Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

Abed Al Muhsen Alkarim

Mittelseestr. 6a, 63065 Offenbach am Main, Deutschland

Email: hello@bloomfit.space

2. General

Protecting your personal data is important to us. We process your data only on the basis of statutory provisions (GDPR, German TDDDG, BDSG). This privacy policy explains the most important points of data processing on this website.

The short version: your assessment answers stay in your browser. Nothing about you is sent to us until you buy the full report, and even then we only receive your computed scores and the optional note you wrote.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, technically necessary data (e.g. IP address, date and time of access, page requested) are processed. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR).

Processing may also take place in the USA. The transfer is safeguarded by appropriate measures (EU-US Data Privacy Framework or Standard Contractual Clauses under Art. 46 GDPR).

4. Local storage of your answers

Your assessment answers, your settings and your unlocked results are stored only locally in your browser (local storage) so the assessment can be resumed and your results stay available. These data are not automatically transmitted to us. The legal basis is the performance of the service you requested (Art. 6 (1) (b) GDPR) and § 25 (2) TDDDG (strictly necessary storage). You can delete these data at any time via your browser settings or the "Retake the assessment" button.

5. Purchase and report generation

When you buy the full report, your computed scores (interest, work-style and values results) and the optional note you wrote are sent to our server to create your personal report. The legal basis is contract performance (Art. 6 (1) (b) GDPR).

The optional note and the optional "constraints" answers are free choices. If you include sensitive information there (for example about your health), we process it only to write your report, on the basis of your explicit consent given by providing it (Art. 9 (2) (a) GDPR). Please only share what you want considered in your plan.

To make sure one purchase always returns the same report (for example if you reopen it later), the generated report text is stored together with the payment record at our payment provider Stripe. It is used for nothing else.

6. AI processing (Anthropic)

The written summary and plan in your report are generated by an AI model (Claude) operated by Anthropic, PBC, San Francisco, USA. For this purpose your computed scores and your optional note are transmitted to Anthropic and used solely to generate your report. Anthropic does not use this data to train its models.

The legal basis is contract performance (Art. 6 (1) (b) GDPR). The transfer to the USA is safeguarded by appropriate measures (EU-US Data Privacy Framework / Standard Contractual Clauses).

7. Payment processing (Stripe)

For paid orders we use the payment provider Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland; Stripe, Inc., USA). When you buy, the data needed for payment (e.g. email address, payment data) are processed. The legal basis is contract performance (Art. 6 (1) (b) GDPR).

We do not store payment data (e.g. card numbers); it is processed directly by Stripe. More: https://stripe.com/privacy.

8. Email delivery (Resend)

After a purchase we send your report as a PDF to the email address you provided at checkout. We use the service Resend (Resend, Inc., USA) for delivery. The legal basis is contract performance (Art. 6 (1) (b) GDPR). The transfer to the USA is safeguarded by appropriate measures (DPF / Standard Contractual Clauses).

We do not send newsletters or marketing emails.

9. Cookies and similar technologies

We do not use tracking or marketing cookies on foundmyself.me. Only technically necessary storage (local storage) required to operate the website is used. During payment, the provider Stripe may set technically necessary cookies on its own pages.

10. Storage period

Locally stored answers remain in your browser until you delete them. Data related to purchases (including the generated report text stored with the payment record) is kept as long as necessary to perform the contract or as required by statutory retention periods (in particular commercial and tax-law periods of up to 10 years).

11. Your rights

You generally have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given at any time (Art. 7 (3) GDPR).

An informal message to the contact details above is enough to exercise your rights.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, https://datenschutz.hessen.de

13. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services.