BloomSync is designed with your privacy at its core. Your health data stays on your device and is never sold or shared with third parties.
1. Introduction
BloomSync ("we", "our", or "the app") is a menstrual cycle tracking application. This Privacy Policy explains how we collect, use, and protect your information when you use our iOS application.
By using BloomSync, you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address — used for authentication and account recovery
- Full name — used for personalization within the app
This data is processed by Firebase Authentication (Google LLC) and is used solely for account management.
2.2 Health & Cycle Data
You may choose to log the following information:
- Menstrual cycle dates and period length
- Flow intensity (spotting, light, medium, heavy)
- Moods (happy, calm, sensitive, anxious, irritable, sad, energetic, tired)
- Symptoms (cramps, headache, bloating, back pain, breast tenderness, acne, fatigue, nausea, cravings, insomnia)
- Daily water intake
- Personal notes
All health and cycle data is stored locally on your device only. It is never uploaded to our servers or any third-party service.
2.3 Subscription Information
If you subscribe to BloomSync Premium, payment is processed by Apple through the App Store. We use RevenueCat to manage subscription status. We receive:
- Subscription status (active/inactive)
- Subscription type (weekly, monthly, yearly)
We do not receive or store your payment details, credit card numbers, or billing address.
3. How We Use Your Information
- Account data: To authenticate you and provide account recovery
- Health data: To display cycle predictions, phase information, and daily logs — all processed locally on your device
- Subscription data: To verify your premium access status
4. Data Storage & Security
- Health data is stored locally on your device using iOS encrypted storage (UserDefaults with device-level encryption)
- Account credentials are managed by Firebase Authentication with industry-standard security
- No cloud sync of health data — your cycle information never leaves your device
- We do not use analytics SDKs, tracking pixels, or advertising frameworks
5. Third-Party Services
BloomSync uses the following third-party services:
- Firebase Authentication (Google LLC) — for user account management. Firebase Privacy Policy
- RevenueCat — for subscription management. RevenueCat Privacy Policy
- Apple App Store — for payment processing
None of these services receive your health or cycle data.
6. Data Sharing
We do not:
- Sell your personal data to anyone
- Share your health data with third parties
- Use your data for advertising or marketing purposes
- Track your behavior across other apps or websites
7. Your Rights
You have the right to:
- Access your data: Export your cycle data from Profile > Export Data
- Delete your data: All local health data is removed when you sign out or delete the app. To delete your account, contact us at support@bloomsync.app
- Withdraw consent: You can stop using the app at any time
8. Children's Privacy
BloomSync is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.
9. Notifications
BloomSync uses local notifications only. Notification content (period reminders, ovulation alerts, daily log reminders) is generated and delivered entirely on your device. No notification data is sent to our servers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app. Your continued use of BloomSync after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Email: support@bloomsync.app