← Back to Legal Documents

Privacy Policy

Introduction

This Privacy Policy explains how Bloom: Smart Task & Habits ("Bloom," "we," "our," or "us") collects, uses, shares, and protects information when you use our mobile app.

Information We Collect

1. Account and Identity Data

• Email address
• Authentication identifiers (for example, Google account ID and internal user ID)
• Basic profile data from sign-in providers (for example, display name and profile image)

2. App Content and Productivity Data

• Tasks, subtasks, routines, challenge/history items, and related productivity data
• App preferences and notification settings

3. Voice and Audio Data (Microphone)

• If you use voice features (including AI Companion voice sessions), Bloom requests microphone access (RECORD_AUDIO)
• Audio input is processed to provide speech-to-text and voice interaction functionality
• We may process associated transcripts or voice-derived text needed to deliver feature output

4. Purchases and Subscription Data

• Purchase status, subscription entitlement state, product identifiers, and transaction metadata required to manage billing features

5. Diagnostics and Technical Data

• Crash logs, error events, and diagnostics metadata (for example, device model, OS version, app version, timestamps)
• Security and anti-abuse telemetry required to operate and protect the app

How We Use Information

• Provide core app functionality, account access, and sync
• Enable voice and AI features you choose to use
• Process in-app purchases and subscriptions
• Send reminders and notifications that you configure
• Maintain reliability, debug issues, and improve performance
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms

Permissions and Device Features

• Microphone (RECORD_AUDIO): Used only for voice features such as AI Companion sessions and voice task workflows.
• Notifications (POST_NOTIFICATIONS): Used to deliver reminders and productivity notifications.
• Exact alarms (SCHEDULE_EXACT_ALARM): Used to schedule time-sensitive reminders on supported Android versions.
• Boot completed (RECEIVE_BOOT_COMPLETED): Used to restore scheduled reminders after device restart.

Legal Basis / Consent-Style Notice

Depending on your region, we process data based on one or more of the following:

• Performance of our contract with you (providing the app and requested features)
• Your consent (for example, granting microphone/notification permissions)
• Legitimate interests (service reliability, fraud prevention, security)
• Compliance with legal obligations

Where consent is required, you can withdraw it by changing device/app permission settings. Some features may stop working if permissions are disabled.

Third-Party Services and Processors

Bloom uses third-party providers to operate core functionality:

1. Supabase

• Purpose: Backend database, authentication, API functions, and sync
• Privacy Policy: https://supabase.com/privacy

2. Google Sign-In / Google Identity

• Purpose: Authentication
• Privacy Policy: https://policies.google.com/privacy

3. Google Play Billing

• Purpose: Android in-app purchases and subscriptions
• Privacy Policy: https://policies.google.com/privacy

4. RevenueCat

• Purpose: Subscription and purchase entitlement management
• Privacy Policy: https://www.revenuecat.com/privacy

5. Firebase Crashlytics

• Purpose: Crash reporting and diagnostics
• Privacy Policy: https://firebase.google.com/support/privacy

We may also route AI/voice processing through our backend infrastructure and service providers to deliver requested AI features.

Sharing and Disclosure

We do not sell personal data. We may share data:

• With processors/service providers to operate app functionality
• When required by law, legal process, or regulatory request
• To protect rights, safety, security, and prevent abuse
• In connection with a merger, acquisition, financing, or transfer of assets (subject to safeguards)

Data Retention

We retain data only as long as needed for the purposes described in this policy, including legal, accounting, and security obligations.

• Account and app content are generally retained while your account is active
• Diagnostic data is retained for troubleshooting, reliability, and security for a limited period
• Purchase/subscription records are retained as needed for billing, tax, and fraud prevention obligations

Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal data where applicable.

• Manage app permissions in your device settings (microphone, notifications)
• Manage subscription billing in Google Play
• Submit privacy/data requests to support@bloomapp.com

Security

We implement administrative, technical, and organizational safeguards intended to protect data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure.

Children's Privacy

Bloom is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children below the applicable age threshold.

International Data Transfers

Your information may be processed in countries other than your own, including countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the "Last Updated" date.

Contact Us

• Email: support@bloomapp.com
• Privacy URL: https://webuyibuy.github.io/bloom-legal/privacy.html