Privacy Policy

Last updated: 11 August 2026

This Privacy Policy is intended to inform users of the website www.bloomandflyapp.com (hereinafter the “Website”) and the Bloom & Fly mobile application (hereinafter the “Application”) about how their personal data is collected and processed.

Bloomy Apps places particular importance on respecting the privacy and protecting the personal data of its users.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679), the French Data Protection Act (Loi Informatique et Libertés) and, more generally, applicable data protection laws and regulations.

Article 1 — Data Controller

The data controller responsible for the processing activities described in this Privacy Policy is:

Bloomy Apps

French simplified joint-stock company (SAS) with share capital of €500

Registered office: 604 chemin du Puy, 06600 Antibes, France

Antibes Trade and Companies Register

SIREN: 999 896 061

Email address: contact@bloomandflyapp.com

Article 2 — Data that may be collected

Bloomy Apps ensures that it only collects data that is adequate, relevant and necessary for the purposes for which it is processed.

Depending on how the Website and the Application are used, the following categories of data may be processed.

2.1 Account data

When a Bloom & Fly Account is created and managed, we may process, in particular:

the first name provided by the User;
the email address associated with the Account;
a technical identifier associated with the Account;
information necessary for the creation, authentication and management of the Account;
the date the Account was created and, where applicable, certain information relating to the Account status.

2.2 Data from third-party authentication services

The Application may allow Users to create an Account or sign in using third-party authentication services, including Apple, Google or Facebook.

When the User chooses one of these sign-in methods, the relevant provider may transmit certain information to Bloomy Apps that is necessary for the creation or authentication of the Account.

Depending on the provider, the settings selected by the User and the permissions granted, this information may include, in particular:

an email address, which may in some cases be a relay address;
a technical identifier specific to the authentication service;
information used to confirm authentication.

Bloomy Apps does not have access to the password used by the User with these third-party services.

2.3 Data relating to use of the Application

In order to ensure the operation, security, maintenance and improvement of Bloom & Fly, certain technical information or information relating to the use of the Application may be processed.

Depending on the technical services enabled and their configuration, this information may include, in particular:

the type of device used;
the operating system and its version;
the version of the Application;
technical identifiers;
the IP address;
the language or certain technical settings of the device;
dates and times of use;
information relating to the operation of the Application;
information relating to the features or categories of Content used;
information relating to errors, malfunctions or technical incidents;
statistical data relating to the use and performance of the Application.

This data may be used to operate the Application, ensure its security, detect and correct anomalies and, depending on the tools used and their configuration, obtain statistics to improve Bloom & Fly.

2.4 Subscription data

Bloom & Fly Subscriptions are purchased and paid for through the Apple App Store or Google Play.

Bloomy Apps does not directly collect or store bank details or full payment method information used with these Platforms.

Bloomy Apps may, however, receive or process certain information necessary to manage premium access, including:

the Subscription status;
the relevant Subscription plan;
the validity period of the Subscription;
technical identifiers associated with the transaction or Subscription;
information necessary to verify that a User is entitled to premium access.

Payment transactions and banking data are processed by Apple or Google depending on the Platform through which the Subscription was purchased.

2.5 Data provided when contacting us

When a User contacts Bloomy Apps by email, contact form or support service, we may process, in particular:

their surname, if provided;
their first name, if provided;
their email address;
the content of their message;
any information they voluntarily choose to attach to their request;
information necessary to process and follow up on their request.

We encourage Users to provide only the information necessary to process their request.

2.6 Data relating to browsing the Website

When the Website is accessed, certain technical data may be processed, including:

the IP address;
the date and time of connection;
the browser used;
the operating system;
technical information necessary for the operation and security of the Website.

This information may, in particular, be processed by the provider responsible for the technical hosting of the Website.

Article 3 — Health data and sensitive data

Bloom & Fly is an Application dedicated to well-being and personal development and is not a medical service.

Bloomy Apps does not ask Users to provide a medical diagnosis, medical record or information relating to medical treatment when creating an Account.

Certain information relating to the use of the Application may, however, concern the categories of Content or features viewed or used by the User.

Bloomy Apps does not use this information to establish a diagnosis, create a medical record or build a medical profile of the User.

If a User voluntarily provides health-related information in a message sent to support, Bloomy Apps encourages them to limit such information to what is strictly necessary to process their request.

Article 4 — Purposes and legal bases of processing

Bloomy Apps processes personal data for the following purposes and on the following legal bases.

Account creation, authentication and management

Data necessary for the creation, authentication and management of the Account is processed in order to provide the User with Bloom & Fly features.

This processing is based on the performance of the contract or on steps taken at the User’s request in order to benefit from the Service.

Provision of features and management of premium access

Information necessary for the provision of the Service, operation of the Account and verification of Subscription status is processed in order to allow the User to access the features to which they are entitled.

This processing is based on the performance of the contract.

Support and responses to requests

Data provided when contacting Bloomy Apps is used to respond to questions, support requests or complaints.

Depending on the nature of the request, this processing is based on the performance of the contract, steps taken at the User’s request, or Bloomy Apps’ legitimate interest in responding to requests addressed to it.

Security, prevention of abuse and technical operation

Certain technical data may be used to ensure the security of the Website and the Application, identify malfunctions, prevent fraudulent or abusive use and ensure the operation of the Service.

Depending on the circumstances, this processing is based on the need to provide the Service or on Bloomy Apps’ legitimate interest in ensuring the security, reliability and proper operation of its services.

Diagnostics and improvement of the Service

Technical and statistical information may be used to identify errors, analyse the performance of the Application and improve its operation and usability.

Where the technologies used are strictly necessary for the operation of the Service or meet the conditions allowing their use without consent, they may be used on that basis.

Where applicable laws and regulations require the User’s prior consent for the use of an analytics tool, identifier, tracker or similar technology, the relevant processing is based on consent.

Optional communications

If Bloomy Apps offers the User the option to receive optional communications, including news or promotional communications, such communications are sent on the basis of the User’s consent where consent is required.

The User may withdraw this consent at any time.

Compliance with legal obligations and defence of Bloomy Apps’ rights

Certain data may be retained or used where necessary to comply with a legal obligation, establish, exercise or defend legal claims, or manage a dispute.

The processing is then based on the applicable legal obligation or on Bloomy Apps’ legitimate interest in defending its rights.

Article 5 — Mandatory or optional nature of data

Data necessary for Account creation, authentication, provision of the Service or management of a Subscription is required in order to benefit from the relevant features.

Failure to provide such data may prevent the creation or use of the Account or access to the relevant features.

Information requested on an optional basis does not have to be provided and its absence will not prevent access to features for which it is not necessary.

Article 6 — Recipients and service providers

Personal data is accessible only to authorised persons within Bloomy Apps who need access to it in connection with their duties.

Bloomy Apps may also use suppliers and technical service providers to provide certain features of the Website and the Application.

Google and Firebase

Bloomy Apps uses technical services provided by Google, including Firebase.

Depending on the services enabled and their configuration, Firebase may, in particular, be used for:

User authentication;
operation and security of the Application;
collection of usage statistics;
detection, diagnosis and correction of technical issues;
other technical features necessary for the operation or improvement of the Application.

Apple, Google and Facebook

These companies may be involved when a User chooses to use their services to create an Account or authenticate.

They may act as separate data controllers in respect of processing carried out for their own purposes.

Apple and Google

Apple and Google also act as providers of the App Store and Google Play Platforms, in particular for:

downloading and distributing the Application;
purchasing and managing Subscriptions;
billing and payment;
managing transactions, cancellations and refunds in accordance with their respective terms.

GitHub

The Website www.bloomandflyapp.com is hosted via GitHub Pages, a service provided by GitHub.

GitHub may process certain technical data necessary for the hosting, operation and security of the Website.

Communication and support providers

Bloomy Apps may use technical service providers for hosting or delivering emails and processing requests sent to it.

These providers only access data to the extent necessary to provide their services and in accordance with their applicable obligations.

Bloomy Apps does not sell its Users’ personal data to third parties.

Article 7 — Transfers of data outside the European Economic Area

Certain service providers used by Bloomy Apps are established outside the European Economic Area or use infrastructure that may result in personal data being processed in third countries.

This is notably the case for certain services provided by Google and Firebase.

Other service providers, including Apple, Google, Meta/Facebook or GitHub, may also process certain data internationally depending on the services used.

Where personal data is transferred to a country outside the European Economic Area, Bloomy Apps ensures that the transfer is based on a mechanism recognised under applicable laws and regulations.

Depending on the service provider and the country concerned, transfers may, in particular, be governed by:

an adequacy decision adopted by the European Commission;
the EU–US Data Privacy Framework where applicable;
the Standard Contractual Clauses adopted by the European Commission;
or any other appropriate safeguard provided for under the GDPR.

Users may contact Bloomy Apps at contact@bloomandflyapp.com to obtain further information about the safeguards applicable to transfers concerning them.

Article 8 — Retention periods

Bloomy Apps retains personal data only for as long as necessary for the purposes for which it was collected, subject to any retention periods required or permitted by applicable laws and regulations.

Account data

Information necessary for the management of the Account is retained for the entire period during which the Account exists.

When an Account is deleted, the data associated with it is deleted or anonymised when it is no longer necessary, subject to information that must or may be retained for an additional period in order to comply with a legal obligation, ensure the security of the Service, manage a dispute or defend Bloomy Apps’ rights.

Residual copies may temporarily remain in the backup systems of technical service providers before being permanently deleted in accordance with their technical backup cycles.

Contact and support request data

Information provided in connection with a request is retained for the period necessary to process and follow up on that request.

It may be retained for longer where necessary to retain evidence of an exchange, manage a complaint or defend Bloomy Apps’ rights, within the applicable limitation periods.

Subscription data

Information relating to Subscription status is retained for the period necessary to provide premium access and manage the contractual relationship.

Information that must be retained in order to comply with accounting, tax or legal obligations may be kept for additional periods as required by applicable laws and regulations.

Technical, security and diagnostic data

Technical data is retained for a period proportionate to its purpose.

Data required for security purposes or to diagnose an incident may be retained for the period necessary to identify, analyse and resolve the issue.

Retention periods applied by certain technical services may also depend on the configuration selected by Bloomy Apps and the retention mechanisms offered by the relevant service provider.

Usage analytics data

Where analytics or usage measurement tools are used, the corresponding data is retained for a limited period and in accordance with the configuration of the service used, consistent with the purposes for which it was collected.

Article 9 — Cookies, trackers and similar technologies

The Website may use cookies or similar technologies that are strictly necessary for its operation, security or the provision of features requested by the User.

The mobile Application may use technical identifiers, SDKs or similar technologies necessary for its operation, authentication, security, diagnostics or measurement of its use.

Certain technologies may be used without consent where they are strictly necessary for the Service or meet the conditions for an exemption from consent under applicable laws and regulations.

Where the use of a tracker, identifier or technology requires the User’s consent, such consent is obtained before it is used.

The User may withdraw their consent where processing is based on consent.

Article 10 — Data security

Bloomy Apps implements appropriate technical and organisational measures to protect personal data against, in particular, destruction, loss, alteration, disclosure or unauthorised access.

Access to personal data is restricted to persons and service providers who require it in order to perform their duties.

As no information system can guarantee absolute security, Bloomy Apps seeks to adapt its protective measures according to the risks identified and developments in technology.

Article 11 — Users’ rights

In accordance with applicable laws and regulations, depending on the nature of the processing concerned, the User has the following rights:

the right of access to their data;
the right to rectify inaccurate or incomplete data;
the right to erasure under the conditions provided by applicable laws and regulations;
the right to restriction of processing;
the right to object where the processing is based on a legal basis allowing this right to be exercised;
the right to data portability where the statutory requirements are met;
the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before such withdrawal.

The User may exercise their rights by contacting Bloomy Apps:

By email: contact@bloomandflyapp.com

By post:

Bloomy Apps

604 chemin du Puy

06600 Antibes

France

In order to protect the User’s data, Bloomy Apps may request information reasonably necessary to verify the User’s identity where there is doubt as to their identity.

Bloomy Apps responds to requests within the time limits provided by applicable laws and regulations.

The User also has the right to lodge a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).

Article 12 — Account deletion

To delete their Bloom & Fly Account and the data associated with it, the User may consult the account deletion procedure.

Deleting the Account results in the deletion or anonymisation of associated data where it is no longer necessary, subject to data whose retention remains necessary or permitted under applicable laws and regulations.

Deleting the Bloom & Fly Account does not automatically cancel a Subscription purchased through the Apple App Store or Google Play.

The User must separately cancel their Subscription through the Platform through which it was purchased.

Article 13 — Changes to the Privacy Policy

Bloomy Apps may amend this Privacy Policy, in particular to reflect changes to the Application, the Website, the technical services used or applicable laws and regulations.

The version currently in force is the version available on the Website and within the Application. The date of the latest update appears at the beginning of this document.

In the event of a material change affecting the way personal data is processed, Bloomy Apps will inform Users by appropriate means where required by applicable laws and regulations.

Where a new processing activity requires the User’s consent, such consent will be obtained in accordance with applicable laws and regulations.

Article 14 — Contact

For any question relating to this Privacy Policy or the processing of personal data, the User may contact:

Bloomy Apps

Email: contact@bloomandflyapp.com

Address:

604 chemin du Puy

06600 Antibes

France