Privacy Policy
Your privacy is our absolute priority.
Overview
Bloom Private is designed with privacy as its core principle. This privacy policy explains how we handle your data—or rather, how we don't handle it. We believe that your health data belongs to you and only you.
This website
When you browse bloomprivate.com we do not use analytics or advertising and we set no cookies (see our Cookie Policy).
Hosting. Our hosting provider, Vercel Inc., processes technical data such as your IP address, browser type and the pages requested, to deliver the website and protect it against abuse. Vercel acts as our processor under a data processing agreement; transfers outside the EEA are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
Legal basis: our legitimate interest in running a secure website (GDPR art. 6.1.f).
Email. If you write to us, we use your address and message only to reply, through our email provider (Google), and delete them when they are no longer needed.
Controller and your rights. The controller is Juan Morillo (NIF 49870615Z), Calle Mossèn Jacint Verdaguer 16-18, 08940 Cornellà de Llobregat (Barcelona), España. You can request access, rectification, erasure, restriction, objection or portability by writing to bloomprivateapp@gmail.com, and you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local authority.
Data Collection
Bloom Private does not collect your data ("Data Not Collected" on the App Store). We have no servers and no external databases: your records stay on your iPhone unless you choose to export them or turn on Apple Health. We don't collect your name, email, location, device identifiers or any other personal information, and the app does not send your health data to us or to anyone else.
Local Storage
Your period tracking data, symptoms, notes and all other information are stored locally on your iPhone using Apple's SwiftData framework (iOS 18+) and protected by your device's security features, including iOS encryption when your device is locked. Bloom Private has no servers and does not sync your data to any cloud. Your records stay on your iPhone unless you choose to export them or turn on Apple Health.
Third-Party Services
Bloom Private does not use any third-party analytics, advertising or tracking services. We don't use Google Analytics, Facebook SDK or any other tracking tool, and the app has no servers and does not send your data to ours.
Exporting your data or turning on Apple Health are decisions only you make. The only external integration is the optional Apple Health connection described below, which you control.
Premium purchases are processed by Apple through the App Store; we don't receive your payment details.
Apple Health (Optional)
Connecting to Apple Health is optional and off by default. If you turn it on, Bloom Private writes menstrual flow, sexual activity, cervical mucus and basal body temperature to Apple Health, and reads only the categories you authorize in the iOS permission screen.
This exchange happens on your device. Apple Health is managed by Apple, and if you have enabled Health in iCloud, Apple may sync that data under its own privacy policy.
You can revoke access at any time in iOS Settings > Health > Data Access & Devices.
Your Control
You keep complete control over your data. From the app settings you can create an encrypted full backup (AES-256), export your period dates as CSV and generate PDF reports to share with your doctor.
The home and lock screen widgets read a summary of your cycle through an App Group shared only between the app and its widgets on your device. You can delete all your data from the settings at any time, and deleting the app permanently removes it from your device.
We have no copies because we never had access to your data.
Security
Your records are protected by iOS security features, including Data Protection encryption and optional Face ID / Touch ID, which is handled by iOS. Backups you export are encrypted with AES-256-GCM; the key is stored in the iOS Keychain of your device. We recommend keeping your device updated and using a strong passcode.
Children's Privacy
Bloom Private is not intended for children under 13. We do not knowingly collect data from children. If you are a parent or guardian and believe your child has provided us with information, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Since we don't collect any data, we cannot notify you of changes directly, so we encourage you to review this policy periodically.
Contact
If you have any questions about this privacy policy, please contact us at bloomprivateapp@gmail.com
Last updated: October 12, 2026