Privacy Policy

Last updated: September 21, 2026

Introduction

Bloomra is published by New Life Fed HR Solutions LLC ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we handle information in connection with the Bloomra Period Tracker application ("App"), available on iOS with bundle ID com.newlifefhs.lunaperiod.

The short version: Your health data never reaches us. It stays on your device. If you opt in, we use anonymous analytics (no health data, no personal information) to understand app stability and which features are used. We couldn't access your cycle data even if we wanted to—because it never reaches us.

Information We Collect

Your health data stays on your device. Bloomra is designed with privacy at its core. Here's exactly what we do and don't collect:

• Cycle & Health Data (on-device only): All menstrual cycle dates, symptoms, moods, pain levels, energy levels, and journal notes you log are stored on your device using AES-256 encryption. This data never reaches us. iCloud sync is not available in the current version of Bloomra.
• Apple Health (optional): If you turn on Apple Health sync, Bloomra reads and writes menstrual flow data in Apple Health on your iPhone. It reads and writes no other Health data. See Apple Health below.
• No Account Required: Bloomra works without any account, email address, or sign-up. We don't know who you are.
• Anonymous Analytics (TelemetryDeck, opt-in): Analytics are off until you allow them during onboarding, and you can turn them off at any time in Settings > Privacy, data & legal. When on, we use TelemetryDeck, a privacy-first analytics service, to collect anonymous app usage signals (e.g., screens opened, feature usage counts, onboarding steps, error types). Signals containing health-related words are blocked before they leave the device. TelemetryDeck is designed so that no personally identifiable information (PII) and no health data are ever transmitted. Signals are hashed and cannot be tied to an individual. You can learn more at telemetrydeck.com/privacy.
• No Third-Party Tracking: We do not use Google Analytics, Firebase, Meta Pixel, or any advertising network. We do not sell or share your data with any third party.

How Your Data Is Stored

All health data you enter into Bloomra is stored locally on your device using strong encryption. Specifically:

• Data is stored in your device's secure, sandboxed app storage
• Data is encrypted using AES-256 via iOS Keychain-backed keys
• Backups you export are encrypted with a key derived from your password (PBKDF2-HMAC-SHA256, 600,000 iterations)
• Data is only accessible by the Bloomra app on your device(s)

Apple Health

Apple Health sync is off until you turn it on in Settings > Privacy, data & legal > Apple Health. Before iOS asks for permission, Bloomra explains what it will read and write. When it is on:

• What Bloomra reads: the menstrual flow days stored in Apple Health, from the last 12 months when you turn it on, and new days after that. A day you already logged in Bloomra is never changed by Apple Health data.
• What Bloomra writes: the period days you log in Bloomra, as menstrual flow. Bloomra changes or deletes only the entries it wrote itself, never entries from other apps.
• Where the data goes: data read from Apple Health stays on your iPhone. Bloomra does not send it to us, to iCloud, to exported backups, to analytics or to any third party. A day you edit in Bloomra becomes your own Bloomra entry, and Bloomra handles it like any other entry.
• What we never do: we do not use Apple Health data for advertising, marketing or data mining, and we never sell or share it.
• How to stop: turn off Apple Health sync in Bloomra, or change Bloomra's access in the Health app. Days already imported stay in Bloomra until you delete them.

Data Sharing

We don't share your health data because we don't have it.

Since all health data remains on your device and is never transmitted to us:

• We cannot share it with advertisers
• We cannot sell it to data brokers
• We cannot provide it to third parties
• We cannot respond to data requests from authorities (we have nothing to provide)

The only third-party service we use is TelemetryDeck for anonymous analytics (only if you opt in; no health data, no PII) and the RevenueCat SDK for in-app subscriptions. Apple processes subscription payments; we never see your payment details.

Your Rights

For All Users

You have complete control over your data:

• Access: All your data is visible within the app at any time
• Export: You can export your data from within the app settings
• Deletion: Settings > Privacy, data & legal > Delete All Data removes your data from this iPhone and any iCloud copy. Uninstalling the app removes on-device data only; any iCloud copy stays in your iCloud account until you delete it. We retain no backup.
• Apple Health: Delete All Data removes the days Bloomra imported from Apple Health. It does not delete anything in Apple Health. To delete period data there, use the Health app.

For European Users (GDPR)

Under the General Data Protection Regulation, you have rights including access, rectification, erasure, and data portability. Because we don't collect or store your health data on our servers, these rights are exercised entirely through your control of your own device. You can delete all health data with Delete All Data in the app's settings. For the limited anonymous analytics data processed by TelemetryDeck, that data cannot be linked back to you by design. To exercise any GDPR rights, contact us at hello@bloomra.app.

For California Users (CCPA)

Under the California Consumer Privacy Act, you have the right to know what personal information is collected, request deletion, and opt-out of sale of personal information. We do not sell personal information. We do not collect health data on our servers. The only data we process is anonymous analytics signals that cannot be linked to you individually. To exercise any CCPA rights, contact us at hello@bloomra.app.

Children's Privacy

Bloomra is intended for users aged 16 and older. We do not knowingly collect information from children under 16. Since we don't collect any information from any user, this protection is built into our design.

App Store Purchases

If you purchase a Bloomra subscription, that transaction is processed by Apple through the App Store. We receive only anonymized purchase confirmations via RevenueCat—we don't receive your name, email, or payment details. Please review Apple's Privacy Policy for information about their data practices.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or our website. The "Last updated" date at the top of this policy indicates when it was last revised.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: hello@bloomra.app

Bloomra Period Tracker is published by New Life Fed HR Solutions LLC. This privacy policy applies to the Bloomra iOS application (bundle ID: com.newlifefhs.lunaperiod). For questions, contact hello@bloomra.app.