and we follow the US Children’s Online Privacy Protection Act (COPPA) and the equivalent rules elsewhere.

No accounts for children under 13. A parent or guardian creates the account, sits with the child, and tells us at first sign-in that they consent.
We do not knowingly collect personal information from a child under 13. We ask everyone not to put names, addresses, schools, or photos of real people into an idea, and moderation looks for them.
The ideas typed in on a family account are treated as the parent’s data. Parents can read, download, and delete everything made under their account at any time from the Account page.
If we learn that a child under 13 has created their own account, we delete it and what was made with it. If you think this has happened, email privacy@bloon.ai.
We do not show advertising to anyone and do not use children’s data for profiling.

5. How long we keep it

Account, ideas, and designs: while your account exists, then deleted within 30 days of you deleting it.
Orders and payment records: 7 years after the order, because tax law requires it, with the shipping address removed after 2 years.
Server logs: 30 days. Analytics events: 12 months.
Anonymized geometry kept to improve the compiler: indefinitely, as it no longer identifies anyone.

6. Deleting and downloading

Open the Account page and choose “Delete my account and everything I made”. That removes your designs, jobs, orders that have not shipped, usage counts, and your account record, and signs you out everywhere. Orders that have shipped are kept for the period in section 5 with your name and address removed as soon as the law allows.

You can download any design as a ZIP from its result page. To request a copy of everything, correct something, object to processing, or ask us to delete by email instead, write to privacy@bloon.ai from the address on the account. We answer within 30 days.

If you are in the EU or UK you also have the right to complain to your data protection authority.

7. Cookies and analytics

Our session cookie keeps you signed in. It is strictly necessary and cannot be turned off without signing out.
Analytics from PostHog use a first-party cookie to tell visits apart. Turn analytics off from the Account page, or by enabling your browser’s “Do Not Track” or Global Privacy Control signal, which we honour.
Stripe sets its own cookies on the checkout page for fraud prevention.
We do not use advertising cookies or trackers.

8. Security

Everything travels over HTTPS. Designs and orders can only be read by the account that made them. Card details never touch our servers. If we ever have a breach that affects you, we will tell you and the relevant authorities without undue delay.

9. Where data lives

bloon is run from the United States. If you use it from the EU, UK, or elsewhere, your data is transferred to the US under standard contractual clauses (and the EU-US Data Privacy Framework where the processor is certified).

10. Changes

When this policy changes we update the date at the top and, for anything meaningful, email account holders before it takes effect.

11. Contact

Privacy questions and requests: privacy@bloon.ai. Postal address on request.

Draft for review. The company name, address, processor regions, retention periods, and the analytics opt-out mechanism must be confirmed before launch.