Bloom Privacy Policy
Last updated 18 September 2026
Bloom is a journal and a vision board that other people can sometimes see. That mix is the whole reason this page exists: some of what you put in is meant only for you, some of it you choose to show, and it matters that the difference is real rather than a promise.
The short version. Your journal is private and is never shown to anyone else. Bloom does not track you, has no advertising, and sells nothing to anybody. We keep what you write for as long as you want it kept, and when you delete your account we delete it.
Who we are
Bloom is operated from the United Kingdom. For anything on this page, including a request to see or delete your data, write to hello@trybloom.net.
What we collect
| What | Why |
|---|---|
| Email address | To sign you in. Held by our authentication provider. |
| Name, username, photo, bio | Your profile, which other people see. |
| Date of birth | To check you are 13 or older. We keep the date, not a copy of any document. |
| What you write | Journal entries, vision board tiles, posts, stories, comments, messages, voice notes. |
| Photos you add | Stored so they can be shown back to you and to whoever you shared them with. |
| Who you follow | To build your feed and your circle. |
| Your activity in the app | Streaks, petals, practice sessions—the progress the app shows you. |
| Location, only if you turn it on | See below. Off by default. |
| A notification token, only if you turn notifications on | Issued by Apple or Google. It tells our server which device to send a notification to. See below. |
| Crash reports | When the app breaks, so it can be fixed. |
| Purchase records | So a purchase can be restored on another device. |
We do not collect contacts, browsing history, advertising identifiers, health data, or anything from other apps. There are no advertising or analytics trackers in Bloom.
Your journal
Your journal is private. Entries are not shown to other users, are not used to recommend anything, and are not read by us except in the narrow case where you report something and we have to look at what was reported.
Earlier versions of Bloom offered an extra layer of encryption on journal entries. That feature has been withdrawn. If you had encrypted entries, the app offers once to unlock them so you can keep reading them; nothing is deleted either way. Entries are protected by access controls and by encryption in transit and at rest, which is the same protection as everything else in Bloom—but we no longer claim that we cannot read them, because with the extra layer gone that would not be true.
Photos are checked before they are uploaded
When you add a photo anywhere in Bloom, it is sent to Amazon Rekognition, Amazon Web Services' image analysis service, and checked for nudity, sexual content, graphic violence, self-harm imagery and hate symbols. This happens before the photo is stored, so a photo that is refused is never uploaded at all.
- Amazon processes the image to return a result and does not keep it.
- We keep the result—the categories and confidence scores—for 90 days, so thresholds can be corrected. We do not keep the image. A refused photo was never uploaded anywhere.
- The check is automatic. No person looks at your photo as part of it.
Location
Location sharing is off until you turn it on, and it is never on by default.
- You choose each person who can see it, one at a time.
- Bloom keeps one current location, replaced each time you update it. It never keeps a history of where you have been.
- Turning it off deletes the stored location.
- Sharing stops the moment either of you leaves the other's circle. This is checked every time somebody looks, not on a schedule.
Notifications on your phone
Notifications to your phone are off until you turn them on, and turning them on is what asks your phone for permission—Bloom does not ask when you first open it.
- When you turn them on, your phone gives Bloom a token. It identifies a device, not a person, and we store it against your account so our server knows where to send.
- The token is deleted when you sign out, when you turn notifications off, when your phone stops accepting it, and after 90 days without being used. Ten devices at most; past that the oldest goes.
- A notification says who did what—"somebody replied to you"—and nothing about what they wrote. It is composed on our server and sent through Apple, who carry it to your phone.
- The settings that decide what you are told about apply to these too. A notification you switched off is never sent to your phone, because it is never created in the first place.
Messages
Direct messages are deleted once everyone in the conversation has opened them, and anything unopened is deleted after seven days. There is no message history to scroll back through.
Messages are not end-to-end encrypted. Anyone you message can photograph their screen, and we can see message content if it is reported to us. Treat a message as private from other users, not as private from everyone.
How long we keep things
Old content is removed on a schedule so that an account does not grow forever. You control these in Settings.
- Your journal is the exception. It is never deleted on a timer unless you ask for that.
- Archived posts, tiles and stories: kept for the period you choose, 12 months by default.
- Stories: expire at the time you set. Stories pinned to a highlight are kept.
- Image moderation results: 90 days.
- Notifications: pruned regularly.
- Notification tokens: deleted when you sign out or turn notifications off, and after 90 days unused.
Deleting your account
You can delete your account from Settings, inside the app. Everything you have written is scheduled for permanent deletion, including your files.
Sign back in within 30 days and it is all restored. After that it is gone and cannot be recovered. You can also deactivate instead, which hides your profile and keeps everything where it is.
Who else touches your data
| Service | What for |
|---|---|
| Supabase | Database, file storage, sign-in. Where Bloom's data lives. |
| Amazon Web Services | Image checking only, as described above. |
| RevenueCat | Purchases. Receives a purchase receipt and an anonymous app user id. |
| Apple / Google | Take the payment. We never see your card details. They also carry notifications to your phone—the text of one passes through them on its way to you. |
| Sentry | Crash reports. Email addresses, tokens and long quoted passages are stripped before a report is sent. |
| Netlify | Serves the web app. |
None of these are given your data to use for their own purposes, and none of them pay us for it. We do not sell personal data, and we do not share it for advertising.
Your rights
Wherever you live, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Most of this you can do yourself in Settings: Your data exports your journal, board and practice history as a formatted document, and Delete my account does what it says.
If you are in the UK or the EU, the legal basis for handling your data is performance of a contract (running the app for you), our legitimate interest in keeping Bloom safe and working, and your consent where you have given it—location sharing and notifications, for instance. You can withdraw consent at any time in Settings. You also have the right to complain to your data protection authority; in the UK that is the ICO.
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right under it.
Children
Bloom is for people aged 13 and over. We ask for your date of birth when you sign up and do not create accounts for anyone younger. If you believe a child under 13 has an account, write to hello@trybloom.net and we will remove it.
Where your data is held
Bloom's data is stored on servers operated by Supabase. Image checking is performed by Amazon Web Services in the US East (Ohio) region. If you are in the UK or EU, this means your data may be transferred outside your country; those transfers rely on the standard contractual clauses these providers offer.
Reporting and moderation
You can report any post, story, comment, message or profile from inside the app, and you can block anyone. Reports of sexual content, self-harm or illegal content hide the content immediately while it is reviewed. Nobody is told that you reported them.
When we review a report we look at the reported content and at who posted it. We do not read anything else.
Changes
If this policy changes in a way that affects what we do with what you have already written, we will say so in the app rather than only editing this page.