Metanetica ("we", "us", "our") operates the Bloom mobile application ("the App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use Bloom.
1. Information We Collect
Bloom collects the following categories of information:
a) Health Data You Enter
- Menstrual cycle dates, period length, and flow intensity
- Mood entries and symptom logs
- Fertility signs (basal body temperature, cervical mucus, ovulation tests)
- Intercourse logs and protection usage
- Pregnancy tracking data (gestational age, symptoms, milestones)
b) Account Information (Optional)
- Name and email address — only if you create an account for cloud sync
- Authentication tokens for secure login
c) AI Interaction Data
- Messages sent to the Lily AI assistant
- Health context shared with AI for personalized responses (cycle day, phase, mood)
d) Support Communications
- Bug reports and support messages submitted through the app
- Device platform and app version (sent with support tickets)
2. How We Use Your Information
- Cycle tracking & predictions — Your health data is used by our ML models to predict cycle length, ovulation, fertility probability, and detect anomalies
- AI health assistant — Conversation context is sent to our AI service to generate personalized health guidance
- Health insights & correlations — Your logged data is analyzed server-side to detect symptom patterns, phase correlations, and generate wellness scores
- Medical reports — Your data is compiled into structured reports you can share with healthcare providers
- Couple mode — Selected data is shared with your paired partner via end-to-end encryption
- Cloud sync — If enabled, your data is synced to our secure servers for backup and cross-device access
- Notifications — To send period reminders, fertility alerts, and pregnancy milestones you've opted into
We do NOT use your data for advertising, profiling, behavioral targeting, or any purpose beyond providing the App's core functionality.
3. Data Storage & Processing
a) Local Storage (Default)
All health data is stored locally on your device in an encrypted SQLite database. This data never leaves your phone unless you explicitly enable cloud sync or use server-powered features.
b) Cloud Storage (Optional)
If you create an account and enable cloud sync, your health data is stored on our secure servers hosted on Railway (cloud infrastructure). Data is:
- Encrypted in transit (HTTPS/TLS)
- Stored in a PostgreSQL database with access controls
- Associated with your user account only
- Deletable at any time from within the app
c) Server-Side Processing
The following features require server-side processing of your health data:
- ML Predictions — Cycle lengths and period data are sent to our Python backend for machine learning analysis (cycle prediction, ovulation detection, anomaly detection, fertility probability)
- AI Chat (Lily) — Conversation messages and health context are processed by NVIDIA's Gemma AI model via their secure API
- Health Insights — Cycle, mood, and symptom data is analyzed server-side to generate personalized insights
- Symptom Correlations — Your symptom and mood history is analyzed using AI to detect patterns
4. Third-Party Services
| Service |
Purpose |
Data Shared |
| NVIDIA NIM API |
AI chat responses, content generation |
Chat messages, health context for personalization |
| Railway (Cloud Hosting) |
Backend server, database hosting |
Synced health data (if cloud mode enabled) |
| Expo / EAS |
App updates, push notifications |
Push notification tokens (no health data) |
| Google Play |
App distribution |
Standard Play Store data (no health data) |
We do not share your health data with advertisers, data brokers, or any party not listed above.
5. Data We Do NOT Collect
- Location data or GPS coordinates
- Photos, camera, or microphone access
- Contacts, call logs, or SMS
- Advertising identifiers or tracking cookies
- Browsing history or app usage analytics
- Financial or payment information
- Device identifiers for cross-app tracking
6. Couple Mode & Data Sharing
If you use Couple Mode:
- You control exactly what data is shared with your partner via privacy settings
- Shared data is end-to-end encrypted using keys generated on your device
- You can unpair and revoke access at any time
- Your partner cannot access data you haven't explicitly shared
7. Data Retention
- Local data — Remains on your device until you delete it or uninstall the app
- Cloud data — Retained while your account is active. Deleted within 30 days of account deletion request
- AI chat logs — Not stored on our servers after response generation. Chat history is stored locally on your device only
- Support tickets — Retained for 12 months, then automatically deleted
8. Data Security
We implement industry-standard security measures:
- All network communications use HTTPS/TLS encryption
- Database access is restricted with authentication and role-based controls
- JWT tokens with 30-day expiry for session management
- Passwords hashed with bcrypt (never stored in plain text)
- Optional biometric app lock (fingerprint / Face ID)
- End-to-end encryption for Couple Mode data sharing
- Server infrastructure hosted on Railway with automated security updates
9. Children's Privacy
Bloom is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can take appropriate action.
10. Your Rights
You have the right to:
- Access — View all your data within the app at any time
- Export — Generate medical reports (PDF) containing all your health data
- Delete — Delete all local and cloud data from Profile → Delete All Data
- Opt out — Disable cloud sync, notifications, or AI features at any time
- Use without account — Full functionality available without registration
- Account deletion — Request complete deletion via the app or by emailing us
- Data portability — Export your data via medical reports before deletion
11. International Data Transfer
Bloom is operated from India by Metanetica. Our servers are hosted on Railway's infrastructure (US/EU regions). If you use server-powered features (AI chat, ML predictions, cloud sync), your data may be processed in countries outside your residence. By using these features, you consent to this transfer. All transfers are protected by HTTPS encryption.
12. Changes to This Policy
We may update this Privacy Policy when we add new features or change how data is processed. We will notify you of significant changes through the App or by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance.
13. Contact Us
If you have questions about this Privacy Policy, your data, or want to exercise your rights, contact us at:
Email: support@metanetica.in
Metanetica, Gurugram, India