Privacy Policy

Section 01 Who provides Sun Bloom

Streamlyne LLC operates Sun Bloom. You can write to us at 2054 E Buckingham Way, Sandy - 84093-1632, United States or email feedback@sun-bloom.app. References to “we”, “us” and “our” in this policy mean that company. For the purposes described here, we determine the handling of personal information and act as its controller where that term applies under the relevant law.

This notice covers our Android app, https://sun-bloom.app, purchases connected with the app, and support or privacy correspondence. Sun Bloom is being developed for Android, with Google Play availability coming soon. There is no published download link yet. Descriptions of app processing concern its features when they become available: image-to-video, video templates, AI images and image templates.

Personal information is information that identifies someone or can reasonably be connected to them. It can include a photograph, a device reference or a transaction record even when no person's name is attached. Removing a name from a record does not necessarily remove that connection.

Our website provides an introduction, original visual concepts and information about policies and support. It does not accept creative submissions or process payments. The artwork is made for the website; it is not an app screenshot, an available template or a result generated by Sun Bloom.

Reading this notice is not a request for blanket consent. If a particular use requires additional information, permission or a legal step, that requirement remains separate. Rights described for a region depend on the relevant law applying to the processing and on its conditions and exceptions.

Section 02 Using the app without signing in

Sun Bloom does not require you to register, create a password or sign in through a social account. An app-user record and the account-deletion wording in a control refer to service records associated with use of the app. They do not establish a separate registered profile.

Information can still relate to you or your device. Installation references, preferences, creative requests, purchased access and communications are examples. Relevant identifiers help the service act on the correct request and help us find the correct records when you seek support or exercise a right.

Your Google Play account belongs to Google's separate service. A store transaction does not create a Sun Bloom login, and deleting Sun Bloom information does not close a Google account. Google may retain information for its own payment and legal responsibilities under its own privacy notice.

You do not have to register to ask about or remove your information. If we need a reference to locate the records, we explain the need and consider the information available. Do not give us a store password, verification code or other sign-in credential. A support enquiry should not require access to your Google account.

Section 03 Creative material, questions and reports

You provide information when choosing material for a creative operation, describing what you want, reporting content or asking for assistance. The information involved follows the action you choose. Merely reading this website does not require you to supply a photograph, prompt or support message.

We call all information associated with a work creation information. This includes its prompt; any input images or videos supplied; output images or videos; generation parameters, settings and template selections; task identifiers, status and timestamps; metadata; and links or other associations between the records. Copies, previews, thumbnails, derived files, cached versions and backups are included too. This is an illustrative list, not a limit on which fields, formats or systems are covered.

A support exchange includes the question and replies, relevant app-user or order references and any screenshot or attachment you decide to provide. Email correspondence also gives us your reply address. For a content report, we receive the concern, relevant references and the explanation or evidence supplied. The report option is available on a creation's detail page inside the app.

A copy or reference remains creation information when included in a message or a report. Support, moderation or incident handling cannot give it a later deletion deadline. Once the original deadline is reached, a necessary independent case record must no longer contain the creation's material, metadata or associations.

Provide the minimum relevant context. A short description can often begin an investigation without a private source file or a complete identity document. Avoid credentials, unrelated financial records and unnecessary sensitive attachments. If an identifier is unavailable, say so; you do not need to invent one or send an entire history of your device to make an enquiry.

Section 04 Records produced by service use and purchases

Requests from a device, operation of the app and responses from a store or provider can produce additional information. These sources are distinct from material you type into a message. The following categories describe information relevant to running the service and administering the interaction concerned.

• App-user and installation information: service identifiers, preferences, settings and records of purchased access or entitlements. Any connection to a particular creation is included in creation information rather than given the independent record's longer lifespan.
• Transaction information: a store order or transaction reference, the item purchased, dates, receipts or verification responses, purchase or refund status and the related benefit. Google Play handles the payment within its own service; we receive relevant information to verify and administer the app purchase.
• Technical information: an IP address, device or browser characteristics, operating-system and app versions, request times, relevant page or feature interactions, diagnostic or error details, and logs used for delivery, reliability, security or misuse prevention.
• Attribution information: identifiers when available and permitted, referral and channel information, IP and version details, and installation, first-open or session signals used to identify an installation's source. The Adjust section explains this limited purpose and its exclusions.

Prices and the conditions of an available purchase are presented in the app. This website does not publish a price list or collect a payment. The relevant transaction response helps us supply what was accepted, correct an error or implement an approved remedy; it does not authorize retaining creative material as a purchase record.

For a purchase enquiry, use an available order reference and the relevant part of a receipt rather than complete bank or card information. Information we need to resolve an app entitlement can differ from information the store needs for its own payment handling. An independent payment record and a record of a creation have different purposes and removal rules.

Section 05 What the information helps us do

Information is used for the following service, operational and legal purposes. A description of a purpose does not authorize unrelated handling or allow every record to be used for every activity.

• Carry out the creative operation requested: receive inputs and instructions, apply the chosen parameters or template, manage the task and its status, and return the resulting media.
• Keep the app functioning: maintain appropriate service settings, administer access and communicate information relevant to a feature's availability or operation.
• Administer accepted purchases: validate transactions, deliver the agreed benefit, address missing access, reconcile refunds or reversals and investigate a payment discrepancy.
• Respond to people: answer questions, investigate faults, review content concerns, handle privacy and deletion requests, and send relevant administrative communications.
• Understand installation sources: attribute an installation to a referral, campaign or channel through the limited Adjust information. This purpose does not include using Adjust to analyze creations, creative-feature use or purchases.
• Protect and maintain the service: diagnose failures, prevent fraud, investigate misuse or security incidents, consider reports of harmful content and apply the Terms.
• Meet obligations and obtain advice: keep necessary accounting records, comply with valid legal requirements, seek professional advice and establish, exercise or defend legal rights.

Where genuinely anonymous or aggregated information is sufficient to understand performance, it can be used without identifying an individual. Changing or hashing an identifier does not by itself make a record anonymous. Information still connected to a person remains personal information, and a diagnostic or statistical purpose cannot retain a creation or its associations past the creation deadline.

None of these activities includes training AI on user information. An error report, a transaction record or a message seeking help has the same protection against AI training as a creative input or result. A proposed different use must meet any further legal requirements before it begins.

Section 06 Legal grounds and choices about consent

Where the law requires a basis for processing, the appropriate basis depends on the activity and circumstances. Information essential to perform your request is different from optional processing that requires a separate decision. We do not treat the following grounds as interchangeable or use them to bypass consent required by law.

• A contract or requested steps before a contract can support processing needed to perform a creative request, supply a purchase or provide related assistance where the applicable law recognizes that basis.
• A legal obligation can support particular accounting, tax, consumer-protection or other records and disclosures that the law requires.
• Legitimate interests can support necessary reliability, security, fraud prevention and business administration where permitted, after considering whether your rights and interests override that use.
• Consent is used where required for device access, optional tracking, communications or another activity. A visit to this policy page is not that consent.

You can withdraw consent through a relevant available control or by contacting us. That affects future consent-based handling without making earlier lawful processing unlawful. If withdrawal affects the requested feature, we explain the effect. A different legal requirement can still apply to an independent record, such as a transaction we must retain for accounting.

If an essential input or transaction response is not provided, we may be unable to perform the relevant action. Optional support attachments and unrelated private information are not required just to ask a question. We distinguish what is needed for the request from information you may choose not to provide.

New purposes may require further notice, a fresh choice or another legal step. Updating a page or continuing to use the website does not supply a missing permission. The rules governing a particular activity continue to apply alongside this general explanation.

Section 07 How selected media is processed

The Android system Photo Picker lets you choose photographs to make available for an input. The selected material is uploaded for the operation you request. Generation takes place through self-hosted models on servers under our operation; it is not represented as taking place entirely on your phone.

We do not transfer prompts, creative inputs, results or associated creation information to a third-party AI generation provider. Infrastructure, communications, distribution and attribution providers have other roles described in this notice. Self-hosted generation does not mean that no service provider ever processes a technical or operational record.

Sun Bloom does not identify people through facial recognition, extract facial geometry for identification or create biometric identity records. A face in a photo can still identify someone and make the image personal information. The image remains protected even though biometric identification is not performed.

No user information is used to train AI models. The commitment includes prompts, uploads and outputs, and also service identifiers, transaction information, diagnostics, support correspondence and content reports. Completing an operation or addressing a concern is not permission to keep a model-training collection.

Creation information held in our controlled systems and by processors acting for us is deleted within 36 hours of upload start, or prompt submission when there is no upload. The same original deadline covers the output and its associated records. The retention section explains the full scope, including copies outside the generation system.

Use material only where you have the necessary rights and permissions, including permission relevant to another person's likeness or confidential information. Avoid sensitive details that serve no purpose in the request. Examine generated media before using it: it may be inaccurate, unexpected or reveal information you did not intend to share. Save an available result to your own device if you wish to keep it.

Section 08 Material you may use, prohibited content and reports

Upload only photographs and other material that you own or have the rights and permissions needed to use in Sun Bloom. When a picture shows another identifiable person, you need that person's permission, or the permission of someone entitled to give it for them, before you upload it or share a result. A picture being publicly available online does not supply that permission.

The following content is prohibited when you use Sun Bloom:

• Non-consensual intimate imagery (NCII): nude, sexual or intimate images or videos of a real person made or shared without their consent, including fabricated or AI-generated depictions.
• Child sexual abuse material or any sexualised depiction of a minor.
• Material that harasses, threatens, humiliates or impersonates a real person, or is used for fraud or deception.
• Material that infringes another person's copyright, privacy, likeness or other legal rights.

If your rights have been infringed, or you see prohibited content, report it with the option on the creation's detail page in the app, through the contact routes on our Help page or by emailing feedback@sun-bloom.app. Describe the concern and give any reference you have; do not forward the intimate or illegal material itself.

We review each report and may remove the content concerned and restrict the related features. Repeated violations of these rules, or a single serious violation such as NCII or content involving a minor, may lead to suspension of access or deletion of the app-user record. The Terms of Service set out the full rules. Report handling follows the same creation-data deadline described in this policy.

Section 09 Installation-source attribution with Adjust

We use Adjust only to identify where an installation of Sun Bloom originated, for example a referral or acquisition campaign. It does not generate media for us. We do not use it to analyze creative-feature activity, examine a work or track purchase events.

Attribution needs technical signals even when the person has no registered profile. Subject to availability, consent and applicable privacy choices, these can include device or advertising identifiers, referrer and channel details, IP address, operating-system, app or SDK versions, and installation, first-open or session signals needed for the attribution purpose.

Adjust does not receive creation content or associated information from us, including prompts, input or output images and videos, task records, settings and creation metadata. We also exclude support conversations, content reports and purchase events. Necessary attribution information and results may pass through enabled acquisition-channel integrations in accordance with applicable permissions and opt-out choices.

These independent attribution records have their own purpose and retention arrangements. They are not assigned the creative material's removal period. Changing or limiting an advertising identifier can affect later collection without erasing information already received. A request for deletion or access can therefore be separate from a device setting.

Contact feedback@sun-bloom.app about an applicable access, correction, deletion, objection or advertising opt-out concerning information processed for Sun Bloom. We involve the relevant provider as needed to carry out a valid request. Adjust's own privacy information offers more context about its role, while our responsibility for handling performed for the app remains with us.

Section 10 Who can receive information

Disclosure must have a relevant purpose described in this policy. The fact that a category of recipient is listed does not mean it receives every category of information. Access should reflect the work or obligation for which the recipient needs it.

• Operational providers can handle information needed for hosting, storage, website delivery, communications, support, security or similar assistance. Adjust receives the limited attribution signals described above. These roles are separate from AI generation on our self-hosted systems.
• Google Play and purchase-related services can exchange transaction, verification, entitlement, refund and dispute information needed to administer a purchase, correct an issue or satisfy a platform requirement.
• Professional advisers, including lawyers, accountants, auditors and insurers, can receive relevant records for advice, compliance, business administration or a claim, with appropriate confidentiality obligations.
• Courts, public authorities, law enforcement and other legal or safety recipients can receive relevant information when a valid requirement applies or lawful disclosure is needed to protect people, investigate abuse or establish, exercise or defend rights.
• Parties considering or carrying out a financing, acquisition, merger, restructuring or asset transfer can review or receive relevant records subject to appropriate confidentiality and legal safeguards. Required notices and existing privacy commitments continue to apply.
• A person you authorize can receive information at your instruction, such as a representative assisting with a privacy request. A result you export or independently share is then handled by you or its recipient outside our operation of the app.

For processing on our behalf, we require handling limited to the authorized purpose with appropriate protection. Creation information in a provider's systems has the same deadline as the original record. An independent provider may have separate responsibilities for records it handles for itself, such as a marketplace's own payment information; that distinction does not exempt a copy held for us.

We do not sell personal information for money. Some laws use wider definitions of sale, sharing or targeted advertising that can apply without a cash payment. Those definitions and any corresponding choices remain relevant to the actual disclosure, including a qualifying attribution-channel exchange. The regional rights and signal sections explain how to make a request.

Section 11 When creation information and other records are removed

All information associated with a creation in systems we control or processors acting for us must be deleted within 36 hours from the start of its input upload. If the request has no upload, the period starts at prompt submission. Inputs, outputs and their associated records have one deadline; finishing generation does not start another period.

This includes the work itself, prompts, source media, input and output images or videos, parameters, template choices, task identifiers, task status, times, metadata, links, associations and copies. Removal applies across storage and databases, task systems, logs, thumbnails, previews, caches, backups, support messages and attachments, and reporting systems. The scope is not limited to the machine that generated the result.

A copy, internal transfer, investigation or open support matter does not extend the original period. Information about a creation cannot remain inside another record because that record has a separate purpose. By the deadline, retained independent records must no longer include its content, metadata or associations. Accounting, legal, safety and backup needs do not provide an exception for keeping creation information.

• Independent app-user and settings records can remain as necessary to administer service use and purchased access, then be deleted when no longer needed or when a valid request requires it. Links to individual creations are removed by those creations' deadlines.
• Independent transaction records may be needed for verification, entitlement reconciliation, refunds, disputes, accounting or tax requirements. Those purposes concern transactions, not an archive of creative work.
• Independent support or report records may remain to resolve the issue, document an action or address a dispute. Their creative attachments, task references, screenshots and other creation information still have to be removed on time.
• Independent technical and security records may be necessary for diagnosis, protection, fraud prevention or a specific investigation. They cannot preserve creation-specific evidence or a link to it after the original deadline.
• Independent attribution records follow the necessary installation-source purpose, relevant provider arrangements and applicable rights and obligations. Creation information excluded from that integration cannot be retained within them.

For an independent record, we consider whether the purpose continues, any legal requirement or valid request, and whether less identifiable information is sufficient. When the record is no longer needed, we delete it or make it genuinely anonymous. Restricted backup handling of independent non-creation information must not restore erased information to ordinary use; an earlier deletion must be reapplied following a restoration. Creation backups must meet the original deadline.

Copies you download to your device or independently share with a person or service are outside the systems and processors covered by our removal. Manage them through the device or recipient concerned. Sun Bloom is not permanent storage for your creations, so export an available result you want to keep before its deadline.

Section 12 Requesting removal of app-user data

You have independent routes for requesting removal of your Sun Bloom app-user record and associated personal information. Neither requires you to register or sign in, and email does not depend on completing a request in the app first.

• Use Personal Settings in the app. Choose the deletion option, read the details presented and follow its confirmation steps. Save an available result you want to keep before confirming deletion.
• Use the request form on the Data Deletion page. It prepares a deletion email in your own email app, which you review and send; the website does not send or store the form.
• Email feedback@sun-bloom.app and explain that you want your Sun Bloom app-user information removed. Include a useful app-user or order reference if available. If the app is unavailable, uninstalled or you have no identifier, describe the information you do have so an appropriate next step can be considered.

Removal includes the relevant user record, unnecessary settings and associated personal information, including the entire remaining creation record and copies. We instruct providers processing for us to carry out the required removal. Limited verification can be needed to find the correct records and protect against deletion of another person's information; it is not a requirement to create a login or disclose store credentials.

Our support team handles a deletion request as soon as it is seen. We expect to complete it within 30 days; in exceptional circumstances it may take longer, and we will tell you if that happens. Where applicable law sets a shorter period, we follow it.

Necessary independent records can remain only for a justified purpose, such as a particular accounting obligation, payment dispute, security issue or valid legal need. We explain relevant retention exceptions. A retained record cannot continue ordinary use of app-user data that should have been erased or keep creation content, metadata or associations beyond the original deadline.

Routine removal of creation information within 36 hours does not wait for a request, verification or support reply. Once removed, it is no longer available from that deleted record. Uninstalling the app or clearing local data is different from requesting removal of records held by the service.

A privacy request does not close a Google account, erase Google's independent store records or automatically submit a refund request. You can raise a purchase issue and request deletion at the same time. Neither requires giving up an available right concerning the other. Exported files remain outside our removal process as described above.

Section 13 Website storage and choices on your device

Our website does not use analytics or advertising trackers, set advertising cookies or persist gallery selections in your browser. The gallery uses temporary interface state. Fonts come from your device's system fonts rather than external font requests. Pages and images can be cached by the browser for display; this is separate from tracking a person for advertising.

There are no website forms for uploading creative material, purchasing or sending personal information. Gallery controls display the website's artwork without submitting a prompt or generating a result. An email link opens your email service; if you send a message, it is handled as correspondence under this policy.

App technologies operate separately from browser cookies. The installed app uses local and service records for its functions and the limited Adjust integration already described. Browser cookie controls do not automatically turn off an installed SDK, and deleting a device cache does not erase records that have already reached our systems or a provider.

For photo input, the system Photo Picker lets you select which images to make available. If another operation needs a device permission, that permission is requested for the operation. You can refuse or later change access using your device's controls; a dependent feature may then be unavailable. Changing permission does not itself remove material uploaded earlier.

Required consent for tracking or device access is distinct from reading this notice. Use an available control for future access and a privacy request for information already held when appropriate. Independent destinations such as Google Play or Adjust publish their own notices and terms. We remain responsible for our disclosures and for handling carried out on our behalf.

Section 14 Safeguards and security concerns

We apply technical, organizational and administrative safeguards appropriate to the information and the risks. These address transmission, storage and access, with access limited to people and systems that need it for an authorized task. The measures must suit the handling rather than treat every record as equally sensitive or equally accessible.

We review relevant provider handling, investigate errors or suspicious activity and respond to security incidents. No connected service can guarantee that loss, unauthorized use or disclosure will never occur. We assess incidents and notify affected people or authorities when required by the applicable law.

Take care of your device and store credentials. Report a security concern with a short description and an available reference, without sending a password, authentication code or full payment details. Further relevant evidence can be considered after the issue is understood; unrelated private files are not necessary to begin an enquiry.

Protection and investigation do not extend creative retention. Material about a work inside logs or incident evidence remains creation information. Only an independent necessary record with the creative content, metadata and links removed can follow a separate retention purpose after the original deadline.

Section 15 International processing

Our operator is based in the United States. Infrastructure or providers used for service operations, including relevant Google Play and Adjust activities, may process information in other countries. The company's mailing address does not identify where every record is stored. Privacy safeguards and rules for government access can differ between countries.

Where international-transfer rules apply, the relevant handling must use the protection or lawful arrangement required for that transfer. Depending on the destination and applicable law, this can involve an adequacy decision, approved contractual safeguards or another permitted mechanism. UK or European requirements apply where they govern the information and activity concerned.

You may ask for information about the safeguards relevant to your information, including how to obtain an applicable description or copy. Necessary confidential details may be protected while respecting your information rights. A change in processing location does not permit a different purpose or a longer creation-data lifetime, including for provider-held copies.

Section 16 Children and information requiring particular care

Sun Bloom must be used in accordance with the age, capacity and consent requirements applicable to the user. Obtain parental or guardian permission where lawful use requires it. This notice does not permit someone to avoid an age restriction or give a permission they are not legally capable of giving.

We do not knowingly collect children's information in breach of applicable requirements. If we discover collection without required permission or another valid legal basis, we take appropriate steps to stop the unlawful handling and remove the information as required. A parent or guardian may ask for review or deletion, with limited verification where needed to protect the child.

A creative request does not require unrelated health information, government identification, financial documents or other unnecessary sensitive details. Consider what a selected image, prompt or attachment might reveal before submitting it. Other people's privacy and permissions matter even when the intended use is artistic, and an identifiable photograph remains personal information without biometric identification.

Section 17 Your rights and how requests are handled

Write to feedback@sun-bloom.app to ask about information linked to you or exercise an applicable right. Explain the action sought and any relevant available reference. You do not need a Sun Bloom login. The rights available depend on the relevant law, its scope and the legal basis for the processing.

• Access and confirmation: find out whether your information is processed, obtain a copy and understand relevant sources, purposes and recipients.
• Correction: request changes to inaccurate information or completion of information that is incomplete for the purpose for which it is held.
• Deletion and restriction: seek removal or limits on processing under the applicable conditions, including lawful exceptions for independent records where relevant.
• Portability: receive applicable information you supplied in a usable form or request a technically feasible transfer where the law provides that right.
• Withdrawal: change a consent-based choice without affecting the lawfulness of handling before it was withdrawn.
• Advertising and profiling choices: use applicable rights concerning sale, sharing for advertising, targeted advertising or profiling producing qualifying effects.

An objection to processing is distinct from withdrawing consent. Where legitimate interests are relied on, applicable law may allow you to object based on your circumstances. An applicable objection to direct marketing does not require that personal explanation. You can specify whether you want a future use stopped, existing information deleted or both.

We may need a proportionate way to match the request to an app-user, device, transaction or correspondence record. This protects against revealing or removing someone else's information. Authorized agents can act where permitted, with evidence of authority and relevant verification. There is no requirement to register a new profile, and sensitive documents should not be sent unless necessary for the particular verification.

Requests are handled within the applicable legal period. We explain a relevant refusal, permitted extension, lawful charge or retention exception and the next steps available. Protected rights can be exercised without unlawful discrimination. An exception affecting an independent record does not extend the creation deadline.

Where the law provides a complaint route, you may approach the competent regulator or supervisory authority. UK and European supervisory-authority rights remain available when those rules apply. Raising a concern with us may help resolve it, but does not waive an available right to approach the authority directly.

Section 18 Do Not Track and recognized preference signals

The older browser Do Not Track setting does not have a uniform meaning or implementation across services. It is not treated as a universal instruction to erase every app record, disable all installed SDKs or withdraw each separate permission connected with a device.

Legally recognized opt-out preference signals are different. We apply a valid signal, including Global Privacy Control where applicable, as required for the relevant processing. The effect depends on the browser, device or other context governed by the rule; a signal does not automatically identify every independent app installation.

You may also send an applicable sale, sharing or targeted-advertising opt-out to feedback@sun-bloom.app. Identify the relevant service or available record without sending credentials. A choice restricting an advertising identifier can affect future handling without deleting older information. If removal of previous information is also intended, include that request so both choices can be considered.

Section 19 California privacy rights

California privacy law provides rights where it applies to our handling and its scope, thresholds and exceptions are satisfied. The earlier sections describe the categories of information, their sources, purposes, recipients and retention criteria. A conditional description of a right is not a statement that every type of regulated processing takes place in the app.

Relevant categories can include identifiers and contact information, commercial information concerning purchases or access, internet and app activity or technical records, and images, videos, prompts and communications you provide. Selected material can reveal additional personal or sensitive details. It is used and disclosed for the purposes and recipient roles described here, with the same deadline for creation information.

• Applicable rights include access to information and details about handling, correction of inaccurate records and deletion under the statutory conditions.
• Where relevant, you may opt out of sale or sharing for cross-context behavioral advertising and limit qualifying uses or disclosures of sensitive personal information.
• An authorized representative may act under the applicable rules for authority and verification. Exercising a protected privacy right must not result in unlawful discrimination.

We do not exchange personal information for money, but California's broader sale and sharing definitions can cover other disclosures. If necessary attribution information exchanged through an enabled acquisition channel falls within those definitions, an applicable opt-out is available through our email route or a legally recognized preference signal. Those exchanges do not include our users' creations, support messages, content reports or purchase events.

Verification is limited to what is proportionate for the request. We explain a relevant exception if it prevents completion. You can begin by describing the information involved without sending another copy of sensitive material; any further evidence requested should be needed to identify the matter or verify authority.

Section 20 Virginia requests and appeals

Eligible Virginia residents can use the rights provided by the Virginia Consumer Data Protection Act where the Act applies, subject to its conditions and exceptions. These relate to the handling explained in this notice, rather than assuming the service carries out every activity named in the statute.

• Confirm whether personal data is processed, access it, correct inaccuracies and request deletion under the applicable rules.
• Obtain an applicable portable copy of information you provided in a readily usable format, where the statutory and technical conditions are met.
• Opt out of targeted advertising, sale of personal data or profiling for decisions with legal or similarly significant effects where that activity and right apply.
• Exercise protected rights without unlawful discrimination and appeal a refusal to take action on a request.

Send the request to feedback@sun-bloom.app. For an appeal, reply to the decision or email the same address with “Privacy appeal” and explain what you want reconsidered. We review it and provide the outcome and reasons within the applicable legal period. If the appeal is denied, we provide an available online mechanism or other method for submitting a complaint to the Virginia Attorney General.

A review may need the earlier request reference or enough detail to identify it, but does not require a new registered account. An unresolved request or appeal does not keep creation information beyond its original deadline. Additional review material remains subject to the purposes and limits explained in this policy.

Section 21 Updates, contact and follow-up

This policy version is dated November 6, 2026. We may revise it when features, processing, providers or legal requirements change. Material changes receive any additional notice required, rather than relying on a page edit to satisfy a separate notification obligation.

A new purpose must meet the legal requirements that apply before information is used for it. Revisions cannot supply a missing consent, remove existing rights retrospectively or lengthen a creation's fixed lifetime. A provider's updated notice does not replace our responsibility for handling performed by us or on our behalf.

For access, correction, deletion, an objection, appeal or a question about information handling, email feedback@sun-bloom.app. You may also contact Streamlyne LLC at 2054 E Buckingham Way, Sandy - 84093-1632, United States. Our official website is https://sun-bloom.app.

Describe the issue and include a relevant available app-user, order or correspondence reference. Your reply address is a way to communicate, not evidence that you registered with Sun Bloom. Do not send passwords, authentication codes, complete payment details or unrelated identity documents.

Content can be reported from its creation detail page in the app or described to support. Avoid forwarding illegal material or unnecessary personal details when an explanation will suffice. Creation content, references and attachments in the report keep the original removal deadline.

The linked pages explain practical help, purchase remedies and data removal. A support conversation does not enroll you in unrelated marketing, and a purchase question does not prevent a privacy request. Focus a follow-up on the unresolved issue instead of repeatedly sending private files.