Privacy Policy for Bloom
Last Updated: March 23, 2026
Introduction
Bloom (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use the Bloom mobile application (the “App”).
Developer: Dawid (Osanuo) Location: Warsaw, Poland Contact: osanuo.studio@gmail.com
Information We Collect
Data Stored Locally on Your Device
Bloom stores the following information locally on your iOS device:
- Cycle Data: Period dates, cycle lengths, and predicted phases
- Daily Logs: Symptoms, mood, energy levels, and notes you enter
- Pregnancy Records: LMP date, due date, weight entries, kick counts, contractions, and symptoms
- Postpartum Records: Recovery weeks, mood entries, feeding sessions, and sleep data
- Appointments: Dates, titles, and notes for health check-ups
- Contraception Records: Method, start date, and reminder preferences
- Health Import Data: Cycle and fertility data imported from Apple Health (if you choose to import)
- User Preferences: App settings, current mode, notification preferences, and premium status
Data We Do NOT Collect
We want to be clear about what we don’t collect:
- We do NOT collect your personal information (name, email, phone number)
- We do NOT track your location
- We do NOT access your contacts
- We do NOT collect device identifiers for tracking purposes
- We do NOT send your health data to external servers
- We do NOT use analytics or tracking services
- We do NOT share your data with third parties
- We do NOT use cookies or similar tracking technologies
Apple Health Integration
Bloom can optionally read and write health data from Apple Health (HealthKit):
- Read: Menstrual cycle data, reproductive health events, heart rate, and activity data — only if you explicitly grant permission
- Write: Cycle, period, fertility, and reproductive health data — only if you explicitly grant permission
- All HealthKit data remains on your device and within Apple’s secure HealthKit framework
- You can revoke HealthKit access at any time in Settings → Privacy & Security → Health → Bloom
How We Use Your Information
All data collected by Bloom is used solely to:
- Track your cycle, fertility, pregnancy, and postpartum recovery
- Calculate predictions, phases, and health insights
- Send you reminders (only if you enable them)
- Sync data across your Apple devices via iCloud (if you enable iCloud sync)
- Display widgets on your Home Screen and Lock Screen
Legal Basis for Processing (GDPR)
Since all data processing happens locally on your device under your direct control, we process your data based on:
- Consent: You voluntarily choose to enter health data and grant permissions
- Contractual Necessity: To provide the App’s core functionality you requested
- Legitimate Interests: To enable core features like cycle predictions and health insights
Data Storage and Security
Local Storage
All your data is stored locally on your device using:
- iOS Secure Storage: Apple’s secure storage mechanisms (SwiftData)
- Encryption: Your data is protected by iOS’s built-in encryption when your device is locked
- No Cloud Servers: We do not maintain any servers that store your personal data
- App Groups: Widget data is shared between the app and widget extension via a secure local App Group container
iCloud Sync
If you choose to enable iCloud sync:
- Your health data is synced across your Apple devices using your personal iCloud account
- This data is encrypted and stored in your private iCloud storage
- We cannot access your iCloud data
- This is entirely managed by Apple and subject to Apple’s Privacy Policy
- You can disable iCloud sync at any time in the App settings
Third-Party Services
Bloom does not use any third-party analytics, advertising, or tracking services.
If you purchase a subscription through the App Store:
- Payment is processed entirely by Apple
- We do not collect or store your payment information
- Your purchase is subject to Apple’s Privacy Policy
Children’s Privacy
Bloom is designed for adult women managing their reproductive health. We do not knowingly collect personal information from children.
Age Requirements
- European Union: You must be at least 16 years old (or the minimum age required in your country under local law)
- Other regions: You must be at least 13 years old
Your Rights and Choices
You have complete control over your data:
Access Your Data
All your data is visible within the App at all times.
Delete Your Data
You can delete your data at any time by:
- Using “Reset App Data” in the Profile tab settings
- Deleting the App from your device (this permanently removes all local data)
Export Your Data
You can export your health data from the App’s Settings as a CSV file (Premium feature).
Disable Notifications
You can turn off notifications at any time in:
- The App’s Settings
- Your device’s Settings → Notifications → Bloom
Revoke HealthKit Access
You can revoke Health access at any time in:
- Settings → Privacy & Security → Health → Bloom
GDPR Compliance (European Economic Area Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have enhanced data protection rights under GDPR.
Your GDPR Rights
- Right of Access: You can view all your data within the App at any time
- Right to Rectification: You can edit your health data at any time
- Right to Erasure: You can delete all data using “Reset App Data” in settings
- Right to Data Portability: You can export your data as CSV (Premium)
- Right to Object: You can choose not to enable optional features like notifications or iCloud sync
- Right to Withdraw Consent: You can disable any optional features at any time
Data Protection Authority
Urząd Ochrony Danych Osobowych (UODO) Website: https://uodo.gov.pl
Email: osanuo.studio@gmail.com Response Time: Within 30 days
California Privacy Rights (CCPA)
Since Bloom does not collect, sell, or share personal information with third parties, most CCPA provisions do not apply. You still have the right to access, delete, and opt-out of data sale (we never sell data).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you by posting the new policy on this page and updating the “Last Updated” date.
Contact Us
Developer: Dawid (Osanuo) Location: Warsaw, Poland Email: osanuo.studio@gmail.com GitHub: https://github.com/osanuo Website: https://osanuo.github.io/Bloom.app/
We will respond within 30 days (EU/EEA users as required by GDPR).
Summary
In plain English:
- ✅ Your health data stays on your device (local storage only)
- ✅ We don’t collect personal information
- ✅ We don’t use trackers, analytics, or cookies
- ✅ You control all HealthKit permissions
- ✅ You can delete all data anytime via Reset App Data
- ✅ Optional iCloud sync uses your private iCloud
- ✅ No ads, no sharing, no selling of data
- ✅ Full GDPR compliance for EU users
We built Bloom to respect your privacy. Your health data is yours alone.
This Privacy Policy is effective as of March 23, 2026 and complies with GDPR, CCPA, and applicable EU consumer protection laws.