1. Who this policy covers
This Privacy Policy applies to the Bloom iOS app, Bloom’s website, and related cloud services operated under the Bloom name by Bloom (“Bloom”, “we”, “us” or “our”).
Bloom is designed for parents and adult guardians. Children do not create Bloom accounts. An adult account holder creates and manages child profiles and is responsible for having the authority to provide each child’s information and photographs.
2. Information Bloom handles
Account and sign-in information
When you use Sign in with Apple, Bloom may receive your Apple-provided user identifier, name and email address, including an Apple private relay address if you choose Hide My Email. Bloom uses the identity token from Apple to authenticate your account with Firebase. We store an internal user ID, family ID and account creation date.
Family and child profile information
You may provide a family name and, for each child, a name, optional birth date and optional profile photograph. Child profiles belong to the adult account holder; they are not child accounts.
Moments and other content
Bloom handles the photographs you select or capture, moment dates and categories, optional written notes, monthly reflections that may be written or recorded as audio, milestones, favourites, the child or children you assign content to, and the time it was created. To make the app fast and support viewing and exports, Bloom creates a print-quality JPEG copy, a display copy and a thumbnail. Memory films and Keepsake PDFs are created for you and leave Bloom only when you choose to export or share them.
Bloom normally re-encodes selected images to create those copies, but does not promise that every embedded metadata field is removed in every processing path. In particular, a source image may contain metadata added by your camera or photo library. Bloom itself does not request your device location.
Subscription information
Apple processes purchases and payment details. Bloom receives the subscription product, plan, child allowance, entitlement status, purchase or renewal dates and transaction verification information needed to unlock paid features and restore access. Bloom does not receive your full payment card or bank account details.
Technical and security information
Bloom and its infrastructure providers may process app and device information needed to authenticate requests, prevent abuse, operate cloud sync and diagnose failures. This can include app version, device or operating-system characteristics, network request data, Firebase user identifiers, App Check or App Attest security signals, and non-linked diagnostic information.
Bloom’s current product events are recorded locally and are not used for advertising. Bloom does not use advertising identifiers or cross-app tracking. If that practice changes, this policy and the App Store privacy disclosure will be updated before the change takes effect.
Website information
Bloom’s website does not use advertising cookies. Its hosting provider may process ordinary request and security logs—such as IP address, browser type, requested page and timestamp—to deliver and protect the site.
3. Device permissions and access
| Access | Why Bloom asks | What Bloom does not do |
|---|---|---|
| Photos | Apple’s system photo picker lets you choose a moment or child profile image. Bloom receives only the images you select. | Bloom does not scan, enumerate or upload your entire photo library. |
| Camera | The camera opens when you tap Take Photo or Retake so you can capture a still image. | Bloom does not record audio, video or background camera activity. |
| Microphone | Used only when you choose to record your monthly reflection in your own voice. | Bloom does not listen continuously, record in the background, or use recordings for advertising, profiling or AI training. |
| Notifications | If you opt in, Bloom schedules local alerts, sounds and badges for daily moments and account or trial reminders. | Bloom does not require notifications and does not register for remote marketing push notifications. |
| Sign in with Apple | Used to create, authenticate and restore your Bloom account and cloud memories. | Bloom does not receive your Apple Account password. |
| App Attest | Apple and Firebase security checks help confirm that requests come from the authentic Bloom app. | These checks are not used for advertising or cross-app tracking. |
Bloom does not request access to your contacts, precise or approximate location, calendars, reminders, health or fitness data, Bluetooth, local network, speech recognition, biometrics or other installed apps.
4. How Bloom uses information
Bloom uses information to:
- create and authenticate your adult account;
- save, organise, sync and restore your family’s moments;
- create display images, thumbnails, print-quality copies, memory films and Keepsake PDFs;
- store and play audio recordings of monthly reflections, organise milestones and reflections, and surface on-this-day views;
- create and revoke viewer-only Private Family Links at your direction;
- apply the one-moment-per-child-per-day product rule;
- verify subscriptions, restore purchases and provide paid access;
- schedule reminders you choose on your device;
- secure the service, prevent abuse and investigate failures;
- respond to support, privacy and legal requests; and
- comply with law and enforce Bloom’s Terms.
Bloom does not sell family information, serve third-party advertising, build advertising profiles, use Photo or Camera data for data mining, or train artificial-intelligence models on your photographs.
6. Children’s information
Bloom is a service for adults, not a service directed to children. We process a child’s profile and memories only at the direction of the adult account holder. The account holder confirms that they are the child’s parent or guardian, or otherwise have the authority and any necessary consent to upload and manage the child’s information.
We apply the same protections to children’s content as to other family content and do not use it for advertising, marketing databases, facial recognition or AI training. If you believe a child’s information was provided without appropriate authority, contact us so we can investigate and remove it.
7. Storage and international processing
Bloom keeps app state and media copies inside the app’s private sandbox on your device. When cloud mode is enabled, account records, child and moment metadata, and private image copies are also stored through Firebase so Bloom can sync and restore them.
Bloom’s cloud functions are configured for an Australian region. Firebase, Apple and their subprocessors may process information in other countries where they operate. Where required, Bloom relies on contractual and legal transfer safeguards. The precise Firestore and Storage residency selected for the production Firebase project must be confirmed in the Firebase console before launch.
8. Retention and deletion
- While your account and eligible access remain active, Bloom retains the account data and memories needed to provide the service.
- Ending a subscription does not delete your account. New capture and other paid features may pause. Bloom provides a 90-day grace period before intentionally reducing the quality of print masters or applying a deletion schedule, and will give notice and an opportunity to reactivate or request an available export first.
- Deleting a moment or child profile removes the corresponding active app record and asks Bloom’s storage systems to remove media no longer used by another child’s shared moment. Device caches, failed cleanup requests and protected service backups can take additional time to clear. Contact us if content remains visible after a deletion.
- Deleting your account will remove the account and associated family content that Bloom is not legally required to retain. Bloom will action a verified request without undue delay and within the period required by applicable law. Protected backups and security records expire under their normal retention cycles unless law requires longer retention.
- Legal and security records may be retained for the minimum period required for tax, accounting, fraud prevention, dispute resolution or other legal obligations.
Removing the app from your device may delete local copies but does not by itself cancel an Apple subscription or delete cloud content. Keep your own backup of photographs that are irreplaceable.
You can start account deletion from Bloom’s in-app settings. You may also contact the privacy address below if you cannot access the app. Account deletion and data export requests may take time to complete where cloud media or protected backups are involved.
9. Your choices and privacy rights
Depending on where you live, you may have the right to:
- access a copy of personal information associated with you;
- correct inaccurate account or child profile information;
- request deletion of your account and family content;
- request a portable export where available;
- object to or restrict certain processing; and
- withdraw consent without affecting earlier lawful processing.
You can change Camera, Photos, Microphone and Notification permissions in iOS Settings. You can turn Bloom reminders off in the app or iOS Settings. Apple subscriptions must be cancelled separately in Apple Account Settings. Deleting a Bloom account does not automatically cancel Apple billing.
We may ask you to verify your identity before fulfilling a request. An authorised guardian may also contact us about a child profile managed through their account.
10. Security
Bloom uses Sign in with Apple, Firebase Authentication, App Check with App Attest, owner-scoped database and storage rules, private cache controls and encrypted network transport to protect information. Access to production systems is limited to people and providers who need it to operate the service.
No service can guarantee absolute security. If you believe your account or family content has been accessed without permission, contact us promptly and secure your Apple Account.
11. Changes to this policy
We may update this policy as Bloom changes or legal requirements evolve. The page will show the new effective date. We will provide additional notice before a material change that reduces privacy protections, changes how family photos are used, or materially changes retention, export or deletion rights.
12. Contact
For privacy questions, access or deletion requests, contact Bloom at support@storybybloom.com. Please do not attach children’s photographs to an initial privacy request. If you used Hide My Email, include the Apple relay address associated with Bloom so we can locate the correct account.
You may also complain to the privacy or data-protection regulator in your country. Contacting us first gives us an opportunity to resolve the issue quickly.