Bloom Privacy Policy

Bloom ("Bloom", "we", "us") helps you understand and plan around your menstrual cycle, and supports you through pregnancy and postpartum recovery. This policy explains what information Bloom handles, why, who helps us process it, and the choices you have. We treat your cycle, pregnancy and health information as some of the most sensitive data there is.

1. Information we collect

Information you give us

• Account details: your email address and password (the password is held by our authentication provider in a form we cannot read). If you sign in with Apple or Google, we receive the name and email address that provider shares.
• Your profile: your first name, birthday, the goals and challenges you choose, how you said you were feeling, and any health considerations you choose to share (for example PCOS, endometriosis or irregular cycles).
• Cycle and health logs: period start and end dates, cycle and period length, energy, mood, stress, symptoms, any fertility signs you choose to log (such as ovulation tests or cervical mucus), what is going on in your life that day, and your notes.
• Pregnancy and postpartum: your due date or the first day of your last period, your baby's date of birth and (if you add it) name, how you are feeding, the feeds, sleeps, movement counts and contraction times you log, and when your period returned.
• Focuses and plans: the focuses you set, your plans for each day, and your reflections on how they went.
• Conversations with Bloom AI: the messages you send and Bloom's replies, kept in your account so you can return to them.
• Preferences: reminders, theme and similar settings.
• Subscription status: which plan you are on, whether it is in a free trial or active, and the relevant dates. Payment itself is handled by Apple or Google; we never see your card details.

Information collected automatically

• Setup analytics: while you look at our website and set Bloom up for the first time, we record anonymous steps: which setup screens you reach and when, which buttons on our website and the subscription screen you tap (for example, the plan you choose and whether a purchase or restore went through), and whether you chose email, Apple or Google to sign in. Each step carries only a random identifier created on your device, the platform, the version of the app, and the name of the website or campaign that sent you to us, if any (never the full address). It is not linked to your account and contains no health data, none of your answers, no name and no email. We use it only to see where people get stuck and which of our own links bring people to Bloom.
• Bloom AI usage counts: how many Bloom AI requests your account makes each day, so we can apply a fair daily limit. We count requests; we do not keep their content here.
• Service logs: our providers keep standard technical logs, such as IP addresses and request times, to run and secure the service.

We do not use advertising or third-party analytics trackers, and we do not collect your precise location or your contacts.

2. How we use your information

• To run Bloom: your phase, predictions, check-ins, focuses, plans, reflections, and pregnancy and postpartum tracking.
• To answer you through Bloom AI (see section 3).
• To keep your data in sync across the devices you sign in on.
• To send the reminders you choose. These are scheduled on your device.
• To provide your subscription and free trial, and to answer support requests.
• To keep Bloom secure and prevent abuse, including applying daily limits to Bloom AI.
• To improve the setup flow, using the setup analytics described above.

We do not use your data for advertising, and we do not sell or rent it to anyone.

3. Bloom AI

When you open an insight or chat with Bloom AI, the request goes through our server to our AI provider, Anthropic, over an encrypted connection. It contains what is needed to answer you: your messages, and a summary of your context, such as your first name, your current phase or week, your recent logs and notes, the goals, challenges and health considerations you chose, your focuses, and your pregnancy or postpartum details. Anthropic processes it to write the reply under its commercial terms, which do not allow it to train AI models on this data.

Bloom AI gives general wellness information. It can make mistakes, and it is not medical advice.

4. Where your data is stored and how it is protected

• On your device, so Bloom works without a connection.
• In your account, with our infrastructure provider Supabase. Row-level security means your data can only be read by your own signed-in account, and our provider encrypts stored data.
• All data is sent over encrypted (HTTPS/TLS) connections.
• Our providers may process data in the United States and other countries.

No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

5. Who we share it with

We share information only with the service providers that make Bloom work, and only as needed:

• Supabase: accounts, sign-in, data storage and sync.
• Anthropic: Bloom AI (see section 3).
• RevenueCat: manages subscriptions. It receives your Bloom account ID and the purchase records Apple or Google provide, not your health data.
• Apple (App Store) and Google (Google Play): distribute the app and process payments under their own privacy policies, and may collect basic app performance and crash information.
• Cloudflare: hosts the Bloom website and app.
• Google Fonts: the website loads its fonts from Google, which receives your IP address when it does.

We may disclose information if the law requires it or to protect someone's safety. If Bloom is ever involved in a merger, acquisition or sale of assets, your information may be transferred as part of it, and it would stay protected by this policy. We will never sell your personal or health data.

6. Your choices and rights

• See and change your data at any time in the app.
• Delete your account and data: in the app, go to Settings → Profile → Delete account. This permanently erases your account and all of its data. You can also use our account deletion page or email support@bloom-tracking.com.
• Reminders: turn them off in Settings in Bloom, or in your phone's notification settings.
• Your rights: depending on where you live (for example under the GDPR or UK GDPR, the CCPA/CPRA, or US state consumer health data laws such as Washington's My Health My Data Act), you may have the right to access, correct, delete or receive a copy of your data, to withdraw consent, and to appeal a decision we make about your request. Email us to use any of these rights. We will not treat you differently for using them.

7. How long we keep it

We keep your data while your account is active. When you delete your account in the app, it is removed from our storage immediately; deletion requests by email are completed within 30 days. Backups are cleared on our provider's routine cycle. Setup analytics are kept without any link to you. Apple, Google and RevenueCat keep the purchase records the law requires. Data that is only on your device is removed when you reset the app or uninstall it.

8. Children

Bloom is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect data from them. If you believe a child has given us information, please contact us and we will delete it.

9. Not medical advice

Bloom provides general wellness and educational information. It is not a medical device, it does not diagnose or treat any condition, and it must not be used as contraception. Always consult a qualified healthcare professional about medical concerns, and contact emergency services in an emergency.

10. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above, and for material changes we will give you a more prominent notice in the app.

11. Contact us

Questions, or a request about your data? Email support@bloom-tracking.com.