Privacy policy

Last updated 1 October 2026

Who we are

Bloom is made by Eonyx Infotech LLP ("we", "us"). This policy covers the Bloom app for iPhone and Android and this website. If you have a question about it, write to support@eonyx.io.

Your journal

Everything you log in Bloom — daily habits, period and cycle days, symptoms, moods, notes, body measurements, lab results, medications and any partner details — is stored only on your device.

• It is encrypted with AES-256. The encryption key is created on your phone and kept in its secure keychain (the iOS Keychain or the Android Keystore).
• We do not run servers that receive or store your journal, and we cannot see, recover or restore it.
• There is no account, sign-in, email address or profile held by us.

Device backups

On iPhone, an encrypted iCloud or computer backup of your phone can include Bloom's journal and its key, so a restored phone can open it. On Android, Bloom is excluded from cloud backup and device-to-device transfer: to move your journal to a new Android phone, export a backup file from Bloom and import it there.

Files you export

You can export a backup (JSON), a spreadsheet (CSV) or a doctor report (PDF). These files are not encrypted. They go only where you choose to send or save them, and Bloom deletes its temporary copy afterwards. Keep them somewhere private.

Health data

If you turn on health sync, Bloom reads your step count and sleep from Apple Health (iPhone) or Health Connect (Android) to fill in your daily log. Bloom only reads; it never writes to Apple Health or Health Connect.

• Health data read by Bloom stays on your device as part of your journal.
• It is never sent to us or to any third party, never used for advertising or marketing, and never sold.
• You can turn health sync off in Bloom, and withdraw access at any time in the Health app or in Health Connect.

Subscriptions

Premium is bought through the App Store or Google Play. Apple or Google take payment; we never see your card or billing details.

We use RevenueCat to confirm whether a subscription is active. To do that, RevenueCat receives a random identifier created by the app (not your name or email) together with your purchase history and store receipts. It never receives anything from your journal.

What we don't do

• No advertising, and no advertising, analytics or crash-reporting SDKs.
• No tracking across apps or websites.
• No selling or sharing of personal data.

Notifications, app lock and permissions

Reminders are scheduled on your phone; no notification server is involved. Cycle reminders are worded so that a lock screen gives nothing away. App lock uses Face ID, Touch ID, a fingerprint or your passcode through your phone's own system; Bloom never receives your biometric data.

This website

This site has no analytics, cookies or forms. It is hosted on Cloudflare, which processes standard technical data such as IP addresses to deliver and protect the site. Fonts are served by Google Fonts.

Your choices and rights

Because your journal is on your device, you are in control of it:

• See or copy it: Settings › Privacy & data › Export backup.
• Delete it: Settings › Privacy & data › Delete all data, or delete the app.
• Stop health sync or reminders: in Bloom's settings, or in your phone's settings.

For purchase records held by RevenueCat, or any other privacy request, contact us at support@eonyx.io and we will help, in line with the data protection law that applies to you.

Age

Bloom is intended for people aged 16 and over.

Changes

If we change this policy, we will update the date above, and tell you in the app if the change is significant.