Privacy Policy
Effective and last updated: 17 September 2026
Important: Bloomora handles sensitive wellbeing, reproductive-health and fitness information. We do not sell personal information and we do not use it for advertising.
This Privacy Policy explains how Bloomora ("Bloomora", "we", "us" or "our") collects, uses, shares, stores and protects personal information when you use the Bloomora mobile app, website and related services (together, the "Service"). By creating an account or signing in, you agree to this Policy and to our Terms of Service.
1. Scope and age requirement
Bloomora is intended only for people aged 18 or older. We do not knowingly allow anyone under 18 to create an account. If you believe a person under 18 has used Bloomora, contact us and we will delete the account.
This Policy does not cover third-party websites, apps or services, which have their own privacy notices.
2. Information we collect
2.1 Account and profile information
- Continue with Google: your Google account identifier, name, email address and profile photo, as shared by Google.
- Mobile-number sign-up, where available: your name, mobile number and password. We store only a one-way hash of your password, never the readable password.
- Gender, if you choose to set it. It decides whether cycle tracking is shown.
2.2 Wellbeing and health information you choose to enter
This information may reveal details about your mental wellbeing, physical health, sex life or reproductive health, and some laws give it extra protection. Entering it is optional, but a feature may not work without the information it needs.
- Check-ins: your distress level, the reasons and focus areas you pick, and your answers, scores and results from mind check-ins.
- Cycle and fertility: period dates, flow, symptoms, moods, basal body temperature, cervical mucus, ovulation and pregnancy test results, sexual activity, digestion, activities and notes.
- Sleep and water: bed and wake times, awakenings, sleep quality and notes, water intake and goals.
- Exercise and body: your exercise quiz answers (goal, motivations, focus areas, body type, height, current and target weight, age), the plan you choose, days started and completed, exercise durations you change, favourite days, challenges joined, workouts completed (duration, estimated calories and how you felt) and your weight history.
- Discover: the items you save as favourites.
2.3 Partner connection and messages
If you choose to connect with a partner, we store the connection and the messages you exchange. Your partner sees your name and the messages you send them. They do not receive your check-ins, cycle, fertility, sleep, water, weight or exercise information.
2.4 Technical and security information
- For each signed-in device: the device name or model, the app's user agent, your IP address, when you signed in and when the device was last active. This keeps your account secure and powers My Profile → Active devices.
- A random device key created by the app and kept in your phone's secure storage, so a stolen sign-in token cannot be used on another device.
- Server error logs that help us find and fix problems.
Bloomora does not collect your precise location, contacts or advertising identifier, and it does not include advertising, analytics or crash-reporting tools. Reminders are scheduled on your phone, so we do not collect push notification tokens.
2.5 Sources of information
We receive information from you, automatically from the app on your device, from Google when you continue with Google, and from a connected partner when they message you.
3. How and why we use information
| Purpose | Information involved |
|---|---|
| Create, manage and sign in to your account | Account, profile, device and security information |
| Provide tracking, check-ins, exercise plans, progress and favourites, and keep them in sync across your devices | The information you enter (sections 2.1 and 2.2) |
| Provide partner messaging | Partner connection, your name and messages |
| Send verification codes | Your mobile number |
| Protect your account and the Service | Device, IP address, sign-in and security information |
| Keep the Service working and fix problems | Technical information and error logs |
| Comply with law and defend legal claims | Only what is reasonably necessary |
We use your information because you asked us to provide the Service, with your agreement when you sign up and choose to enter it, for our legitimate interest in keeping the Service secure and reliable, and where the law requires it.
We do not sell personal information. We do not use health or wellbeing information for advertising, data-broker activity, or insurance, employment or credit decisions.
4. Scores and estimates
Bloomora uses fixed calculations on the information you enter to show check-in scores and results, estimated calories, cycle estimates and progress. These are for general self-reflection and wellness only. They are not diagnoses, and they are not used to make decisions with legal or similarly significant effects about you. Bloomora does not use artificial intelligence on your information.
5. Information stored on your device
The app keeps some information on your phone: your sign-in credentials in secure storage, your preferences, reminder schedules, music files you import for workouts, exercise videos and images saved for offline use (saved videos are encrypted) and a copy of recent information so screens open quickly. Imported music and reminders never leave your phone.
Signing out or deleting your account removes your saved exercise and workout details from that phone. Uninstalling the app removes everything it saved.
6. Who receives information
We share information only as described here:
- A connected partner: your name and the messages you send them.
- Google: to provide Continue with Google, and to load the app's fonts.
- Meta (WhatsApp Cloud API): your mobile number and the verification message, when a code is sent to you on WhatsApp.
- MongoDB Atlas: hosts our database, including backups.
- Cloudflare: stores and delivers exercise videos and images.
- Our server hosting provider: runs the Bloomora service.
- Authorities and professional advisers: when reasonably necessary to comply with law, respond to valid legal requests, protect people's rights and safety, or establish or defend legal claims.
- A successor business: if Bloomora is involved in a merger, acquisition or sale of assets, subject to confidentiality and the notice or consent the law requires.
Our service providers may use your information only to provide their services to us.
7. International transfers
Bloomora and its service providers may store and process information in countries other than the one where you live, which may have different privacy laws. Where the law requires, we use appropriate safeguards for these transfers, such as the contractual protections offered by our providers.
8. Retention and deletion
| Information | How long we keep it |
|---|---|
| Account and profile | Until you delete your account |
| Check-ins, cycle, fertility, sleep, water, exercise and weight information | Until you delete the entry or your account |
| Partner connection and messages | Until either of you disconnects, which deletes the messages, or deletes their account |
| Signed-in devices | Until you sign out, sign that device out from Active devices, or delete your account |
| Verification codes | They expire after 10 minutes and are deleted automatically |
| Server error logs | Only as long as needed to fix problems and keep the Service secure |
| Database backups | Replaced over time by newer backups, and never used to restore a deleted account |
You can delete many individual entries in the app, such as cycle and fertility logs, sleep and water entries, and workouts.
Deleting your account deletes everything. You can do it any time in My Profile → Delete account. It permanently erases your account and profile, your check-ins, cycle, fertility, sleep, water, exercise and weight history, challenges, favourites, partner connection and messages, and signs out all your devices. Nothing that identifies you is kept, and it cannot be undone.
9. Security
We protect information with encrypted connections (HTTPS), one-way hashing of passwords and verification codes, device-bound sign-ins, secure storage on your phone, short-lived private links for exercise videos, and access controls at our service providers. No service can guarantee absolute security. If a breach puts you at risk, we will notify you and the authorities as the law requires.
10. Your choices and rights
In the app you can:
- view and update your profile, weight and gender;
- delete individual entries, as described in section 8;
- turn reminders on or off, or turn off notifications in your phone's settings;
- see your signed-in devices and sign any of them out;
- disconnect from your partner; and
- delete your account and everything in it.
Depending on where you live, you may also have the right to access or get a copy of your information, correct it, delete it, withdraw your agreement, object to or restrict certain uses, appeal a decision about your request, and complain to your data-protection authority. Withdrawing your agreement does not affect what happened before, but may stop some features from working. To make a request, contact us as described in section 13. We may need to confirm your identity first, and we will not treat you differently for using your rights.
11. Regional privacy information
11.1 India
You may ask for a summary of your information and how it is used, and ask us to correct, complete, update or erase it. You may nominate someone to use these rights for you in the event of death or incapacity. If you are not satisfied with how we handle a complaint, you may contact the Data Protection Board of India.
11.2 European Economic Area, United Kingdom and Switzerland
Health and sex-life information is special-category data, which we use only to provide the features you choose to use. You may withdraw your agreement as easily as you gave it, and complain to the data-protection authority where you live or work.
11.3 United States
We do not sell personal information or consumer health data, and we do not share them for targeted advertising. Depending on your state, you may have rights to know, access, correct and delete your information and to appeal our decision on a request.
11.4 Other locations
You may have other rights under your local law. We will respect the protections that apply to you even if they are not listed here.
12. Not a medical or emergency service
Bloomora is a general wellness and self-help service. It is not a medical device and does not diagnose, treat, cure or prevent any condition, or give medical, psychological or psychiatric advice. If you may harm yourself or someone else, or need urgent help, contact your local emergency services or a crisis helpline immediately.
13. Changes and contact
We may update this Policy when Bloomora, our providers or the law change. We will update the date above and let you know in the app about significant changes.
For questions, requests or complaints about your privacy, use the developer contact details on Bloomora's Google Play Store page.