Privacy Policy

Bloom is a women's health and wellness application. This Privacy Policy describes how data is handled when you use the app. Controller: Bloom App Contact: mohanprakash462@gmail.com Effective date: 21 February 2026 Jurisdiction: This policy applies globally, with additional provisions for EU/EEA, UK, California, Australian and Canadian users.

All data is stored locally on your device. Nothing is sent to any Bloom server. Data is collected only when you choose to enter it: • Display name (optional) • Cycle records — period start/end dates, cycle length, daily logs (flow, mood, symptoms, energy, sleep, water intake, notes) • Pregnancy information — LMP date, due date, baby name (optional), weight entries, kick sessions, contractions, appointments • Fertility data — basal body temperature, OPK results, fertile window records • Wellness entries — affirmations, gratitude notes • Yoga and exercise sessions • Partner sharing preferences (device-local only) • App preferences — notification settings, theme, iCloud sync toggle, default cycle length None of this data is transmitted to Bloom or any third party.

Bloom explicitly does NOT collect, process, or transmit: • Your precise or approximate location • Advertising identifiers (IDFA / IDFV used for tracking) • Device fingerprinting data • Crash or usage analytics sent to any server • Behavioural or session tracking data • Your date of birth or age • Data through any third-party SDKs — none are included in this app • Payment information — all purchases are handled entirely by Apple Bloom contains zero third-party analytics, advertising, or tracking SDKs.

HealthKit integration is fully optional. When you grant permission, Bloom may: Read: Menstrual flow records, basal body temperature, sleep analysis Write: Menstrual flow records, basal body temperature, yoga/mindfulness workout sessions HealthKit data is governed by Apple's Privacy Policy and is never used for advertising or sold to third parties. Bloom accesses HealthKit only in response to explicit user actions. Revoke at any time: iOS Settings → Privacy & Security → Health → Bloom.

iCloud sync is disabled by default. If you enable it in Settings → Privacy & Data: • Your health data is synced via Apple's CloudKit private database • All data is end-to-end encrypted — Apple cannot read its contents • Bloom has no access to your iCloud data; Apple manages the infrastructure • You can disable sync or delete your iCloud data at any time Apple's iCloud Privacy Policy governs CloudKit-synced data (apple.com/legal/privacy). Legal basis (GDPR): Consent — you may withdraw consent by disabling iCloud sync in Settings at any time.

Bloom AI is powered entirely by Apple Intelligence (FoundationModels framework, iOS 26+). All inference runs on your device. • No conversation data is sent to Bloom or any external server • Chat history is not stored persistently — messages exist only in the active session • Apple Intelligence processes your queries using on-device models • The AI is for educational wellness context only — it does not provide medical diagnosis or treatment Apple's AI privacy practices apply (apple.com/legal/privacy).

Partner sharing is entirely local — Bloom does not operate a server for this feature. • A 6-character share code is generated on your device • Shared data (mood, cycle phase, pregnancy week) is stored locally on your device • No partner data is transmitted to any external server • Partner activity logs are stored in on-device app storage only You can disable or reset partner sharing at any time in Settings → Partner.

Sign in with Apple is optional. If you choose to use it: • Your Apple credential is stored in your device's secure Keychain • Bloom receives only an opaque Apple-generated user identifier — not your Apple ID email, unless you explicitly choose to share it • No sign-in data is sent to Bloom servers • Authentication is managed entirely by Apple's ASAuthorizationAppleIDProvider framework Revoke at any time: iOS Settings → [Your Name] → Password & Security → Apps Using Apple ID → Bloom → Stop Using Apple ID.

All notifications are local — scheduled on your device via iOS's UNUserNotificationCenter. No push notification server is used by Bloom. Notification types (all opt-in): • Period and ovulation reminders • Supplement or medication reminders • Appointment reminders • Water intake reminders Manage or disable: iOS Settings → Notifications → Bloom, or Settings → Notifications within the app.

Bloom is intended for users aged 17 and older and is rated 17+ in the App Store. The app is not directed at children under 13 (or under 16 in the EU, per GDPR Article 8). We do not knowingly collect personal information from children. If you believe a child has entered personal information in the app, please contact mohanprakash462@gmail.com and we will assist with removal.

Because Bloom stores data locally on your device, you can exercise most rights directly in the app. For any request requiring our assistance, contact mohanprakash462@gmail.com. GDPR (EU / EEA / UK residents): • Access — view all data stored about you (it is visible within the app) • Rectification — correct any entry directly in the app • Erasure — delete all data via Settings → Privacy & Data → Delete All My Data • Restriction — disable iCloud sync to restrict cloud processing • Portability — export your data from within the app • Withdraw consent — revoke HealthKit or iCloud permissions in iOS Settings at any time EU/UK residents may lodge a complaint with their national Data Protection Authority (DPA) or the UK ICO (ico.org.uk). CCPA (California residents): • Right to Know — all categories of personal information are disclosed in Section 2 • Right to Delete — use Settings → Privacy & Data → Delete All My Data • Right to Opt-Out of Sale — Bloom does not sell your personal information • Right to Non-Discrimination — we will not discriminate for exercising your privacy rights Privacy Act 1988 (Australian residents): • Access and correction rights apply; contact mohanprakash462@gmail.com for assistance PIPEDA (Canadian residents): • Right to access and correct personal information held about you

You are in full control of data retention. Bloom does not retain copies of your data on any server. • Data persists on your device until you delete the app or use the in-app deletion feature • Deleting the app removes all local data from your device • If iCloud sync is enabled, use Settings → Privacy & Data → Delete All My Data to also remove iCloud copies • Individual entries can be deleted directly within the app at any time There is no server-side data to request deletion of — it does not exist.

We may update this Privacy Policy as the app evolves. When changes occur: • The "Effective Date" at the top of this policy will be updated • Material changes will be communicated via an in-app notification • Continued use of the app after the effective date constitutes acceptance of the revised policy The current version is always available in the app: Settings → Privacy Policy.

For privacy questions, rights requests, or concerns: Email: mohanprakash462@gmail.com Response time: We aim to respond within 30 days (as required by GDPR Article 12). Mark urgent data subject requests "URGENT — DATA REQUEST." Supervisory Authorities: • EU / EEA — contact your national Data Protection Authority (DPA) • UK — Information Commissioner's Office: ico.org.uk • Australia — Office of the Australian Information Commissioner: oaic.gov.au • California — California Privacy Protection Agency: cppa.ca.gov • Canada — Office of the Privacy Commissioner: priv.gc.ca