Welcome to Bloom. This privacy policy explains, in plain language, what data Bloom collects, how it's used, and the choices you have. We've tried to make this readable rather than legally dense — but it's still a binding agreement, so please read carefully.
The short version:
Bloom (the "App") is operated by [YOUR LEGAL NAME OR COMPANY] ("we", "us", "our"), based in [YOUR COUNTRY/STATE]. You can reach us at privacy@bloom.app.
When you use Bloom, you may enter information such as:
When you use the app, we automatically collect:
We do not collect your IP address for tracking, your contacts, your location, your phone number, or your email (unless you explicitly provide it).
When you purchase Bloom Pro or AI credits, the transaction is handled by Google Play Billing. We receive a confirmation that you purchased the item, but Google handles your payment information. We never see your card details.
Bloom is local-first. Your personal data — symptoms, logs, journal entries, photos — is stored on your device. We don't see it. We don't transmit it to our servers unless you explicitly enable a feature that requires it (e.g. partner sync, when launched).
If we add cloud sync in a future version, it will be:
The data on your device is used to power the app's features — show you what week you're in, suggest meals, predict your cycle, and so on. None of this leaves your device.
The anonymous analytics we collect are used to:
We do not use your data to:
We share data only with these limited categories of service providers, only as needed to operate the app:
We will never share your data with advertisers, data brokers, employers, insurers, or government agencies (except as legally required by court order — which we will challenge where lawful).
You have the right to:
For users in the EU/UK (GDPR): The legal basis for processing is your consent (which you give by using the app and accepting this policy) and our legitimate interest in providing and improving the service. You can also lodge a complaint with your local Data Protection Authority.
For users in California (CCPA/CPRA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of "sale" — but we don't sell your data, ever, so the third doesn't apply.
Bloom is not intended for users under 13 (or under 16 in the EU). If we discover we've collected data from a child below this age, we will delete it.
Bloom provides general information based on medical literature, not personal medical advice. We are not a doctor. Always consult a qualified healthcare provider for diagnosis, treatment, or any health concern.
Pregnancy and fertility information is sensitive. We've designed Bloom with care for users in jurisdictions where reproductive privacy may be at risk. Local-first storage means your reproductive data is much harder to access by third parties — including via subpoena — than it would be on a cloud-first app.
We use industry-standard security practices, including:
However, no system is 100% secure. If a breach occurs, we'll notify affected users within 72 hours and report to relevant authorities as required by law.
If we update this policy in a way that meaningfully changes how your data is handled, we'll notify you in the app. Continued use after changes means you accept the new policy.
For privacy questions, complaints, or data requests:
Email: privacy@bloom.app
Postal: [YOUR ADDRESS]
EU/UK Data Protection Officer: [if applicable, otherwise omit]