Privacy Policy

Last updated: May 27, 2026

1. What we collect

Bloom is designed around data minimization. We collect only what is needed to provide the service:

• Cycle data you log — period dates, symptoms, mood, sleep, BBT. Stored locally on your device by default.
• Device identifier — a randomly generated UUID stored on your device. Not linked to your Apple ID, email, or phone number.
• Subscription status — whether you have an active premium subscription, via Apple's StoreKit and RevenueCat.
• Crash logs — anonymous crash reports (if enabled in iOS Settings).

2. What we don't collect

• Email address, phone number, name, or any contact info
• Location data (GPS, IP-based geolocation, region)
• Photos, contacts, calendar entries, or microphone data
• Browsing history, app usage outside Bloom, or device fingerprints
• Cycle data is never sent to advertising networks, data brokers, or third parties for marketing

3. AI processing

When you use AI features (insights or chat), your message and minimal cycle context (current phase, cycle day) are sent to one of our AI providers (Anthropic Claude, Google Gemini, or OpenAI). These providers:

• Do not train on your data (per their commercial terms)
• Do not retain it for longer than needed to generate a response
• Receive only the device identifier, not anything that identifies you personally

You can disable AI features at any time in Settings.

4. Where data is stored

Your cycle log is stored locally on your iPhone using iOS standard storage (UserDefaults and SwiftData). It is not automatically uploaded to our servers. Optional iCloud backup uses your own Apple ID encryption — we cannot read it.

5. Your rights (GDPR, CCPA)

You have the right to:

• Access — request what data we have about you (almost none)
• Delete — uninstall the app removes all local data instantly. Server-side device identifier expires after 36 hours of inactivity.
• Object — disable AI features or analytics in Settings
• Portability — export your cycle log (coming soon)

To exercise any of these rights, email privacy@bloomperiod.app.

6. Reproductive health and legal context

We understand that in some jurisdictions, cycle data can be subject to legal scrutiny. Bloom is built with this in mind:

• No account required. No email, no phone, no identity.
• Cycle data is local-first. It does not leave your device for storage.
• We do not respond to data requests we cannot fulfill — we have no cycle data to give.

7. Children

Bloom is intended for users 13 and older. We do not knowingly collect data from children under 13.

8. Changes

If we materially change this policy, we will update the "Last updated" date at the top and notify active users in-app.

9. Contact

Privacy questions: privacy@bloomperiod.app
General contact: hello@bloomperiod.app