Privacy Policy

To run your account we store:

• Your email address and an encrypted password (we never see your password itself).
• Your display name and preferences, such as theme, currency and payoff strategy.
• Whether you joined with an invite code, your free-trial dates and your subscription status.
• Basic sign-in records, such as when your session started, so we can sign you out after 3 days.

Bloom Journey does not connect to your bank. Everything in the app is information you type in yourself, including balances, income, bills, transactions, debts, BNPL loans, promotional balances, savings, retirement balances, goals, trips and travel expenses, plus any files you attach to a trip.

We never ask for bank logins, full card numbers or Social Security numbers, and you should never enter them. This information is stored privately and is only visible to you when signed in.

When you scan a receipt:

• Your photo is shrunk and held briefly in private storage while it is read.
• The image is sent to OpenAI, which reads the store name, date, total and currency and sends those details back. Nothing else about you or your account is sent with it.
• The photo is deleted as soon as the details are extracted and you save or cancel. Only the details you confirm are kept.

Under OpenAI's API policies, images sent this way are not used to train their models. OpenAI may keep them for up to 30 days to monitor for abuse before deleting them.

• Hosting and database: our hosting provider stores your account and data securely.
• Payments: Paddle processes subscription payments. Your card details go straight to Paddle. We never see or store them, and only receive your subscription status and billing dates.
• Email: our email provider sends account emails, such as confirmations and password resets.
• OpenAI: for receipt scanning, as described above, and for reading travel booking confirmations you import. The email text, PDF or screenshot is sent to OpenAI only to pull out the booking details (type, dates, address, cost and confirmation number). The original is kept privately with your trip so you can review it.

We don't use advertising trackers, tracking pixels or third-party analytics tools. Our hosting provider keeps basic, standard traffic statistics (such as page visits and error reports) to keep the site running. These are not used to build a profile of you.

• Cash Flow transactions and balance history are kept for a rolling 12 months, and older entries are erased automatically.
• Paid-off BNPL loans and goals are archived, then permanently erased after 12 months.
• Receipt photos are erased right after scanning.
• Trip files, including imported booking confirmations, are erased 12 months after the trip ends. Unreviewed imports are erased after 12 months.
• Everything else stays until you delete it or delete your account.
• Paddle may keep billing records for as long as tax and accounting laws require.

You can download a copy of your data at any time from Settings → Your data → Export my data.

To delete your account, go to Settings → Delete my account and confirm. Your account is then locked for a 7-day grace period. During that time you can still export your data or change your mind and keep your account. After 7 days we permanently erase your login, profile, budgets, transactions, debts, trips, attachments, goals and all related data, and cancel any active subscription. Once that happens, it can't be undone.

We do not sell, rent or trade your personal or financial information, and we don't share it for advertising. We only share it with the services listed above, and only as much as they need to run Bloom.

Your data is protected so only your signed-in account can access it. Connections are encrypted, and you are signed out automatically after 3 days. No system is perfectly secure, so please use a strong, unique password.

If we change this policy, we'll update the date below. Questions? Email kgraves@heartofbloom.com.