Privacy Policy

Last updated: 14 October 2026

The short version. Bloom runs on your iPhone and syncs to your own private iCloud. Your financial data (transactions, balances, cards, receipts) never leaves your phone. Bloom does send anonymous crash reports and basic usage counts to help us fix bugs and understand what to build next — you can turn this off in Settings → Privacy at any time.

1. What data Bloom handles

Bloom is a personal-finance tracker. To do its job, it lets you record and organize:

Transactions you type, scan from receipts, speak via voice input, or import from CSV.
Categories, accounts, credit cards, loans, installments, bills, budgets, and savings goals you set up.
Receipt images you capture, stored file-protected on your device.
Rate values you enter or accept for foreign-currency conversion.

All of this stays on your device. For credit cards, Bloom only stores what you type in: a nickname, network name, last four digits, your statement/due days, and limit — never a full card number or CVV.

2. Where your data lives

Two possible locations, both under your control:

On your iPhone. The primary store. Local database, file-system protected. Nothing leaves the device by default.
Your private iCloud (optional). When iOS iCloud is signed in, Bloom uses Apple CloudKit's private database to sync between your devices. Apple hosts this; only you can read it. Bloom the app has no access to Apple's servers or your iCloud contents.

3. Crash reports and anonymous usage stats

Bloom ships two small SDKs that help us keep the app stable and understand which features to invest in:

Sentry collects crash and app-hang reports: a stack trace, your iOS version, device model, and app version. Screenshots, view hierarchy, and PII are explicitly disabled. If you tap Send feedback in Settings, the message you type (and optional email) is sent through Sentry too.
Aptabase collects anonymous usage counters so we can see things like "how many users completed onboarding" or "how many first transactions were voice-entered." Each event is a short name and at most a small, fixed set of non-identifying fields (e.g. a duration in seconds, a product ID, a count).

Neither of these ever sees your transactions, balances, merchant names, account details, or receipt content. There is no identifier tying events to your person — only to an anonymous install.

Both default on. You can switch them off in Settings → Privacy → Help improve Bloom. When off, Sentry closes and Aptabase stops firing new events.

4. What Bloom does not collect

No account, sign-up, or email is required to use Bloom.
No advertising SDKs, tracking pixels, or third-party trackers.
No location, contacts, calendar, photos (beyond the receipt image you explicitly capture), or health data.
No device identifiers used for cross-app tracking (no IDFA, no fingerprinting).
No financial data — ever — in crash reports or analytics.

5. Apple Pay and FinanceKit

Bloom can optionally read your Apple Card, Apple Cash, and Apple Savings activity via Apple's FinanceKit framework (iOS 17.4+). This runs entirely on your device — Bloom asks iOS for the data and iOS returns it locally. No third party is involved. You can turn this off any time in iOS Settings → Bloom → Financial Data.

For other cards, Bloom shows you a walkthrough for an iOS Shortcuts automation. The automation you build lives in your Shortcuts app under your control. When you make a purchase, iOS runs the shortcut on-device and passes the transaction data to Bloom. Nothing goes through Bloom's servers (there are none).

6. Apple Intelligence and on-device AI

On iPhones that support Apple Intelligence (iOS 26+), Bloom uses Apple's on-device Foundation Models framework to improve a few features: smart category suggestions, natural-language transaction search, voice phrase parsing, receipt interpretation, and the Insights advisor summary. These calls run locally on your device; no prompt or response is sent to Apple's servers or to Bloom. On devices without Apple Intelligence, Bloom falls back to rule-based logic for the same features.

7. Voice input

When you tap the mic to log a transaction, Bloom uses Apple's Speech framework for speech-to-text. If your iOS Dictation setting is set to on-device only (iOS Settings → General → Keyboard → Enable Dictation → Dictation), everything stays on your phone. If Dictation is online, Apple may process audio on its servers under Apple's privacy terms. Bloom itself never records or stores the raw audio.

8. Camera and receipt scanning

The camera is used only when you tap the scan icon to capture a receipt. The image, OCR text (Apple's on-device Vision framework), and any AI-interpreted fields are stored locally with iOS file-protection. Nothing is uploaded.

9. Notifications

Bloom schedules local notifications for credit-card statement dates, payment due dates, bill reminders, and the optional weekly digest. These are generated on your device by iOS. Bloom does not use push notifications, and no server sends anything to you.

10. Subscriptions and payments

Bloom Pro is handled by Apple's StoreKit. Apple processes the payment; we never see your card details. Apple reports back to Bloom only whether your subscription is active, so premium features can unlock. Receipts, renewals, and refunds live in your Apple ID. Manage or cancel at iOS Settings → [your name] → Subscriptions.

11. Face ID / Passcode

If you enable App Lock, Bloom asks iOS to authenticate you via Face ID, Touch ID, or your device passcode. iOS handles the check. Bloom never sees your biometric or passcode data — only a yes/no result.

12. Widgets, Lock Screen, and Live Activities

Home-screen and lock-screen widgets read a small snapshot Bloom writes to a shared iOS App Group on your device — spend this month, budget left, next bill, and top savings goal. The snapshot lives locally, is refreshed by the app, and never leaves your iPhone. Live Activities (if enabled) render the same locally-computed numbers on your Lock Screen and Dynamic Island.

13. Your controls

Turn off telemetry. Settings → Privacy → Help improve Bloom. Closes Sentry and stops Aptabase for the current and future sessions.
Export your data. Settings → Data → Export all data. Bloom writes a CSV you can save or share.
Delete your data. Settings → Data → Erase all data. Removes every transaction, receipt, and setting from your device. iCloud copies (if any) can be removed by turning off iCloud sync for Bloom in iOS Settings, or by using the "Manage Storage" controls in iCloud.
Uninstall. Deleting the app removes the local store. Any iCloud copy remains under your control in iCloud until you remove it.

14. Children's privacy

Bloom is not directed at children under 13 and does not knowingly collect any information from them.

15. Changes to this policy

If we materially change how Bloom handles data, we'll update this page and the "Last updated" date above. Because Bloom doesn't have your contact information, we can't notify you individually — check back here or in the app's Settings if you're concerned.

16. Contact

Questions about privacy: suhailqamil@gmail.com.