Privacy Policy
Last updated: 29 May 2026
Bloomee ("Bloomee", "we", "us") is operated by Stucare Innovation and Creation Private Limited, Mumbai, Maharashtra, India. This Privacy Policy explains what data we collect through the Bloomee mobile app and website (the "Service"), how we use it, who we share it with, and the rights you have. By using Bloomee you agree to this policy.
1. Data we collect
- Account data: your email address, password (stored only as a secure hash), and display name.
- Health & cycle data: period start/end dates, flow, symptoms, moods, notes, and any pregnancy or perimenopause mode you enable.
- Profile data: optional date of birth, tracking goals and preferences.
- Food-scan images: photos you submit for food analysis (stored to provide history).
- Partner sharing: if you invite a partner, the data scopes you choose to share with them.
- Device & technical data: device push token (for notifications), app version, IP address, and basic logs.
- Subscription data: your plan and status. Payments are processed by Apple or Cashfree - we never receive or store your card details.
2. Sensitive health data
Menstrual, reproductive, and related health data is sensitive personal data. We process it only to provide the features you use (such as predictions and insights), based on your consent, which you can withdraw at any time by deleting the data or your account. We do not sell your health data, and we do not use it for advertising.
3. How we use your data
- Provide core features: cycle tracking, predictions, calendar, reminders.
- Power Premium features you choose to use (AI Q&A, food insights).
- Send notifications you've enabled (period/fertility/habit reminders).
- Operate, secure, and improve the Service and prevent abuse.
- Process subscriptions and comply with legal/tax obligations.
4. Sharing & sub-processors
We do not sell your personal data. We share limited data with service providers ("sub-processors") strictly to run the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Render | App hosting & database | All app data (encrypted at rest, TLS in transit) |
| Cloudflare R2 | Image storage | Food-scan images |
| Google (Gemini AI) | AI answers & food analysis | Your question text / food image + minimal cycle context |
| Google Firebase | Push notifications | Device push token |
| ZeptoMail (Zoho) | Transactional email | Email address |
| Cashfree / Apple | Payments | Handled by them; we store only plan status |
We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of users. If you use partner sharing, the data you choose is shared with the partner you invite, under your control.
5. AI features
When you use AI Q&A or food analysis, your prompt or image (plus minimal context such as your current cycle day) is sent to Google's Gemini API to generate a response. Do not submit information you don't want processed this way. AI responses are informational only and are not medical advice.
6. Data retention
We keep your data while your account is active. When you delete your account, we delete or irreversibly anonymise your personal and health data, except where we must retain certain records (e.g. payment/tax records) for the period required by law.
7. Your rights
Depending on your location (e.g. India's DPDP Act, the EU/UK GDPR), you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your data ("right to be forgotten");
- Export/port your data;
- Withdraw consent and object to certain processing.
To exercise any right, email privacy@bloomee.in. We respond within the timeframe required by applicable law.
8. Account & data deletion
You can request full deletion of your account and associated data at any time. See our Delete Account page for the steps and what is removed.
9. Security
We protect your data with encryption in transit (TLS) and at rest, hashed passwords, scoped access tokens, and least-privilege access to our infrastructure. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.
10. Children
Bloomee is not intended for children under 16 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. International transfers
Your data may be processed in countries other than your own (e.g. where our sub-processors operate). Where required, we rely on appropriate safeguards for such transfers.
12. Changes to this policy
We may update this policy. We'll change the "Last updated" date above and, for material changes, notify you in-app or by email.
13. Contact
Questions or requests: privacy@bloomee.in
Stucare Innovation and Creation Private Limited, Mumbai, Maharashtra, India.