Privacy Policy
Summary (not a substitute for the full text)
- Bloom stores your scripts, recordings and settings on your iPhone. You can use local editing features without a Bloom account. Selected content is sent off your device when you use the services described below.
- Content goes online only when you choose an online AI action, enable iCloud backup, or export or share it.
- We do not sell or share personal data, show ads, or track you across other apps or websites.
- Online AI uses Google Gemini via the Vercel AI Gateway, only after you consent in the app.
- You can delete your account in the app (Settings → Account → Delete Account). We aim to complete deletion within 30 days.
- Online features are intended for users aged 16 and over.
1. Who we are (controller)
NOSTRAVERSE METAVERSE SERVICES PROVIDER L.L.C
Office 103, Dubai Investment Park Second (DIP 2), Dubai, United Arab Emirates
Phone: +971 4 880 8386
Email: support@bloomcreator.app (support and all privacy requests)
Trade Licence No. 1254602 (Dubai Department of Economy and Tourism)
EU and UK representatives under Art. 27 GDPR / UK GDPR are being appointed; their details will be published here. Until then, please contact support@bloomcreator.app.
We have not appointed a Data Protection Officer. Please contact us at the address above with any privacy question.
This policy covers the Bloom iOS app, its online services and bloomcreator.app. It applies worldwide; region-specific sections follow in sections 13–16.
2. Data that stays on your device
Bloom stores scripts, imported copies, versions, settings and recordings on your iPhone. The camera lets you take a photo for a draft or record a video; the microphone captures sound for video recordings. Recording and playback take place on your device. Selected images and text can be sent with an online AI generation request after you give permission. Saving a recording to Photos is a separate action. Reminders are scheduled locally by iOS. You can manage camera, microphone, Photos and notification permissions in iOS Settings.
3. What we process, why, and on which legal basis
| # | Purpose | Data categories | Source | Legal basis (GDPR / UK GDPR) | Required? |
|---|---|---|---|---|---|
| 1 | Bloom account via Sign in with Apple | Apple user identifier, authorisation data, encrypted Apple tokens, Bloom account ID and session data; Bloom does not request your name or email address through Sign in with Apple | You, Apple | Art. 6(1)(b) contract | Only for online features |
| 2 | App integrity (App Attest) | App-instance attestation key ID, public key, verification receipt and counter associated with your account | Your device, Apple | Art. 6(1)(f): preventing abuse and maintaining a secure service | Yes, for online features |
| 3 | Purchases, restore, usage allowances | Pseudonymous app/account IDs, product, transaction, subscription status, usage counters (no payment card data) | Apple, RevenueCat | Art. 6(1)(b) contract; Art. 6(1)(c) record-keeping | Yes, for Pro |
| 4 | Online AI generation | Selected text, source address, images, language, length and style choices, request identifiers and AI output | You | Art. 6(1)(a) consent, withdrawable at any time (Art. 7(3)) | Optional |
| 5 | Security, abuse prevention, rate limiting | Account/request IDs, IP addresses in security counters, status and error information | Your device, our servers | Art. 6(1)(f) secure service | Yes |
| 6 | Error and performance diagnostics, AI operations monitoring, server logs | Pseudonymous IDs, request/route/model/error metadata, durations, token counts (no prompt text in Langfuse) | Our servers | Art. 6(1)(f) fault detection | Yes |
| 7 | Subscription and revenue analytics | Pseudonymous IDs, purchase and subscription information | RevenueCat | Art. 6(1)(f): understanding subscription performance and maintaining the subscription service; you may object (section 13) | Associated with the subscription service; no separate analytics opt-in is provided |
| 8 | Support | Email address, message and attachments you send | You | Art. 6(1)(b) for support necessary to provide the service you request under our contract; Art. 6(1)(f) for our interest in answering general enquiries | Optional |
| 9 | Privacy-rights requests | Request details, proportionate verification data | You | Art. 6(1)(c) legal obligation | — |
| 10 | Account-deletion confirmation | Content-free completion receipt | Our servers | Art. 6(1)(f) proof of completion | — |
| 11 | Legal compliance and claims | Records needed for legal duties or claims | — | Art. 6(1)(c), (f) | — |
| 12 | Optional iCloud backup | Your content in your own iCloud container (we have no access) | You, Apple | Not processed by us; Apple is responsible | Optional |
| 13 | Website visits | IP address, time, URL, user agent in hosting logs | Your browser | Art. 6(1)(f) delivery and security | Yes |
RevenueCat starts when Bloom opens and may assign a pseudonymous app user identifier before you sign in or buy anything. After sign-in, purchase access is associated with your Bloom account identifier. Apple and RevenueCat process purchase and subscription information to verify and restore access. RevenueCat also supplies subscription and revenue analytics. Bloom does not receive your payment card details. Pseudonymous identifiers are personal data. Request and diagnostic records may also remain associated with an account. We ask you not to include special-category personal data in AI requests. Without a Bloom account, local editing remains available; without AI permission, online generation is unavailable.
4. Online AI
- Online generation sends the content needed for your request through Bloom’s server and the Vercel AI Gateway to Google Gemini. Requests restrict the model provider to Google. Generation can include your selected text, source address, images, language, length and style choices, together with request identifiers.
- Bloom asks for permission before sending selected content to online AI. Sign-in, security and connection checks can occur beforehand. Permission is remembered for your account on this device. You can withdraw it in Settings → Privacy & AI Permission to stop new AI-content transfers; withdrawal does not undo earlier processing.
- Our AI requests ask the Gateway to exclude prompt training. This restriction does not mean that the Gateway or Google retains no data. Provider retention is a separate matter described in sections 5 and 6.
- Region: Gemini processing is not restricted to a region and may take place in the USA or other countries.
- Our production AI telemetry sends operational metadata to Langfuse rather than prompt and response text. Provider processing and infrastructure logs are separate data flows.
- AI output is machine-generated and may be inaccurate. We do not use AI to make decisions about you.
- Source addresses (URLs) are used as context; our server does not fetch them.
5. Service providers and international transfers
| Provider | Role | Purpose / data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. | Processor | Hosting of the website and Bloom server, AI request routing (Vercel AI Gateway), logs; request data, AI content in transit, IP address, log metadata | Server functions: USA (Washington, D.C., iad1); website: global edge network | Data processing agreement with Standard Contractual Clauses and/or EU-US Data Privacy Framework, as offered by the provider |
| Google (Gemini API, accessed via Vercel AI Gateway) | Service provider for online AI | Content you send to online AI and the AI output | Not restricted to a region (USA and other countries) | Provider data-processing terms with Standard Contractual Clauses and/or Data Privacy Framework, as offered by the provider |
| Upstash, Inc. | Processor | Account, session, security and allowance records; temporary copies of AI results | EU – Frankfurt, Germany | Data stored in the EU; contractual safeguards for any access from outside the EU |
| Langfuse | Processor | AI operations monitoring: account pseudonym, request and performance metadata (no prompt or response text) | EU | Data stored in the EU |
| Sentry (Functional Software, Inc.) | Processor | Server error and performance diagnostics | EU data region | Data stored in the EU; contractual safeguards for any access from outside the EU |
| RevenueCat, Inc. | Processor | Purchase verification, restore, subscription analytics; pseudonymous identifiers | USA | Data processing agreement with Standard Contractual Clauses and/or Data Privacy Framework, as offered by the provider |
| Google Workspace | Processor | Support mailbox only: support emails and attachments | Google data centres (USA and other countries) | Google Cloud Data Processing Addendum with Standard Contractual Clauses / EU-US Data Privacy Framework |
| Cloudflare, Inc. | DNS provider | Domain name resolution only; no proxying and no access to website traffic | Global | — |
| Apple Inc. / Apple Distribution International | Independent controller | Sign in with Apple, App Attest, App Store purchases, iCloud | Per Apple’s terms | Apple’s privacy terms |
Bloom is operated from the United Arab Emirates; authorised personnel there may access data for operation and support. The UAE has no EU or UK adequacy decision. Where required, we use appropriate safeguards or a legal basis permitted by Chapter V GDPR. You can request information about the safeguards at support@bloomcreator.app. The current list is also published at /subprocessors.
6. Retention
| Data | Retention |
|---|---|
| Sign-in challenges | Short-lived, by default 5 minutes |
| Sessions | By default 24 hours |
| Cached AI results | By default 15 minutes |
| Request locks | By default 60 seconds |
| Generation-cancellation records | 24 hours |
| Rate-limit and concurrency records | Until the end of the time window (seconds to minutes) |
| Daily resource-budget counters | Until the next UTC midnight, with a minimum expiry of 60 seconds |
| Paid-allowance counters | Until the end of the allowance period |
| Account IDs, encrypted Apple tokens, App Attest records, charged-operation markers | Until the account-deletion process removes them; these records do not have a short automatic expiry |
| Pending deletion jobs and access blocks | Until deletion completes |
| Content-free completion receipts and deletion-preparation witnesses | A completed-deletion receipt expires 30 days after completion. A separate preparation witness expires 30 days after preparation; it is not an active deletion job or proof of completed deletion. |
| Hosting, error and monitoring logs (Vercel, Sentry, Langfuse) | According to the provider’s retention settings, limited to what is needed for operation and security |
| AI provider data (AI Gateway, Google) | According to the provider’s terms |
| Purchase records (RevenueCat) | While your account or subscription exists; tax and accounting records as required by law |
| Support emails | For up to 12 months after the request is closed, unless a longer period is required by law |
| Privacy-request records | 3 years after the request is closed |
7. Account deletion
Start account deletion in Settings → Account → Delete Account. Apple reauthentication prepares the request; the final destructive confirmation starts deletion. Leaving before that final confirmation discards the unconfirmed preparation. Once confirmed, deletion may require several account, provider and retention steps. The app displays the request’s status; a saved or pending request is not confirmation that deletion is complete. Our target is to complete deletion within 30 days. Contact support@bloomcreator.app with questions about the request. Deleting your Bloom account does not cancel an Apple subscription or erase local scripts, recordings, imported originals, exported copies or personal iCloud backups. Revoking Sign in with Apple is not the same as deleting your Bloom account.
8. iCloud backup
iCloud backup is optional and stores copies in Bloom’s container in your personal iCloud account. Switching it off stops new uploads; uploads already accepted by iCloud may continue. Existing copies remain until you remove them separately. Neither switching backup off nor deleting your Bloom online account removes existing iCloud copies.
9. Children
Bloom’s online services are intended for people aged 16 or over. Where a higher minimum age applies, that higher age applies. Bloom does not provide a parental-authorisation route for younger users. If you believe a child has provided personal data without valid authorisation, contact support@bloomcreator.app so we can investigate and take the action required by law.
10. Website and cookies
bloomcreator.app uses no cookies, local storage, analytics, third-party scripts, fonts or embeds. Vercel processes server log data (IP address, time, URL, referrer, user agent) to deliver and secure the site (Art. 6(1)(f) GDPR). No consent is required for this (§ 25(2) TDDDG).
11. Security
We use encryption in transit (TLS), encryption at rest by our providers, encrypted Apple tokens, App Attest, rate limiting and access restricted to what is necessary. We notify personal data breaches as required by law.
12. Your rights – overview
Wherever you live, you can request access to, correction, deletion and a copy of your data at support@bloomcreator.app. We respond free of charge, verify identity proportionately (normally by confirming control of your Bloom account; we never ask for your password) and do not discriminate against you for exercising your rights.
13. EEA, UK and Switzerland
Where the GDPR or UK GDPR applies, you have rights of access, rectification, erasure, restriction, portability and objection, subject to the conditions in those laws. You may object to subscription analytics and other processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. We respond without undue delay and within one month. Where the law permits an extension because of the complexity or number of requests, we will explain the reasons within that first month; an extension will not exceed two further months. You may complain to an EU supervisory authority, in particular where you live or work, or to the UK Information Commissioner’s Office. Swiss users have the rights provided by the Swiss FADP and may contact the FDPIC. Account data is needed for online features; local editing remains available without an account.
14. United Arab Emirates
Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, we process data on the basis of your consent or as necessary for the contract, legal obligations or other grounds permitted by that law. You may request information, correction, erasure, restriction or portability of your data, object to processing and withdraw consent, as provided by the law. Contact support@bloomcreator.app.
15. United States – State Privacy Notice
This notice applies to residents of California and other US states with comprehensive consumer privacy laws. We extend these rights to all US residents, whether or not a particular law applies to us.
Categories of personal information (last 12 months)
| Category | Examples | Source | Disclosed for a business purpose to | Sold or shared? |
|---|---|---|---|---|
| Identifiers | Apple user identifier, Bloom account ID, pseudonymous app IDs, IP address, email address (support) | You, Apple, your device | Vercel, Upstash, RevenueCat, Sentry, Langfuse, Google Workspace | No |
| Commercial information | Products, transactions, subscription status | Apple, RevenueCat | RevenueCat | No |
| Internet or network activity | Request, route and error metadata, server logs | Your device, our servers | Vercel, Sentry, Langfuse | No |
| Content you choose to send | Text, images and URLs sent to online AI; support attachments | You | Vercel, Google (Gemini), Google Workspace | No |
| Sensitive personal information | Account log-in via Sign in with Apple, used only to provide the service | You, Apple | Upstash, Vercel | No |
| Inferences, precise geolocation | Not collected | — | — | — |
Retention periods are described in the Privacy Policy section “Retention”.
Do Not Sell or Share My Personal Information
We do not sell personal information and do not share it for cross-context behavioural advertising. We do not use it for targeted advertising or for profiling that produces legal or similarly significant effects, and we have not done so in the past 12 months. We have no actual knowledge of selling or sharing personal information of consumers under 16. You may still send an opt-out request to support@bloomcreator.app; we will confirm it.
Your rights
Depending on your state: to know and access the categories and specific pieces of personal information we hold; to delete; to correct; to data portability; to opt out of sale, sharing, targeted advertising and profiling; and not to be discriminated or retaliated against for exercising your rights. We use sensitive personal information only to provide the service, so a right to limit does not apply.
How to submit a request
Email support@bloomcreator.app with the subject “US privacy request”. We verify requests by matching the information you provide with our records (for example by confirmation in the Bloom app). We respond within 45 days; where necessary we may extend this by another 45 days and will tell you.
Authorized agents may submit a request with your signed written permission; we may ask you to verify your identity directly.
Appeals: if we decline your request, you may appeal by replying to our decision with “Appeal”. We decide within the period required by your state’s law. If your appeal is denied, you may contact your state Attorney General.
Global Privacy Control and Do Not Track
We honour Global Privacy Control signals as an opt-out of sale and sharing; as we do neither, there is no further effect. Our website does not track you over time or across third-party sites and responds the same way regardless of Do Not Track signals.
California “Shine the Light”
We do not disclose personal information to third parties for their direct-marketing purposes.
Children (COPPA)
Bloom is not directed to children under 13 and we do not knowingly collect their personal information. Parents may contact support@bloomcreator.app to have such data deleted.
Nevada
We do not sell covered information. You may still send an opt-out request to support@bloomcreator.app.
16. Other jurisdictions
Where local law (for example Brazil, Canada, Australia, Japan or South Korea) grants you privacy rights, contact us and we will honour them as required.
17. Changes
Updates will appear on this page with a revised effective date. Where applicable law requires additional notice or renewed consent, we will provide it before the relevant change takes effect.
18. Contact
support@bloomcreator.app · +971 4 880 8386 · postal address in section 1.