Privacy Policy
Bloomie keeps what you write and say so you can come back to it. AI services process it to answer you. We do not sell it, show adverts or train models on it, and you can download or delete it yourself.
You can replay a Story recording for 24 hours after you make it. Bloomie uses storage in your browser only for signing in, security and your choices.
Who we are
Superwhale Ltd. is the controller of your personal data when you use Bloomie. That means we decide why and how it is used.
Superwhale Ltd.2 Barking Abbey Road, Barking, London IG11 7ZR, United Kingdom
support@usebloomie.com
What we collect
Your account
Your email address and password are needed for an account. The password is kept only as a one-way hash, never in a readable form. Your name can be a name you choose. You can also set preferences such as English level, tone, language, time zone, and sound and motion settings. If someone invited you, they may have given us your email address; we keep the invitation record until your account is deleted, and signing up marks it as used.
What you write and say
The text you type, your voice recordings and what they are turned into (the transcript), the replies, readings and recaps Bloomie produces, the situations you describe (for example who you will talk to, what you want and what you are worried about), and the steps you choose to save. You can type instead of recording. Without a message or a recording, Bloomie cannot respond.
People using Bloomie may mention others in what they write. Please use roles or made-up names and leave out details that identify other people.
If someone mentions you
If someone mentions you while using Bloomie, we may receive details about you from them, such as names, relationships or sensitive information. We use the conversation to provide their practice and save it for them. Those details can appear in replies and recaps, and our AI providers process them as described below. We do not keep a directory of people mentioned in conversations. If you think someone has included information about you, write to support@usebloomie.com. You do not need an account. Tell us what you already know about the conversation, and please do not send identity documents. We will explain what we can reasonably find and what we can do while protecting other people's privacy.
Use of the service
How many practice uses you have had this week and month, and records that limit abuse and cost (these use hashed identifiers rather than your email address or IP address). When a sign-up or sign-in is checked for automated abuse, we may use Cloudflare Turnstile, which receives a challenge token and ordinary web request details.
From your browser
Your browser sends us normal request details, such as its language settings. We read the browser’s language settings as a hint about which country’s help services to show. It is not your location, and it is saved with the conversation where it was used. Our servers and hosting providers also see your IP address and keep operational logs.
Sensitive information
You decide what you write, and what you write about yourself can include sensitive things, such as your health. We ask for your explicit agreement to this when you create an account, and we use it only to reply to you, give you feedback and save your conversation. You can withdraw your agreement at any time by writing to us or by deleting your account. Withdrawing does not affect use that was lawful before.
Why we use it
| What we do | Our legal basis (UK and EU GDPR) |
|---|---|
| Run your account and give you Bloomie: store your conversations, produce replies, readings and recaps, apply your weekly limit | Contract: it is needed to provide the service you asked for |
| Answer your messages to us about your account | Contract, where needed to provide the service; otherwise our legitimate interest in replying to you |
| Use sensitive information you write about yourself | Your explicit consent, which you can withdraw |
| Keep Bloomie secure and fair: stop abuse, limit cost, find and fix faults | Our legitimate interests in a safe, working service |
| Deal with your rights requests and complaints, and meet other legal duties | Legal obligation |
We do not sell your data, we do not show adverts, and we do not use what you write to train AI models. Bloomie automatically analyses your words and recordings to produce practice feedback and to decide whether to show support options. These assessments can be wrong. We do not use practice readings to make decisions about your employment, education, credit or access to other services.
AI services that process it
To answer you, Bloomie sends what you type or say to AI services through a provider called OpenRouter, and to the providers that host the models it selects. Speech recognition may use a separate provider. They turn speech into text, write replies and recaps, assess recordings and speak replies aloud. Names and email addresses are not sent on purpose, but people can include them in their own words.
- Speech to text. The recording, converted to a standard audio format, goes to the speech service. If live captions are on, short audio clips go while the microphone is open, before you send a reply. Cancelling cannot recall clips already sent.
- Replies, readings and recaps. Your messages or transcripts, the topic and any situation you described, your English level, and the language and region hints.
- Assessing a recording (Story). The audio, the question it answers and your English level.
- Speaking a reply aloud. The text of the reply, which can repeat things you said.
For replies and recaps, for assessing recordings and for speech synthesis, we ask OpenRouter to use only providers that do not keep or collect the data. For speech to text we do not make the same request, and its settings can differ. These are requests and settings, not guarantees, and we are working to confirm the position with each provider. A list of the providers in use is available on request.
Where it goes
AI providers and other services may handle data outside the UK and the European Economic Area, including in the United States. We are putting in place, and documenting, the safeguards the law requires for each of these transfers. Write to us if you want to know where that stands for a particular service.
How long we keep it
| What | How long |
|---|---|
| Your account, conversations, transcripts, recaps and saved steps | Until you delete them |
| Story voice recordings | You can replay them for 24 hours after upload. Access then ends and file deletion is scheduled |
| Chatting recordings | Removed when their transcript is accepted. Unaccepted uploads and temporary files are scheduled for cleanup after 24 hours; an outage can delay cleanup |
| Spoken replies kept ready to play | Up to 24 hours |
| Sign-in cookie | 30 days, ending sooner when you sign out. Expired sign-in records are cleaned up after 7 more days |
| Technical records of AI requests (cost, timing; not your full messages) | 90 days |
| Abuse and limit records | Cleaned up after they expire, which is between minutes and 24 hours |
| Server logs and the messages you send us | Only as long as needed for security, fault-finding and answering you |
| Backups of our database (these include saved text) | Our backup scripts target deletion after 14 days. Failed jobs or an offline backup device can delay removal |
Deleting a conversation removes its saved content from the live app. A content-free use count remains until the weekly reset, and cost records remain until your account is deleted. Recording access ends at once, and failed file deletion is retried. Deleting does not reach backups, which roll off on the schedule above, files you have already downloaded, or copies that an AI provider may hold under its own terms. A conversation you saved separately from another one, such as a follow-up, is a separate record and is deleted on its own.
Your choices and rights
In Settings under Privacy you can download your saved conversations, recaps and steps as one file, which does not include recordings or all account and technical records, and you can delete your account. In History you can delete a single conversation.
Under the UK and EU GDPR you also have the right to ask us to see what we hold about you, correct it, delete it, restrict or object to how we use it, and receive it in a portable form, in each case where the law gives you that right. Write to support@usebloomie.com to use any of them. We normally respond within one month; if the law allows more time, we will tell you why. Where we rely on your consent, you can withdraw it at any time without affecting earlier lawful use.
If you want to complain to us, write to support@usebloomie.com. We acknowledge complaints within 30 days, look into them without undue delay and tell you the outcome. You can also complain to the Information Commissioner’s Office (ICO), or to the data protection authority where you live.
Age
You must be 18 or older to use Bloomie. If we establish that an account belongs to someone younger, we close it and remove its content under our deletion process. Our help page stays open to everyone.
Keeping it safe
We protect data with encrypted connections, hashed passwords and access limits. No service is perfectly secure. If a breach puts your rights at risk, we will tell you and the regulator as the law requires.
If you write that you are in danger
The model may switch from practice to support options. It can miss a concern, or show help when it is not needed. This feature does not contact anyone or report the conversation. We may still disclose information where the law requires it, as described above. Bloomie cannot contact emergency services or locate you for a rescue. Our help page is always open.
Changes to this policy
We may update this policy. We will change the date at the top, explain material changes before they apply, and ask for fresh consent where the law requires it.
Contact
Superwhale Ltd.2 Barking Abbey Road, Barking, London IG11 7ZR, United Kingdom
support@usebloomie.com
usebloomie.com