Bloomly ("we," "our," or "the app") is a career journaling app developed by Olana. This policy describes how we collect, use, and protect your information.

Information We Collect

Account information: Name and email address when you sign in with Apple or Google
Journal content: Journal entries, voice recordings (processed for transcription then discarded), performance reports, and career goals you create within the app
Image attachments: Up to four images per entry (photos, screenshots, or documents) that you choose to attach. Attachments are stored in our cloud storage alongside the entry they belong to and are deleted when you delete the entry or your account.
Profile data: Job title, company, location, years of experience, resume text, and the career goals and challenges you share during onboarding or in Settings
Usage analytics: Anonymous product usage events (e.g., onboarding steps, feature usage) collected through our analytics provider to improve the app experience. No journal content is included in analytics.
Crash data: Crash reports and basic diagnostics through our crash reporting provider (no personally identifiable information is sent)
Subscription data: Purchase and subscription status managed by our subscription provider and Apple
Push notification token: If you grant notification permission, your device's push token so we can deliver report-ready alerts (see Push Notifications below)

How We Use Your Information

To provide app functionality: storing your journal entries, generating AI-powered insights, and performance reports
To sync your data across devices when you sign in
To process your voice recordings into text using our AI transcription service
To generate AI insights and reports using our AI service provider
To manage your subscription status

AI Processing

Your journal entries and profile information are sent to our AI service provider through an authenticated server-side proxy (never directly from your device) to generate insights, reports, coaching responses, and voice transcription. The proxy enforces rate limiting and only forwards specific, whitelisted models and fields — it cannot be used as a general-purpose AI relay. Your journal contents are not used to train any third-party model: our AI provider's API data usage policy excludes data sent through their API from being used for model training.

Data Storage and Security

Your data is stored locally on your device and synced to our cloud database when you sign in
All data is transmitted over HTTPS
API keys and credentials are stored server-side, never on your device
Authentication uses industry-standard JWT tokens

International Users

Bloomly is operated from the United States. If you use Bloomly from outside the U.S. — including the European Economic Area, the United Kingdom, the United Arab Emirates, Saudi Arabia, Egypt, Bahrain, Kuwait, Morocco, or Qatar — your information will be transferred to and processed in the United States and other countries where our service providers operate, including cloud infrastructure for storage, AI processing for journal insights, subscription management, anonymous analytics, and crash reporting. By using Bloomly, you consent to this transfer. We rely on standard contractual safeguards with our processors and apply equivalent protection regardless of where you live.

Data Sharing

We do not sell, rent, or share your personal information with third parties. Your data is only shared with the service providers required to operate the app:

Our AI processing partner: To generate insights, reports, coaching responses, and voice transcription
Our subscription management provider: To track and validate your subscription status
Our product analytics provider: For anonymous usage measurement (no journal content or PII included)
Our crash reporting provider: For diagnostic crash data (no PII included)
Apple: As required for App Store and subscription processing

We can provide the current list of subprocessors on request at the contact address below.

Push Notifications

If you grant notification permission, Bloomly delivers a single alert when a new performance report (weekly, mid-month, semi-annual, or annual) is ready, so you can open it from the Reports tab. We do not send marketing pushes, silent push, critical alerts, or time-sensitive interruptions, and the notification payload contains only the report period — never journal content. You can revoke notification permission at any time in iOS Settings → Bloomly → Notifications.

Third-Party Platform Posts

Bloomly can generate draft posts for LinkedIn and X based on your recent entries, either as feed suggestions at a cadence you set, or on demand. Drafts are produced server-side from your entries and shown to you for review. When you tap to share, Bloomly hands the draft to the LinkedIn or X app or website using their standard composer; from that moment forward, the content is governed by that platform's terms and privacy policy. Bloomly does not post on your behalf, and we do not receive engagement data from those platforms.

Data Retention and Deletion

Your data is retained as long as your account is active
You can delete your account at any time from Settings → Account → Delete Account. Deletion cascades server-side through your journal entries, image attachments, performance reports, profile, and your subscription-provider customer record. Active subscriptions must be canceled separately in your Apple ID settings, since Apple controls subscription billing.
Local data can be removed by deleting the app

Your Rights

You can access, export, or delete your data at any time through the app's Settings. To request data deletion, use the "Delete Account" option in Settings or contact us at [email protected]. Depending on where you live, you may have additional rights under local data protection law — including the right to access, correct, restrict, object to, or port your personal data, and to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us at the email above.

Children's Privacy

Bloomly is not intended for children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app.

Contact

If you have questions about this policy, contact us at [email protected].

Privacy Policy