Bloom – Privacy Policy

1. About Bloom And This Policy

Bloom is a habit and self-care challenge app: you pick a challenge, do its daily rituals, keep a streak, snap a daily proof photo for your polaroid diary, and check in with an AI partner — and, if you like, with a real friend (your “bestie”). This policy covers the Bloom apps for Android and iOS and the servers behind them. Bloom is local-first: your device holds your state, and only what is described below is sent anywhere.

2. Your Account

When you first open Bloom you get an anonymous account through Firebase Authentication — a random ID, with no email and no name required.

If you choose to sign in with Google or Apple, we store the email address and display name your provider shares with us, so your progress can follow you to a new phone. With Apple you can choose to hide your email, in which case we only see Apple’s relay address. Signing in upgrades your anonymous account in place, so nothing you have done so far is lost.

3. What We Sync To Our Database

Your state is stored on your device and mirrored to our database (Google Cloud Firestore) under your account, so it survives a lost phone. Our database rules let only you — and our own server — read it. It holds:

• Your challenge — which challenge you chose (or the one you built), your daily task completions, streak, start date and milestones.
• Your name and settings — the name you chose, your AI partner, reminder settings, your home-screen widget style, and your language (English, Deutsch or Français), which our server uses to write your bestie notifications in your language.
• Your chat with your AI partner — the conversation history, so it is still there on a new phone, and any partner message you report to us (section 5).
• AI-suggested challenges you generated with the challenge builder.
• Purchase and plan state — whether you have a Challenge Pass, Bloom+ or free days, and how many partner messages you have used today.
• Technical details — your platform (Android or iOS), app version, and a push notification token so our server can reach your phone (section 9).
• Photo file names only — the date-based name of each diary photo, so the app knows which day has a photo. The photos themselves are never uploaded (section 4).

If you link with a bestie, a short summary is also stored in a shared pair record (section 6).

4. Your Photos

Your daily proof shots — taken with the camera or picked from your gallery — are saved in the app’s private storage on your phone and nowhere else. We never upload, see or back up your photos, they are never sent to the AI, and your bestie never sees them. Deleting your account wipes them, and so does uninstalling the app. Your phone’s own device backup (Google or iCloud) may include the app’s private data; that backup runs on your own account and RiekApps has no access to it.

5. Your AI Partner

Before your first chat, Bloom asks for your consent to use the AI partner. Messages you send to her are relayed through our own server to OpenRouter, our AI model provider, to generate a reply. Each request carries your recent messages, your first name, your app language, your local day and time (so “tonight” means your tonight) and your challenge progress (day, tasks, streak) so her replies make sense — never your email, your account ID or anything else that identifies you. When she promises to check in later, the reply includes a time, and your phone schedules that reminder locally.

The AI challenge builder works the same way: the answers you tap or type (your focus, how much time you have, how many days, any notes, your reason and your first name) go through our server to OpenRouter to draft challenges for you.

Chats are processed to answer you, not to build a profile of you, and we don’t read them. Your conversation history is kept in your account (section 3) so it is there when you come back, until you delete your account. If you long-press a partner message and report it, that message is stored with your account so we can review it and make her better.

The AI partner is a motivational companion, not a therapist, doctor or dietitian. See the Terms of Use.

6. Bestie Pairing

If you link with a friend using a six-letter invite code, she can see exactly five things: your name, your challenge day, how many of today’s tasks you’ve done, your streak, and when you last updated. Never your photos, chats or task details. When you finish a day or reach a milestone, our server sends her a notification saying so. Either of you can drop the pair at any time, which removes your summary from it immediately.

7. Purchases And Promo Codes

Purchases — the Challenge Pass and the Bloom+ subscription — are made through Google Play or the App Store. We never see your card or payment details. We use RevenueCat to check which purchases belong to your account: it receives your Bloom account ID and the purchase records the store provides, so a purchase can be restored on a new phone.

If you redeem a promo code (Android), the code is checked by our server, and a record that your account redeemed it is kept with that code so a single-use code can’t be used twice.

8. Analytics And Crash Reports

• PostHog (product analytics) — we record which steps of the app people reach, such as finishing onboarding, completing a ritual, taking a photo or pairing with a bestie, linked to your Bloom account ID, together with your device type, OS and app version. PostHog also records session replays with all text and images masked: they show the layout of the screens you moved through, never your photos, your chats or what you typed. We use this only to understand where Bloom is confusing and to improve it.
• Firebase Crashlytics — if the app crashes, a crash report (the error, device model, OS and app version) is sent to Google so we can fix it.
• Firebase Remote Config — the app fetches a few on/off switches for features, which involves an app-instance identifier, as with any Firebase service.

9. Contact Us, Feature Requests And Price Requests

When you use Contact us, Request a feature or Can’t afford it? inside Bloom, we receive what you type, the topics or promises you tick and, if you attach one, the screenshot you choose. To help us answer, the request also carries the app version, your device model and OS version, your language and country setting, a random identifier created on your device for this app, your Bloom account ID, and where you are in Bloom (your challenge and day, and whether you have a pass or Bloom+). If you give us an email address, we use it only to reply to you.

Requests go over an encrypted connection to our own server and are stored in our support system, which only RiekApps staff can access. Our replies, including any promo or App Store offer code we send you, appear inside Bloom and, if you allow notifications, arrive as a notification through Firebase Cloud Messaging.

We do not sell or share this information and do not use it for advertising. Requests are kept for up to 24 months so we can follow up on recurring problems, then deleted; you can ask us to delete yours earlier at riekapps@gmail.com.

When Bloom asks you to rate it, the number of stars you pick is recorded in our app analytics. If you pick 1 to 3 stars and choose to tell us what went wrong, that message is sent and kept like a Contact us request above. If you pick 4 or 5, we open the store’s own rating page, which Google Play or the App Store provides under their terms.

10. Notifications And Widgets

Your daily reminders, and the check-ins your AI partner promises, are scheduled locally on your phone; no server is involved. Two kinds of notification come from our server: one about your bestie — for example, that she finished her day — and our replies to your messages (section 9). For that, Bloom uses Firebase Cloud Messaging, and your phone’s push token is stored in your account (never in the pair record your bestie can read).

If you add a Bloom home-screen widget, today’s rituals, your day and streak are written to storage on your phone that the widget reads. Anyone who can see your home screen can see them.

11. Services We Rely On

• Google Firebase — Authentication, the Firestore database, Cloud Messaging, Crashlytics and Remote Config. See Google’s Privacy Policy.
• Google Sign-In and Sign in with Apple — only if you choose to sign in. See Apple’s Privacy Policy.
• Our own server (bloom-api, run by RiekApps) — relays AI partner chats and the challenge builder, sends bestie notifications and checks promo codes; our support system (RiekApps HQ) stores your Contact us messages and our replies.
• OpenRouter — our AI model provider, which receives the chat and challenge-builder content described in section 5. See OpenRouter’s Privacy Policy.
• RevenueCat — purchase verification. See RevenueCat’s Privacy Policy.
• PostHog — product analytics and masked session replay. See PostHog’s Privacy Policy.
• Google Play and the App Store — distribute the app, process purchases and show the in-app rating prompt.

12. What We Don’t Do

• We don’t sell your data. To anyone. Ever.
• We don’t share your data with advertisers or data brokers, and there are no ads in Bloom.
• We don’t upload your photos.
• We don’t read your chats — they exist to generate your partner’s replies.
• We don’t ask for your location or your contacts.

13. Deleting Your Data

In the app: Profile → Delete my account. This erases your account, your synced progress, your chat history and reported messages, and your bestie link from our servers, and wipes the app’s local data, including your photos. It takes effect immediately. Standard server logs, which don’t contain your account content, expire automatically within days.

Lost your phone or can’t open Bloom? Email riekapps@gmail.com from the address you signed in with, subject “Delete my Bloom account”, and we’ll do it within 7 days and confirm. Full details are on the delete account page.

Deleting your account does not cancel a Bloom+ subscription — cancel it in Google Play or the App Store.

14. Your Choices And Rights

You can sign out (your progress stays saved to your account), reset your progress, change your language, turn reminders off, drop a bestie pair, or delete your account at any time in the app. Notification and camera permissions can be changed in your phone’s settings. If you have a request under a privacy law that applies to you — for example to access, correct or export your data under the GDPR — write to riekapps@gmail.com and we will answer it.

15. Children

Bloom is not directed at children under 13, and we don’t knowingly collect data from them. If you believe a child has created an account, email us and we’ll delete it.

16. Changes

If this policy changes in a way that matters, we’ll say so in the app before the change takes effect, and the revised version will be published on this page with a new effective date.

17. Contact

RiekApps — riekapps@gmail.com. Questions, worries, requests: a real person reads it. See also the Terms of Use and the Support page.