Privacy Policy

    Last updated: April 28, 2026

    Bloom ("we," "our," or "the app") is a career journaling app developed by Olana. This policy describes how we collect, use, and protect your information.

    Information We Collect

    • Account information: Name and email address when you sign in with Apple or Google
    • Journal content: Journal entries, voice recordings (processed for transcription then discarded), performance reports, and career goals you create within the app
    • Image attachments: Up to four images per entry (photos, screenshots, or documents) that you choose to attach. Attachments are stored in our cloud storage (Supabase Storage) alongside the entry they belong to and are deleted when you delete the entry or your account.
    • Profile data: Job title, company, location, years of experience, and resume text you provide
    • Usage analytics: Anonymous product usage events (e.g., onboarding steps, feature usage) collected via PostHog to improve the app experience. No journal content is included in analytics.
    • Crash data: Crash reports and basic diagnostics via Sentry (no personally identifiable information is sent)
    • Subscription data: Purchase and subscription status managed by RevenueCat and Apple
    • Push notification token: If you grant notification permission, your device's push token so we can deliver report-ready alerts (see Push Notifications below)

    How We Use Your Information

    • To provide app functionality: storing your journal entries, generating AI-powered insights, and performance reports
    • To sync your data across devices when you sign in
    • To process your voice recordings into text using our AI transcription service
    • To generate AI insights and reports using our AI service provider
    • To manage your subscription status

    AI Processing

    Your journal entries and profile information are sent to OpenAI through our authenticated server-side proxy (never directly from your device) to generate insights, reports, coaching responses, and voice transcription. The proxy enforces rate limiting and only forwards specific, whitelisted models and fields — it cannot be used as a general-purpose OpenAI relay. Your journal contents are not used to train any third-party model: OpenAI's API data usage policy applies to data processed through their API, and OpenAI does not use API data for model training.

    Data Storage and Security

    • Your data is stored locally on your device and synced to our cloud database (Supabase) when you sign in
    • All data is transmitted over HTTPS
    • API keys and credentials are stored server-side, never on your device
    • Authentication is handled through Supabase with industry-standard JWT tokens

    Data Sharing

    We do not sell, rent, or share your personal information with third parties. Your data is only shared with:

    • OpenAI: To process AI features (insights, reports, voice transcription) via our secure server
    • RevenueCat: To manage subscription status
    • PostHog: For anonymous product analytics (no journal content or PII included)
    • Sentry: For crash reporting (no PII included)
    • Apple: As required for App Store and subscription processing

    Push Notifications

    If you grant notification permission, Bloom delivers a single alert when a new performance report (weekly, mid-month, semi-annual, or annual) is ready, so you can open it from the Reports tab. We do not send marketing pushes, silent push, critical alerts, or time-sensitive interruptions, and the notification payload contains only the report period — never journal content. You can revoke notification permission at any time in iOS Settings → Bloom → Notifications.

    Third-Party Platform Posts

    Bloom can generate draft posts for LinkedIn and X based on your recent entries, either as feed suggestions at a cadence you set, or on demand. Drafts are produced server-side from your entries and shown to you for review. When you tap to share, Bloom hands the draft to the LinkedIn or X app or website using their standard composer; from that moment forward, the content is governed by that platform's terms and privacy policy. Bloom does not post on your behalf, and we do not receive engagement data from those platforms.

    Data Retention and Deletion

    • Your data is retained as long as your account is active
    • You can delete your account at any time from Settings → Account → Delete Account. Deletion cascades server-side through your journal entries, image attachments, performance reports, profile, and your RevenueCat customer record. Active subscriptions must be canceled separately in your Apple ID settings, since Apple controls subscription billing.
    • Local data can be removed by deleting the app

    Your Rights

    You can access, export, or delete your data at any time through the app's Settings. To request data deletion, use the "Delete Account" option in Settings or contact us at support@olana.dev.

    Children's Privacy

    Bloom is not intended for children under 13. We do not knowingly collect information from children.

    Changes to This Policy

    We may update this policy from time to time. We will notify you of significant changes through the app.

    Contact

    If you have questions about this policy, contact us at support@olana.dev.