Bloom Privacy Policy
This policy explains, in plain language, what information Bloom may process, why it may be processed, and how privacy requests can be made.
Who we are
This Privacy Policy applies to the Bloom iOS application (previously published as "Hi! Languages") and to the public Bloom / Hi-Languages pages published on cratox.com.
Bloom is provided by Alexandru Iliescu, an independent developer. In this policy, "Bloom," "we," "our," and "us" refer to the app and its operator in that capacity.
What data we collect
Depending on how you use the app, the data we may process includes:
- Account information, including sign-in details and email address if provided
- Learning preferences, such as source language and target language
- Watch history, lesson progress, completion signals, and saved activity
- Support messages, screenshots, diagnostics, and other information you send to support
- Notification preferences, if notifications are enabled
- Technical and device data used to operate, secure, and improve the app
- Subscription and purchase status (plan type, trial and renewal state); payment card details are processed by Apple and never reach us
- Push-notification tokens and notification preferences, where notifications are enabled
- Attribution and campaign-measurement signals used to understand which campaigns lead to installs — including, where you grant permission through the iOS tracking prompt (App Tracking Transparency), the device advertising identifier
- Voice or speech input only if a voice-related feature is made available in the app
How we use data
- To provide and operate Bloom
- To save your preferences, progress, and language configuration
- To personalize the learning flow and improve product quality
- To respond to support and privacy requests
- To manage account access and account security
- To detect abuse, troubleshoot issues, and maintain reliability
- To comply with legal obligations and enforce the Terms of Service
- To send service and progress communications and, where permitted by applicable law or with your consent, marketing communications about Bloom; every marketing email contains an unsubscribe link, and notifications can be disabled at any time in your device settings
- To measure the performance of our advertising campaigns, where permitted by applicable law
Legal bases for processing
Where applicable law requires a legal basis, we generally rely on one or more of the following:
- Performance of a contract: to provide the app, account access, progress tracking, and requested features.
- Legitimate interests: to secure, maintain, improve, and operate the service responsibly.
- Consent: where we ask for permission, such as certain notifications, analytics, or voice-related features when those features are enabled.
- Legal obligations: where retention or disclosure is required by law.
Subscriptions and payments
Bloom offers optional paid subscriptions ("Bloom Premium") that unlock premium features. Subscriptions are purchased through Apple's in-app purchase system and billed by Apple; we do not receive or store payment card details.
We process subscription status information — such as whether an account has an active subscription or trial, the plan type, and its renewal state — through our subscription-management provider, so that the app can unlock features and we can operate our business. We may from time to time make promotional offers or discounts available; these are redeemed through Apple's systems and are subject to eligibility conditions and Apple's terms.
Third-party service providers
To operate Bloom we rely on service providers acting on our behalf, including:
- Apple — app distribution, in-app purchases, and offer redemption
- Google Firebase / Google Cloud — authentication, infrastructure, analytics, and crash reporting
- Amazon Web Services and Supabase — hosting, content, and delivery infrastructure
- Providers of push-notification delivery, subscription management, install-attribution measurement, video delivery, and email delivery services
- AI and media-processing providers used to generate and process learning content; account and profile data is not shared with such providers for content generation, although technical data (such as IP addresses) may be processed when content is delivered
Where these providers act as processors, they process personal data on our behalf and under our instructions; some (such as Apple) act as independent controllers under their own terms.
Data retention
Personal data is retained only for as long as reasonably necessary to provide the service, keep account functionality available, resolve disputes, prevent abuse, comply with legal obligations, and maintain required records.
Retention periods may vary by data type. For example, support records and crash data may be retained for different periods than in-app progress data.
International transfers
Your information may be processed in countries other than your own, depending on where our infrastructure and service providers are located. Where required, we rely on appropriate safeguards for such transfers, including contractual or other legally recognized mechanisms.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export certain personal data, and to withdraw consent where processing depends on consent.
Requests can be sent to iliescualex@gmail.com. We may ask for information necessary to verify identity before completing a request.
Data deletion and account deletion
You may request deletion of your Bloom account and associated personal data by emailing iliescualex@gmail.com. If an in-app deletion flow becomes available, that flow may also be used.
Some information may still need to be retained where required for legal compliance, fraud prevention, or dispute resolution.
Children’s privacy
Bloom is not intended to knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data without appropriate authorization, contact iliescualex@gmail.com and the request will be reviewed.
Security
Reasonable technical and organizational measures are used to help protect personal data against unauthorized access, disclosure, alteration, or destruction.
No system is completely secure, so absolute security cannot be guaranteed.
Changes to this policy
This Privacy Policy may be updated from time to time. When that happens, the "Last updated" date will be changed above, and additional notice may be provided inside the app or by other appropriate means where required.