What Bloomura keeps
Only what you choose to log or tell it: the days you bleed and how heavily, discharge, symptoms and moods, the notes you write, any cycle you mark as unusual, your answers on the welcome screens (an age range, whether you use hormonal contraception, and your usual cycle length if you gave one), the articles you open or save, your settings — the reminders you turn on among them — and when you agreed to these documents.
It never asks for your name, your date of birth, your location or your contacts. It asks for an email address and a password only if you choose to create an account for sync.
Where it keeps it
On your phone, and nowhere else. Everything is kept in a database that is encrypted with a key made on your phone, the first time the app opens. The key is held by your phone’s own secure storage, and is never copied off it.
Your phone’s backups do not carry the key, so a backup cannot be opened on another device. That also means that if you lose your phone, replace it or delete the app, what you logged is gone — unless you made an export or turned on sync, both below. Without sync, Bloomura cannot get it back, because it never had it.
Who can see it
Nobody but you. Unless you create one, there is no Bloomura account, and without sync the app sends nothing anywhere: no health information, no usage statistics, no crash reports and no advertising identifiers. It contains no advertising and no tracking, with sync or without it.
Anyone who can unlock your phone can open the app, as with any other app on it — unless you turn on app lock, which asks for your phone’s own screen lock again before Bloomura opens. Your fingerprint, face or PIN is checked by your phone; Bloomura never sees it.
Sync and your account, if you choose them
Sync is optional, and is what Bloomura Plus pays for. You turn it on yourself, after creating an account with an email address and a password, and Bloomura asks you to agree to it separately before anything is sent.
With sync on, Bloomura sends a copy of what you log — every entry, its changes and deletions — and the settings that are about you rather than about one phone, such as your usual cycle length, to Bloomura’s account service, so your phones stay in step. Settings that belong to one phone are not sent: app lock, vibration, reminders, and what you agreed to on that phone.
Sex, sex drive and pregnancy tests are the exception: they are sent only if you turn that on in Sync and account, and it is off unless you do. Turning it off again removes them from your account; they stay on your phones.
The account service is Supabase, which runs it for Bloomura. Your copy is encrypted while it travels and while it is stored, and only your signed-in account can read or change it through the app. It is not end-to-end encrypted: the people who run the service could technically read it. Bloomura does not read it, sell it, share it, or use it for advertising or research.
Your email address is used only to sign you in and to send the codes you ask for, to confirm your email or to reset your password.
You can turn sync off, sign out — keeping or removing the copy on that phone — or delete your account at any time, in Sync and account on Me. Deleting your account removes it, and everything synced to it, from the service at once; what is on your phone stays.
If you can no longer open the app, write to support@bloomura.us from the address you signed up with, and your account and everything synced to it will be deleted within 30 days, usually much sooner.
Bloomura Plus and payments
If you subscribe to Bloomura Plus, Apple or Google takes the payment, under their own terms; Bloomura never sees your card. RevenueCat keeps the record of your subscription for Bloomura: your account’s id and what you bought. It receives nothing you have logged.
Apple, Google and RevenueCat keep their records of a purchase under their own terms and the law, including after your account is deleted. Write to the address under Questions, and Bloomura will ask RevenueCat to delete its record.
Exporting, importing and erasing
You can make an export: one file with everything you have logged and chosen. Bloomura makes it on your phone and hands it to your phone’s share sheet. Where it goes is your choice, and Bloomura never sees it again.
The file is not encrypted, so anyone who has it can read it. Keep it somewhere private.
Importing an export replaces everything on the phone with what is in the file. Erasing removes everything you have logged and chosen from the phone at once, and cannot be undone.
With sync on, an import replaces your log on every phone, and erasing asks whether to erase this phone only or your account’s copy too.
Reminders
Reminders are off until you turn them on. The ones you turn on are scheduled by your phone itself and never sent from a server, with sync or without it.
Unless you choose otherwise, a reminder says only that it is a reminder, not what it is about, and your phone hides its content on a locked screen. Your phone may ask once whether Bloomura may show notifications; you can change that in your phone’s settings at any time.
Links to other websites
Articles and notes link to their sources, such as the NHS. Opening one takes you to that website in your browser, and that website’s own privacy policy applies there. Bloomura does not tell it anything about you.
The app stores
Apple’s App Store and Google Play keep their own records of what you download, under their own privacy policies. Bloomura does not receive those records.
Your choices
You can change or remove anything you logged, in the app, at any time. You can erase everything from Privacy and your data on Me, and deleting the app deletes everything it kept on your phone. If you turned on sync, deleting your account, in Sync and account, removes the copy kept with it.
Agreeing to Bloomura keeping your health information on your phone is what lets the app work. You can take that back at any time by deleting the app. Agreeing to sync is separate, and you can take it back by turning sync off and deleting your account.
Age
Bloomura is for people aged 13 and over.
Changes to this policy
If this policy changes in a way that matters, the app will show you the new version and ask you to agree again before you carry on.
Questions
You can write to the people who make Bloomura at support@bloomura.us — about this policy, about your information, or to ask for your account to be deleted.