Privacy

Privacy Policy

This policy explains how Bakeluma handles information from its website, accounts, bakery pricing workspaces, team collaboration, support, and subscription services.

Effective date: July 21, 2026 | Last updated: July 21, 2026

Operator and scope

Bakeluma is operated by Guo Bin Fan, an individual residing in the People's Republic of China (the “Operator,” “Bakeluma,” “we,” “us,” or “our”). This policy applies to the Bakeluma website at https://www.bakeluma.com, contact forms, account and sign-in flows, bakery pricing software, team workspaces, subscription and billing features, and communications with our support team.

Privacy contact email: privacy@bakeluma.com. If you use Bakeluma through a third-party website or service, that third party's own privacy policy may also apply.

Our role in processing data

For account, authentication, subscription, billing, website contact, support, security, and service operations information, Bakeluma usually determines why and how the information is processed and therefore generally acts as the personal information handler or data controller.

When a bakery or team uses a workspace to process information about its members, suppliers, payees, or other people, that bakery or team may decide how the information is used and Bakeluma provides the software on its behalf. Workspace owners and administrators are responsible for having a lawful basis to enter and share that information and for giving any required notices to those people.

Information we collect

Account and identity information: username, email address, phone number, display name, avatar, sign-in method, verification status, and account status.
Bakery and team information: bakery name, description, region, workspace, team members, roles, permissions, and invitations.
Bakery business content: ingredient and packaging names, categories, supplier platforms, shops, purchase links, prices, units, net quantities, product names, images, recipes, production steps, shelf life, baking parameters, and notes.
Cost and pricing information: fixed costs, payment cycles, payment methods, payee names and contact details, ingredient and packaging quantities, costs, break-even prices, selling prices, margins, profit targets, pricing methods, monthly sales assumptions, versions, and historical snapshots.
Support and contact information: name, email address, issue type, subject, message content, follow-up emails, and any attachments or other information you choose to provide.
Subscription and billing information: billing email, plan, subscription and payment status, billing periods, cancellation status, and transaction identifiers supplied by our payment provider. Full payment card numbers and security codes are normally handled by the payment provider and its partners rather than stored directly by Bakeluma.
Technical and security information: IP address, browser or device information, session information, cookies, local storage preferences, errors, and diagnostic information needed to operate and protect the service.

Sources of information

Information you provide when registering, creating a bakery, using a workspace, uploading images, purchasing a plan, or contacting us.
Information provided by a workspace owner, administrator, or member when inviting you or managing a team.
Information provided by an authentication, social sign-in, or payment provider you choose to use.
Information generated by the Bakeluma website and application when you use the service.

How we use information

Create and protect accounts and provide sign-in, authentication, bakery setup, team invitations, roles, and permission management.
Store workspace content and calculate and display costs, break-even prices, selling prices, margins, profits, and historical changes from the information you enter.
Enforce the quotas, features, history access, and team seat limits of the Free, Starter, Pro, and Team plans.
Create and manage subscriptions, reconcile Creem payment events, and handle renewals, upgrades, cancellations, refunds, payment problems, and disputes.
Respond to contact forms, product questions, privacy requests, technical support, and billing inquiries.
Maintain service reliability and prevent fraud, abuse, spam, unauthorized access, and security incidents.
Diagnose errors, improve reliability and usability, and meet tax, accounting, compliance, and dispute-handling obligations.

Legal bases for processing

Depending on your location and the activity involved, we may rely on one or more of the following legal bases.

Entering into or performing a contract with you, including providing accounts, workspaces, calculations, team features, and paid plans.
Complying with applicable legal obligations, including tax, accounting, consumer protection, payment, and valid regulatory requirements.
Our legitimate interests in protecting the service, users, and business, including security, fraud prevention, troubleshooting, service improvement, and legal claims, where those interests are not overridden by rights protected under applicable law.
Your consent where required, including for non-essential cookies, certain marketing, sensitive personal information, or certain cross-border disclosures. You may withdraw consent as provided by applicable law.

Visibility and control in team workspaces

Information in a workspace is displayed to owners, managers, or staff according to their roles and permissions. Workspace owners and authorized administrators may invite, deactivate, or remove members, change roles, and manage workspace content. A member leaving a team does not necessarily delete recipes, products, costs, or pricing history belonging to the bakery. Related activity records may be retained or de-identified to preserve business history and security.

How we share information

We do not sell personal information or share or use it for cross-context behavioral advertising. We disclose information only as needed to provide the service, protect users, complete transactions, or meet legal obligations.

Authentication and account providers, such as Logto.
Website hosting, database, and file storage providers.
Payment and subscription providers, including Creem as Merchant of Record.
Email, support, error monitoring, and security providers, such as Resend and Sentry.
Authorized workspace members, according to the roles and permissions configured by the bakery.
Professional advisers, authorities, or transaction parties when required by law, needed to protect rights and safety, or involved in a financing, reorganization, or sale of the business.

Cookies and local storage

Bakeluma uses cookies or local storage needed for sign-in sessions, language preferences, security, and contact-form spam prevention. Some essential technologies may be set by our authentication or hosting providers. They are not used for cross-site advertising. If we later enable analytics, advertising, or other non-essential technologies, we will provide notice and choices or obtain consent where required by applicable law.

Data retention

We keep personal information only for as long as needed to provide Bakeluma, protect accounts and workspaces, handle subscriptions and support requests, and meet applicable legal obligations.
Account, bakery, team, and workspace information is generally kept while the account or workspace is active.
Some products, ingredients, and packaging can normally be restored for 30 days after being moved to the recycle bin. After that period, information that is not referenced by historical records may be permanently deleted, while information needed to preserve recipe or pricing history may remain in an archive or historical snapshot.
Contact, support, security, and technical records are kept only for as long as needed to respond to requests, investigate problems, prevent abuse, or resolve disputes.
Subscription and billing records may be kept longer when needed for payments, taxes, accounting, refunds, chargebacks, or other legal obligations.
Data in backups is overwritten according to the applicable backup rotation schedule and is used only for restoration, security, and disaster recovery while it remains there.
When information is no longer needed, we delete it, de-identify it, or restrict further processing unless the law requires continued retention.

International and cross-border processing

The Bakeluma Operator is located in the People's Republic of China. Because users and service providers may be located in different countries or regions, information may be accessed, transferred, or processed outside the country or region where you live.

Where applicable law requires safeguards, notices, or consent for an international transfer, we will take the required steps before making that transfer.

Your rights and choices

Depending on applicable law, you may request information about, access to, a copy of, correction, completion, deletion, or export of personal information we hold.
Where applicable, you may request restriction, object to certain processing, withdraw consent, or opt out of non-essential communications.
Bakery business content in a workspace is generally controlled by the workspace owner. Requests from an individual member may need to be coordinated with the workspace owner, without limiting the member's legal rights over personal account information.
Submit a request by contacting privacy@bakeluma.com. To protect account and team information, we may need to verify your identity and authority.
You may also complain to a privacy or data protection authority with jurisdiction in your location.

Security

We use reasonable technical and organizational measures designed to protect account and workspace information. No online service can guarantee absolute security. You should protect your sign-in credentials, assign team permissions carefully, and contact privacy@bakeluma.com promptly if you suspect unauthorized account use.

Automated processing and pricing calculations

Bakeluma automatically uses your inputs to calculate costs, break-even prices, suggested prices, margins, profits, and risk indicators, and uses plan and role information to determine feature access. These activities provide the software functionality you request and are not used to make credit, employment, insurance, or eligibility decisions that produce legal or similarly significant effects about an individual.

Children

Bakeluma is designed for bakery operators and teams, not children. You must be at least 18 years old or have reached the legal age to enter into this service contract in your location. If we learn that we collected a child's information without appropriate authorization, we will take reasonable steps to delete it or restrict processing.

Changes to this policy

We may update this policy as the product, service providers, laws, or data practices change. We will update the date on this page. For material changes, we will provide notice by email, an in-product notice, the registration or sign-in flow, or another reasonable method, and obtain renewed consent where required by law.

Contact us

Operator name: Guo Bin Fan. Privacy contact email: privacy@bakeluma.com. We will handle privacy requests and complaints in accordance with applicable law.