Privacy Policy

Effective 31 July 2026 · Bloom by RiekApps

The short version: Bloom is local-first. Your photos never leave your phone. We sync a small progress file so you don't lose your streak, we don't sell or share your data with advertisers, and you can delete everything, any time, in the app.

What we collect

Account. When you first open Bloom you get an anonymous account (a random ID — no email, no name required). If you choose to sign in with Google or Apple, we store the email and display name your provider shares so your progress can follow you to a new phone.

Challenge progress. Your challenge, daily task completions, streak, chosen name, and reminder settings are stored on your device and mirrored to our database (Google Cloud Firestore) so they survive a lost phone.

Photos. Your polaroid diary stays on your device only. We never upload, see, or back up your photos.

Chat with your AI partner. Messages you send to your AI partner are relayed through our server to OpenRouter, our AI model provider, to generate a reply. Each request carries your messages, your first name, and your challenge progress (day, tasks, streak) so her replies make sense — never your email, account ID, or anything else. Chats are processed to answer you, not to build a profile of you.

Bestie pairing. If you link with a friend, she can see exactly five things: your name, your challenge day, how many of today's tasks you've done, your streak, and when you last updated. Never your photos, chats, or task details. Unlinking removes this immediately.

What we don't do

We don't sell your data. To anyone. Ever.
We don't share your data with advertisers or data brokers.
We don't upload your photos.
We don't read your chats — they exist to generate your partner's replies.

Services we rely on

Bloom is built on Google Firebase (authentication and the Firestore database, subject to Google's privacy terms) and our own server, which relays AI partner chats to OpenRouter. We send the model your messages, your first name, and your challenge context — not your email, account ID, or any other identifier.

Deleting your data

In the app: Profile → Delete my account. This erases your account, your synced progress, and your bestie link from our servers, and wipes the app's local data. Photos live only on your device, so deleting the app removes them. Full details on the delete account page.

Children

Bloom is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, email us and we'll delete it.

Changes

If this policy changes in a way that matters, we'll say so in the app before the change takes effect.

Talk to a human

Questions, worries, requests: riekapps@gmail.com. A real person reads it.