Privacy Policy

This Privacy Policy explains how LotusBloom LLC (“LotusBloom,” “we,” “us,” or “our”) collects, uses, and protects information when you visit lotusbloomllc.com or contact us. By using the site, you agree to the practices described here.

Who we are

LotusBloom LLC is a company based in Woodland, California, operating in data operations and sustainable agriculture. You can reach us at admin@lotusbloomllc.com.

Information we collect

Information you provide (your name, email, and message when you contact us); automatically collected technical data (such as IP address, browser type, device information, pages viewed, and date/time of visit); and cookies or similar technologies used to remember preferences and understand site usage, which you can control through your browser.

Application accounts and financial data

Some of our services (such as Credit Hub) let you create an account and store financial information you choose to track — for example credit card balances, credit limits, statement dates, and receipts. Passwords are stored only as secure one-way hashes. Data you enter in guest mode (without an account) is stored only in your own browser and never reaches our servers. Account holders can export all of their data or permanently delete their account — and all associated data — at any time from within the application.

Financial account connections (Plaid)

If you choose to connect a financial institution, we use Plaid Inc. to link your accounts. You authenticate directly with your financial institution through Plaid — your bank username and password are never seen, transmitted through, or stored by LotusBloom. Through Plaid we receive read-only account information such as balances, credit limits, statement dates, payment due dates, and interest rates, which we use solely to populate and keep your dashboard current. We do not initiate payments or transfers. Plaid access tokens are encrypted at rest with AES-256-GCM. You can disconnect a linked institution at any time, which deletes the stored access token and stops all further data retrieval; deleting your account removes all linked financial data. Information you provide to Plaid is governed by the Plaid End User Privacy Policy.

The Credit Hub iOS app

The Credit Hub app for iPhone provides the same service as our web application, with the same data practices, plus the following device features — each entirely optional and controlled by you:

Face ID / Touch ID. The app can require Face ID, Touch ID, or your device passcode before opening. Biometric authentication is performed entirely on your device by Apple’s operating system — LotusBloom never receives, stores, or has any access to your biometric data. Push notifications. If you allow notifications, we store an Apple-issued device token (a random identifier, not your location or contacts) solely to send you payment-due reminders; declining or revoking permission in iOS Settings stops this immediately and deletes the token from active use. Camera and photos. The receipts feature can use your camera or photo library only when you choose to attach a receipt; images you save are stored in your account and never used for any other purpose. Purchases. The app itself is free and contains no in-app purchases. Optional one-time unlocks are sold on our website; payments are processed by Stripe and card details never touch LotusBloom systems. Tracking. The app does not track you across other companies’ apps or websites, contains no advertising, and shares no data with data brokers.

The DealDeck iOS app

DealDeck for iPhone is a free app with no account and no login. The cards you add to your wallet, the gift cards you track (including any card numbers, PINs, or notes), and the finds you log are stored only on your device and are never transmitted to us — with one exception you control, described below.

Community finds. If you tap Share on a find, DealDeck sends that find (the item, store, price, note, and any city you added) together with a random, anonymous identifier generated on your device — not your name, email, Apple ID, or advertising identifier — so it can appear in the community feed. You can report or hide any community post from within the app; reported posts are removed and reviewed. Location. With your permission, DealDeck uses your approximate location to fill in the city where you found an item and to sort the community feed by what’s near you. The city label is coarse, resolved on your device, and used only for these features; declining location is fully supported and the app works without it. Camera. The camera is used only when you choose to scan a barcode to log a find; DealDeck does not record or transmit video, and a manual entry option is always available. Purchases and tracking. The app is free with no in-app purchases, contains no advertising, does not track you across other companies’ apps or websites, and shares no data with data brokers.

How we use information

To respond to inquiries and provide requested services; to operate, maintain, and improve the website and our offerings; to monitor usage, prevent abuse, and keep the site secure; and to comply with legal obligations.

How we share information

We do not sell your personal information. We may share information with service providers (such as hosting and analytics) only to the extent needed to operate the site, and we may disclose information when required by law or to protect our rights, users, or the public.

Data retention

We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce our agreements.

Security

We take reasonable measures to protect the information we hold. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You may contact us to ask what information we hold, request corrections, or request deletion, subject to applicable law. California residents have rights under the California Consumer Privacy Act (CCPA). To exercise any rights, email admin@lotusbloomllc.com.

Children’s privacy

This site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Third-party links

The site may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

Changes to this policy

We may update this policy from time to time and will revise the effective date when we do. Continued use of the site after changes are posted means you accept the updated policy.

Contact

Questions can be sent to admin@lotusbloomllc.com, or by mail to LotusBloom LLC, Woodland, California, USA.