Privacy Policy
MindBloom · Last updated: April 30, 2026
MindBloom ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the MindBloom mobile application.
1. Information We Collect
Account information: When you register, we collect your email address and a display name you choose.
Diary entries: Text content and photos you add to diary entries are stored on our servers to enable sync across devices. Photos are stored securely in cloud storage.
Chat messages: Messages you send to the AI companion are processed to generate responses and are stored to maintain conversation context within a session.
Usage data: We collect basic usage metrics (e.g., daily chat count) to enforce fair-use limits and improve the app.
Device information: We may collect anonymised device and OS version information for crash reporting and compatibility purposes.
2. Photo Library Access
MindBloom requests access to your photo library solely to let you attach photos to diary entries. We do not access your photos for any other purpose. Images are uploaded only when you explicitly choose to attach them to an entry.
3. How We Use Your Information
- To provide and personalise the app experience (AI conversations, diary, mood reports)
- To store and sync your diary entries across your devices
- To enforce daily usage limits and manage subscription entitlements
- To send optional push notifications (reminders) if you enable them
- To improve app features and fix bugs
4. Data Storage & Security
Your data is stored on Supabase infrastructure, which uses industry-standard encryption in transit (TLS) and at rest (AES-256). Diary content is associated with your authenticated account and is not accessible to other users.
5. AI Processing
Chat messages and diary summaries are sent to third-party AI providers to generate AI responses, emotion analysis, summaries, and memory retrieval. Message content is transmitted securely. MindBloom currently uses DeepSeek for AI text generation and OpenAI for embedding generation. Their data handling is governed by DeepSeek's Privacy Policy and OpenAI's Privacy Policy. We do not share your name, email, or account identifiers with these AI providers.
6. In-App Purchases & Subscriptions
Subscription purchases are processed by Google Play. Payment information is handled entirely by Google and is never seen or stored by us. We use RevenueCat to manage subscription entitlements; RevenueCat receives a pseudonymous user ID and purchase receipt — not your email or personal details.
7. Push Notifications
If you grant notification permissions, MindBloom may send you optional check-in reminders. You can disable notifications at any time in your device settings. Notification tokens are stored only for the purpose of delivering your notifications.
8. Data Retention
Your account data is retained as long as your account is active. You may request deletion of your account and all associated data at any time by emailing us. Upon deletion, your diary entries, chat history, and account information are permanently removed within 30 days.
9. Children's Privacy
MindBloom is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Third-Party Services
MindBloom integrates the following third-party services:
- Supabase – database, authentication, file storage (Privacy Policy)
- DeepSeek API – AI conversation, diary analysis, reports, and reminders (Privacy Policy)
- OpenAI API – embedding generation for memory retrieval (Privacy Policy)
- RevenueCat – subscription management (Privacy Policy)
- Expo / EAS – app distribution and push notifications (Privacy Policy)
- PostHog – privacy-preserving product analytics; receives anonymized usage events only (never diary or chat content) (Privacy Policy)
- Sentry – crash and error monitoring; receives technical error data only (never diary or chat content) (Privacy Policy)
11. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, please contact us at the email below.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notice or email. The "Last updated" date at the top of this page reflects the most recent revision.
13. Delete Your Account & Data
You can request the deletion of your MindBloom account and all associated personal data at any time.
What gets deleted: Upon account deletion, the following data is permanently removed within 30 days:
- Your account profile (email address, display name)
- All diary entries and attached photos
- All AI chat history
- Notification preferences and settings
- Subscription and usage records
How to request deletion:
- Option 1 (In-app): Go to Profile → Settings → Delete Account
- Option 2 (Email): Send a request to mindbloom.support@gmail.com with the subject line "Account Deletion Request" and include your registered email address. We will process your request within 30 days.
14. Contact Us
If you have questions about this Privacy Policy or want to request data deletion, please contact:
📧 mindbloom.support@gmail.com