Bloom Privacy Policy
Last updated: August 2026
Bloom is built so that there is nothing to disclose in most of a typical privacy policy: your health data never leaves your device unless you personally choose to export or share it.
1. Data we collect
None. Bloom has no user accounts, no sign-in, and no servers of its own. There is no cloud sync. We do not operate any backend that receives your cycle, pregnancy, or health data.
2. Data stored on your device
Everything you log — cycle days, symptoms, pregnancy entries, appointments, kick counts, contractions, birth plan, vault photos, and your settings — is stored only on your device, encrypted with AES-256 using a key held in your device's secure hardware storage (Keychain on iOS, Keystore on Android). We cannot access this data, and neither can anyone else without access to your unlocked device.
Vault photos and documents (like bills or blood test results) are encrypted separately from your other data, using their own dedicated key, but with the same on-device-only guarantee. Bloom asks for camera and photo library access solely so you can add photos to your private vault — no photo or image ever leaves your device or is transmitted anywhere.
3. Analytics, advertising, and tracking
Bloom contains no analytics SDKs, no advertising SDKs, and no third-party trackers of any kind. We do not know how many people use the app, what they log, or how they use it — we have no way to find out.
4. Exporting and sharing your data
Bloom lets you export your data as an encrypted, password-protected backup file, a PDF formatted for a doctor visit, or a raw CSV file. These files are created entirely on your device. They only leave your device if you actively share, email, or upload them yourself using your device's own share sheet — Bloom itself never transmits them anywhere.
5. In-app purchases
Subscriptions are sold and processed entirely by the Apple App Store or Google Play Billing. Bloom never sees or stores your payment card details — we only receive a purchase confirmation from the platform billing system, which is stored locally in the same encrypted database as everything else. See Apple's or Google's own privacy policy for how they handle payment information.
6. Notifications
Reminders are scheduled entirely on your device using your operating system's local notification system. Bloom does not use push notifications and has no notification server.
7. Your rights and control over your data
Because your data lives only on your device, you already have full access to it at all times. You can export everything at any time from Settings, and you can permanently delete all of your data from the app at any time from Settings → "Delete All My Data." Uninstalling the app also removes all locally stored data.
8. Children's privacy
Bloom is not directed at children and is not intended for use by anyone under 13 (or 16 in the EEA/UK). Since Bloom does not collect any data from any user, it does not knowingly collect data from children either.
9. Changes to this policy
If this policy changes, the "Last updated" date above will change and, for material changes, we will surface a notice inside the app.
10. Contact
Questions about this policy: contact@prajnaanalytics.co.uk