Our service providers
Last updated: October 10, 2026
This list forms part of our privacy policy (section 6.2). It names every processor that processes personal data on our behalf, what for, and where it is based and processes data. When a provider changes, we update it and the date above.
| Provider | Based in, processing in | What for |
|---|---|---|
| Vercel Inc. | USA | website hosting and delivery via European edge locations |
| Supabase Inc. | Singapore; servers in EU/Frankfurt | database, authentication and storage for the app, and for the website's launch pre-registrations |
| Google Ireland Ltd. | Ireland | Google Tag Manager, Google Analytics 4 and Google Ads for web analytics and advertising performance measurement (only after consent) |
| Mistral AI | France, processing within the EU | AI model for bloomie, the AI assistant in the app, including the personalisation of its answers based on profile details (see section 5.5); text recognition in photos in the appointments tool, where the image is not stored (see section 5.8); and the AI-assisted pre-sorting and reply drafts in our support (see section 4.6). Mistral does not use the content for training. How long Mistral keeps it for operation and abuse prevention is governed by our data processing agreement. |
| Scaleway | France, processing in Paris | runs an open AI model (Gemma) that, since September 2026, words bloomie's answers for some users (see section 5.5). The same details are transmitted as to Mistral. Scaleway does not store the content of requests and does not use it for training; only technical usage data such as the number of tokens processed is kept. |
| Komoot GmbH / Photon | Germany | geocoding of location data for the app's travel-time feature (only at your request; see section 5.8) |
| FOSSGIS e. V. / Valhalla | Germany, based on OpenStreetMap | route and travel-time calculation for the app's travel-time feature (only at your request; see section 5.8) |
| Open-Meteo GmbH | Bürglen, Switzerland | weather conditions, air pressure and temperature for the "Weather-sensitive" tool, the weather outlook and the environmental data on a moment (only when the weather permission is on; see section 5.15). All that is transmitted is the location rounded to roughly one kilometre, without any identifier. |
| Resend Inc. | USA, sending from the EU | transactional emails from the app, including the notice of a reply from Team bloomnow in the support chat with the text of that reply, the notice that someone replied to your community post (with the post title, without the text of the reply), and confirmation emails for the launch pre-registration |
| Firebase / Google LLC | USA | push notifications (Cloud Messaging) for the app |
| Google LLC | USA | Google OAuth for optional sign-in to the app |
| RevenueCat, Inc. | USA | management of the app's subscriptions and verification of purchase receipts with Apple and Google (see section 5.22); processed are the account identifier and the purchase data, no payment details and no content |
| Dynatrace | region EU, processing within the EU | technical monitoring of our server functions (see section 5.23), the app's crashes and load times (see section 5.24) and, only with consent, website performance measurement (see section 4.9); no account identifier, no name, no email address and no content |
Independent controllers
For purchases in the stores, the stores themselves are the contracting party and process your purchase data under their own responsibility: Apple for purchases in the App Store and Google Commerce Limited (Ireland) for purchases through Google Play. What they do with it is set out in their own privacy policies.
How data may be transferred to providers based outside the EU, and which safeguards apply, is set out in section 7 of the privacy policy.