Privacy Policy

Last updated 26 October 2026.

Blisspot is a wellbeing app. People write things here they would not say out loud. This page sets out exactly what we hold, why we hold it, and who can see it — in plain words rather than legal ones.

It covers blisspot.com, our app, our courses and our blog, which are one membership run by Blisspot Pty Ltd, ABN 65 623 616 697.

The short version

• Your journal, vision boards, bucket list and Wellbeing Index answers are yours. Nobody else can read them — not your employer, not other members, not Blisspot staff going about their day.
• If your employer pays for your membership, they see group averages only, and never a group smaller than ten people.
• We do not sell your information, and we do not share it for advertising.
• We never see your card number.

What we collect

When you create an account, you give us:

• Your email address, used to sign you in and to send you the things you ask for.
• Your first name, and your last name if you give one.
• A profile picture, if you choose to add one. This one is public by design — it is shown beside you on our blog.
• Your timezone, so that “today” means your today and the day turns over at your midnight rather than ours.
• The times you would like your morning and evening reminders.
• Which recording of a program you prefer. This is a choice about audio, not a record of your gender.

As you use Blisspot, we store what you create:

• Gratitude journal entries.
• Vision boards — the pictures, the words and where you put them.
• Bucket list items, and any photograph attached to one.
• Your Wellbeing Index answers and the scores worked out from them.
• Which program you are on, which day you are up to, and which steps you have marked done.

We also keep ordinary technical records — when a reminder was sent, when an email was delivered, when something failed — so the service can be kept working.

Why we collect it

To run your membership: to show you the right day of the right program, to send the reminders you asked for, to show your own writing back to you, and to let you move between the app, the courses and the blog without signing in three times. We do not collect anything because it might be interesting later.

Who can see what you write

You can. That is the whole list. Every one of these tables is protected at the database level by rules that check who is asking: a request for somebody else’s journal returns nothing, whoever makes it. Pictures you upload to a vision board or a bucket list are stored in a private area and reached only through links that expire.

Blisspot staff do not read member journals. Our support team can see your account and what has gone wrong with it; they cannot see what you have written.

If your employer pays for your membership

Your employer never sees your individual answers, your scores, or anything you write. They see averages across their organisation, and only where at least ten people have responded. Below ten, nothing is shown at all — because in a small team an average is a name.

This is enforced in the database itself rather than hidden in the interface, so it holds regardless of what anyone asks for.

Who else is involved

Running Blisspot means using other companies. Each of these processes information on our behalf, under contract, and none of them may use it for their own purposes:

• Supabase — stores the database and the files you upload.
• Vercel — runs the app itself.
• Thinkific — runs our courses and takes the payments. Your card details go to them and their payment provider; we never see them.
• OneSignal — delivers the morning and evening notifications to your phone.
• Resend — sends the emails the service needs, such as confirming your address and resetting your password.
• ClientFlow — our customer records, which hold your name, email and which program you chose, so we know who our members are.
• Cloudflare — protects the sign-up form from automated abuse, and speeds the site up.
• Binary Lane — hosts our blog.

Your account itself is held in Australia. The database and the file storage that hold your sign-in, your journal, your bucket list, your vision boards, your pictures and your Wellbeing Index answers run in Sydney. Our blog is hosted in Australia too.

Some of the other companies hold data overseas. Thinkific is Canadian and runs in Canada and the United States. OneSignal, Resend and ClientFlow are in the United States. Vercel and Cloudflare run networks of servers in many countries and may serve you from whichever one is nearest. By using Blisspot you agree to that transfer. We choose providers who commit to protecting your information to a comparable standard, but we cannot control foreign law.

Reminders and messages

We send you what the service needs: a link to confirm your address, a link if you forget your password, and the morning and evening reminders you chose. You can turn reminders off at any time on your reminders page.

We send marketing email only if you have asked for it, and every one carries a way to stop. Turning off marketing does not stop the emails the service needs to send you.

How long we keep it

For as long as you have an account. If you close your account, we delete what you have written, normally within seven days. We may keep basic records of payments for as long as Australian tax and company law requires, which is generally five to seven years.

Keeping it safe

Everything travels encrypted. Passwords are stored as one-way hashes and cannot be read by us or anyone else. Access to the systems that hold member data is limited to the people who need it. No service can promise it will never be breached; if one happens and it is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.

Your rights

Under the Australian Privacy Act you can ask what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Write to [email protected] and we will answer within 30 days. We do not charge for this.

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. If you are still unhappy, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au .

Children

Blisspot is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.

Cookies

We use the small number of cookies the service cannot work without: one that keeps you signed in, and one from Cloudflare that tells automated sign-ups apart from people. We do not use advertising cookies and we do not track you across other websites.

Changes

If we change this page in a way that matters, we will tell you rather than quietly updating the date at the top.

Contact

Blisspot Pty Ltd, ABN 65 623 616 697 — [email protected]