Privacy Policy
Last updated: October 27, 2026
The short version: Bloom is private by default — your scores, worlds, and settings stay on your device. We collect anonymous usage analytics to improve the game, and on iOS we send TikTok and Meta anonymous install and purchase signals to measure our own ads — nothing that tracks you across other apps, and one Settings switch turns all of it off. On iOS, Bloom can also offer an optional ad (provided by Google) when you're out of moves or stuck on a Trail level — it only plays if you choose to watch it, and you never have to. You can also opt in to an online leaderboard and to notifications — both are off until you choose them. The only thing ever shown to other people is your leaderboard nickname and a few game stats, if you share. No account, no email, nothing that identifies you.
This policy explains how the Bloom app ("Bloom," "we," "our"), made by The Mit, handles information. It applies to the Bloom mobile app and the version playable on the web.
Almost nothing, and nothing that identifies you. Bloom has no accounts, no sign-in, and no registration. We never ask for your name, email, phone number, location, contacts, or photos. A few kinds of non-identifying information may leave your device, each described below and each optional: anonymous usage analytics that help us improve the game, on iOS a few ad-measurement signals that tell TikTok or Meta an install or a purchase happened so we can see whether our own ads work, anything you choose to post to the optional leaderboard, a token used to deliver notifications (only if you turn them on), and on iOS the standard information Google receives to provide the optional ads (see below).
So the game can remember where you left off, Bloom stores your progress — things like your high score, current board, unlocked worlds, daily-puzzle streak, and your settings (such as your chosen accent color) — locally on your device using your device's standard app storage.
This information stays on your device. It is not transmitted to us or anyone else, and we cannot see or access it. Removing the app, or clearing its data, deletes it.
Bloom includes an optional leaderboard so you can compare scores with other players. It is entirely opt-in: your scores stay on your device, and nothing is sent anywhere unless you tap "Share."
If you choose to share, the game sends three things:
Your nickname and stats are then shown publicly on the leaderboard to other players — this is the only information that's ever shown publicly. It is stored for us by Supabase, our database provider (see Third-party services below), and used only to run the leaderboard. To remove your entry at any time, email us at hello@bloompuzzle.com and we will delete it.
To understand how Bloom is played and make it better — which features get used, where players get stuck — we collect anonymous, aggregated usage data (for example: a game ended with a certain score, a tab was opened, a world was unlocked). This is tied only to the random on-device ID described above, never to your name, email, or anything that identifies you. This analytics data is not used for advertising, is never sold or shared with data brokers, and is not combined with data from other apps to track you across the internet.
We use PostHog as our analytics provider, which processes this data on our behalf. You can turn analytics off at any time with the Anonymous analytics switch in the app's Settings — when it's off, nothing is sent.
Bloom never interrupts play with ads, and you never have to watch one. On iOS, Bloom may offer an optional short ad in two places, always next to the usual token option: when a round ends and no moves are left, as one way to rescue the round (watch it to the end and the board clears), and on the Trail, as a free way to skip a level you're stuck on. Nothing plays unless you tap for it, and closing an ad early simply leaves things as they were. The website and Android versions show no ads.
The ads are provided by Google AdMob. So that an ad is ready when you want one, the app asks Google for one in the background shortly after you open Bloom. When it does — and when an ad is shown — Google's software receives the information it needs to deliver and measure ads: your IP address (which indicates your approximate location), device and app details (such as device model and iOS version), an identifier Google uses for ads, and information about the ads you're shown and how you interact with them, plus diagnostic data. We never show Apple's tracking-permission prompt, so Google never receives Apple's advertising identifier. Google processes this information under its own policies; see how Google uses information from apps that use its services.
In the European Economic Area, the UK and Switzerland, Bloom offers no ads: the app only checks with Google whether you're in one of those regions, and no ad is ever requested there. Where Google's privacy rules give you a choice about ads, you'll find it under Settings → Ad privacy choices. Bloom uses no ad cookies on the web.
To find out whether the ads we run on TikTok actually bring people to Bloom, the iOS app includes TikTok's measurement kit. It sends TikTok a small number of anonymous signals — that the app was installed, that it was opened, and that a purchase was made — together with a random ID and standard device details (device model, iOS version, IP address). We never show Apple's tracking-permission prompt and never share Apple's advertising identifier, and every signal tells TikTok that you have not consented to tracking. We do not use this to track you across other apps or websites, and it is never combined with anything that identifies you. Install attribution itself is handled by Apple's privacy-preserving SKAdNetwork, which reports only that an ad led to an install — not who. The same Anonymous analytics switch in Settings turns these signals off immediately; turning it back on takes effect the next time you open Bloom.
We measure our Meta (Facebook and Instagram) ads the same way, with two differences worth stating plainly. There is no Meta code in the app — instead, the first time you open a newly installed copy of Bloom on iOS, the app tells our own server that an install happened, and our server passes that single signal to Meta. And we do not send Meta your IP address. What Meta receives is: that an install occurred, a scrambled (one-way hashed) form of the random on-device ID described above, and standard device details (device model, iOS version, language, time zone, screen size). As with TikTok, we never show Apple's tracking-permission prompt, never share Apple's advertising identifier, never share the identifier Apple gives apps from the same developer, and every signal tells Meta that you have not consented to tracking. It is sent once per install and never again, is not used to track you across other apps or websites, and is never combined with anything that identifies you. The same Anonymous analytics switch turns it off — when it's off, nothing is sent.
Bloom can send you notifications — for example, a reminder that a new Daily Puzzle is ready, or the occasional update. This is entirely opt-in: notifications stay off until you turn them on, and you can turn them back off anytime in the app's Settings or your device settings.
If you turn them on, your device creates a push token — a random delivery address for your device (on iOS, an Apple push token; on the web or Android, a browser push subscription). We store that token, tied only to the random on-device ID described above, so we can send you notifications. It isn't your name, email, or location, and on its own it identifies no one. The token is stored for us by Supabase, and notifications are delivered through your platform's push service (Apple's Push Notification service on iOS; your browser's push service on the web and Android). We never use it for advertising or tracking, and never sell or share it for anyone else's purposes. Turning notifications off stops delivery and lets us remove the token.
If you use Move to a new device in Settings, Bloom briefly uploads a snapshot of your on-device save (your game progress and the random on-device ID — no name, email, or other personal data) and stores it under a short one-time code. The snapshot is held (via Supabase) for up to 15 minutes, can be claimed once, and is deleted the moment it's claimed or when it expires. It is used only to copy your save to your other device, never for anything else.
We never sell or rent your information, and we don't hand it to third parties for their own purposes. Anything that leaves your device does so by your own choice: if you post to the leaderboard, the nickname and game stats you submit are shown publicly to other players; if you turn on notifications, your push token is sent to your platform's push service only to deliver them. Our providers store and process this data on our behalf and use it for nothing else.
Bloom is suitable for all ages and does not knowingly gather personal data from children under 13 (or the equivalent age in your region). The optional leaderboard asks only for a made-up nickname — please don't enter a real name or any personal details, and parents may wish to help younger players choose one.
You're always in control. From the app's Settings you can turn off Notifications and Anonymous analytics (which also stops the iOS ad-measurement signals) anytime, clear all on-device data with Reset everything, or delete Bloom from your device. Note that clearing local data doesn't remove any entry you've shared to the leaderboard — to remove that, email us at hello@bloompuzzle.com and we'll delete it.
If Bloom changes in a way that affects this policy — for example, if a future version adds online features — we'll update this page and revise the date above. Continued use of the app after an update means you accept the revised policy.
Questions about this policy? Reach us at hello@bloompuzzle.com.