Privacy policy
Your story is personal. Here is how Bloom handles it.
Last updated: 24 October 2026 · Operator: ANTLV LABS
Bloom: Sober Companion is operated by ANTLV LABS. This policy explains the mobile app and this website. Core recovery tools work without a Bloom account. Optional cloud backup and subscription processing have separate data flows.
1. Records on your device
Your records can include a chosen name, goals, start date, reasons and intentions, drinking and spending baselines, a support contact name and phone number, check-ins, moods, cravings, triggers, journal text, coping sessions and plans. The app stores these in its local app storage to provide tracking, reports, reflections and the garden.
Bloom does not add journal-file encryption. Optional biometric or device authentication locks the interface; it is not end-to-end encryption. Protect your device and any exported files.
2. Optional cloud backup
If you enable cloud backup, sign in and tap Sync now, Bloom sends your record collection, including profile/contact fields, record IDs, timestamps and deletion markers, to Supabase. Your email is used for authentication. An account identifier associates records with your account. Authentication and session refresh can contact the service separately from record sync.
Transport uses HTTPS and the database uses account-level access controls. Authorized service administrators may access cloud records. Optional cloud backup is not end-to-end encrypted. See Supabase privacy information.
3. Purchases and membership
The Store and RevenueCat process subscription products, purchases, restore requests and membership status. This can involve transaction history, app or device identifiers and an anonymous app user ID. If you sign in, Bloom may associate membership with your Bloom account ID. Previously enabled billing may refresh when you return to the app.
These app flows do not send your journal text, mood entries or recovery notes to RevenueCat. The Store processes payment details; Bloom does not ask for your card number or bank details. See RevenueCat privacy information and Google privacy information.
4. Reminders, exports and sharing
Reminders are scheduled on your device when you enable them. Device authentication is handled by your operating system. We do not receive your fingerprint or face template.
JSON backups are readable files containing your records. You choose their storage and recipients. PNG posters start without personal metrics; only metrics you select are included. Sharing uses your device's sharing controls. Temporary export images/files are removed after the app's sharing flow. Copies you save or send remain under your and the recipient's control.
5. Retention and deletion
Local records remain until you remove them or erase this device's data. Deleting an individual entry clears its content and keeps a record ID, type, timestamp and deletion marker to prevent an older copy returning during sync. That deletion marker reaches the cloud on your next sync.
Erasing only this device leaves cloud copies intact. The in-app Delete account, cloud data & this device action deletes the signed-in account and associated active cloud records, then clears this device's recovery records/settings. Other devices and exported backups must be erased separately. It does not delete Store or RevenueCat purchase records or cancel a subscription. Provider logs, purchase records and backups may have separate retention governed by the provider's policies and applicable obligations; we do not promise instant removal from every provider backup.
You can also request account deletion outside the app.
6. This website and service providers
This static website has no recovery-data form, advertising tracker or analytics SDK added by us. Cloudflare hosts and delivers it and may process IP addresses, request information and security logs. Contacting us by email sends the information you choose to your email provider and our support mailbox. Do not include recovery notes, passwords, payment details or identity documents in an initial support email. See Cloudflare privacy information.
Service providers may process information in countries different from yours. We do not sell your recovery records or use them for advertising. We may disclose information if legally required or necessary to protect the service and its users.
7. Your choices and questions
You can use core tools without an account, leave cloud backup disabled, manage device permissions, export records and use the deletion controls. You may contact us about access, correction or deletion of information held by the service. We may need to verify an account request without asking for your journal content. Bloom is intended for adults and is not designed for children.
We may update this policy when the service changes. The date above identifies this version. Contact antlv.labs@gmail.com with privacy questions.