Bloomly
Privacy policy
Effective 2 October 2026
The short version. Bloomly has no ads, no analytics and no tracking, and we don't sell data. You don't need an account: what you save stays on your phone. If you choose to create one, we keep your email address, name and username to sign you in and show your profile. You can delete your account in the app at any time.
This policy covers the Bloomly app for iPhone (and later Android) and this website. "We" means the developer of Bloomly. Questions: bloomlydev@gmail.com.
What stays on your phone
These are stored only on your device, in the app's own storage:
- Recipes you save, create or add from a link.
- Roasteries you add.
- Your machines: the names you give them, their color, and their Bluetooth identifiers.
- Settings, such as language and appearance.
- A copy of the roastery directory, so search works offline.
- Diagnostic logs from the last 5 days. They stay on the phone unless you choose Share logs (see below).
Deleting the app deletes all of it.
What leaves your phone, and why
- The roastery directory. The app downloads the list of roasteries (names and store links) from Bloomly's server. Nothing about you is sent.
- Roastery stores. To show a roastery's beans and logo, the app connects directly to that roastery's own website (for example its Shopify, Salla, Zid or WooCommerce store). As with any website visit, that site receives your IP address and its own privacy policy applies. Bloomly doesn't log in or send any personal information.
- Web search. When you tap Search the web, the words you typed and your phone's region (for example "SA") are sent to Bloomly's server, which runs the search with Brave Search. We don't store your search or link it to you. We keep only a daily count of searches, to cap costs.
- Roastery suggestions. When you add a roastery that isn't in the directory yet, its public store details (name, website, store platform, country, city and currency) are sent to Bloomly so it can be reviewed for the directory. Nothing that identifies you is included.
- xBloom recipe links. When you open or save an xBloom share link, the app fetches that recipe from xBloom's servers. xBloom's privacy policy applies to that request.
- Your machine. Bluetooth connects your phone directly to your xBloom machine. Recipes and brew progress travel only between the two; they're not sent to us.
- Shared logs. Only if you tap Share logs in Profile ▸ Diagnostics. The logs go wherever you send them from the share sheet (for example an email to us). They contain the app's activity and errors, such as messages exchanged with your machine, not personal information.
Your account (optional)
Signing in is optional; everything else in Bloomly works without it. If you sign in, we keep:
- Your email address, to sign you in. With Sign in with Apple you can choose to share a private relay address instead of your real one.
- The name and username you choose, shown to other signed-in Bloomly users on your profile. If you sign in with Apple or Google, the name they share with us is filled in for you to edit.
- An account ID and sign-in records (such as when you last signed in), to keep your account working and secure.
With Sign in with Apple or Google, Apple or Google confirms who you are; we receive only what's listed above, never your password. With email, we send you a one-time code; your address is used only for signing in. Your account data is stored with Supabase (see below) and is never sold or used for advertising.
Sharing and following. Your recipes stay private unless you tap Share on one. A shared recipe, with your name and username, is visible to other signed-in Bloomly users on your profile until you stop sharing it or delete it. We also keep who you follow (your follower and following counts and lists are visible to signed-in users), who you block (never shown to anyone), and any reports you send, which we use only to review content.
Deleting your account: in the app, go to Profile ▸ Delete account. Your account, profile, shared recipes, follows, blocks and reports are deleted permanently. Recipes and machines saved on your phone stay on it.
Device permissions and sensors
- Bluetooth is used to find and control your xBloom machine. You can turn it off for Bloomly in your phone's settings; brewing needs it.
- Motion sensors gently tilt some visuals as you move your phone. The readings are used on the device for that effect only; they're never stored or sent.
Service providers
- Supabase hosts Bloomly's server: the roastery directory, the web-search function and, if you create one, your account. Like most hosting providers, it may keep standard technical logs, such as IP addresses and request times, for a short period to run and secure the service.
- Apple and Google handle sign-in if you choose Sign in with Apple or Google; their privacy policies apply to that step.
- Brave Search receives the search words you send with Search the web, from our server, not from your phone, and not linked to you.
- Vercel hosts this website and may keep similar technical logs.
This website
This site uses no cookies, analytics or third-party scripts or fonts. It remembers your language choice in your browser's local storage.
Children
Bloomly isn't directed at children under 13, and we don't knowingly collect personal information from anyone.
Your choices and rights
What you save on your phone is yours to edit or remove in the app; deleting the app removes it all. If you have an account, you can change your name and username in Profile ▸ Edit profile, and delete the account in Profile ▸ Delete account. Without an account, we hold no personal data about you. For any other question or request about your data, including a copy of it, email bloomlydev@gmail.com.
Changes
If this policy changes, we'll update this page and the date at the top. If a change affects what the app sends, we'll say so in the app's release notes.