Bloom ("Bloom", "we", "us") helps you understand and work with your menstrual cycle. This
policy explains what information the app handles, how it's used, and the choices you have. We
built Bloom to be private by default, and we treat your cycle and health information as some of
the most sensitive data there is.
The short version. Your data lives on your device. If you create an account,
it's backed up to your private, access-controlled cloud storage so it can sync across your
devices. We never sell your data or share it with advertisers. We use AI to generate your
personalized insights, and the data sent for that is not used to train anyone's models.
1. Information we handle
Information you provide
Cycle & health data — period start/end dates, cycle and period length,
and any symptoms, moods, energy, and notes you log.
Your profile — the name you enter, your birthday (optional), the goals and
challenges you select, any health considerations you choose to share, and reflections you write.
Account details — if you create an account, your email address (and, for
social sign-in, the basic profile the provider returns). We never see your social login password.
Reminder preferences — whether you've opted in to cycle reminders.
Information handled automatically
Local app data — your entries are stored on your device so the app works
offline.
We do not include third-party advertising or analytics trackers, and we do
not collect your location or contacts.
2. How we use your information
To run the core app — showing your cycle phase, predictions, focuses, and reflections.
To generate personalized AI insights tuned to what you've logged and the
goals you chose.
To sync and back up your data across your devices when you have an account.
To send the cycle reminders you opt in to (delivered on your device).
We do not use your data for advertising, and we do not sell or rent it to anyone.
3. AI processing
When Bloom creates a personalized insight, a compact summary of the relevant context (for
example, your current phase and recent logs) is sent over an encrypted connection to our AI
provider, Anthropic, which returns the written insight. This data is processed
only to generate your response and is not used to train AI models. Your Bloom
data is never bundled into the app for anyone else to see, and the AI request is made through our
secure server so our API credentials are never exposed.
4. How your data is stored and protected
On your device by default.
In the cloud, if you have an account — stored with our infrastructure
provider, Supabase, protected by row-level security so that your data is
accessible only to your authenticated account.
Data is transmitted over encrypted (HTTPS/TLS) connections.
No method of storage or transmission is ever 100% secure, but we take reasonable measures to
protect your information.
5. Who we share with
We share information only with the service providers that make the app work, and only as needed:
Supabase — authentication and encrypted data storage/sync.
Anthropic — AI processing to generate your insights (see section 3).
Google Play — when you install Bloom from the Play Store, Google may collect
basic app-performance and crash information under its own policies.
We may disclose information if required by law. We will never sell your personal or health data.
6. Your choices and rights
Access & edit — you can view and change your entries anytime in the app.
Delete your account & data — in the app, go to
Settings → Profile → Delete account to permanently erase your account and all of its
cloud data. You can also request deletion from our
account deletion page or by emailing
[email protected]. Separately, you can
reset the app's on-device data anytime from Settings.
Depending on where you live (for example, under GDPR or CCPA/CPRA), you may have additional
rights to access, correct, port, or delete your data, and to withdraw consent. Contact us to
exercise them.
7. Data retention
We keep your data while your account is active. When you delete your account — in-app deletion is
immediate; email requests are completed within 30 days — we remove it from our cloud storage, and
backups are purged on our provider's routine cycle. Data stored only on your device is removed when
you reset the app or uninstall it.
8. Children
Bloom is not directed to children under 13 (or the minimum age required in your country), and we
do not knowingly collect data from them. If you believe a child has provided us information,
please contact us and we will delete it.
9. Not medical advice
Bloom provides general wellness and educational information. It is not a medical device and does
not provide medical advice, diagnosis, or contraception guidance. Always consult a qualified
healthcare professional for medical concerns.
10. Changes to this policy
We may update this policy from time to time. We'll revise the "last updated" date above, and for
material changes we'll provide a more prominent notice in the app.