Privacy Policy

Last updated: October 9, 2026

Summary

Rebloom keeps what you write on your iPhone. We do not run user accounts, ads, analytics tools or tracking. Information leaves your device through the app only to manage your subscription, when you choose to use the optional AI coach, and when you choose to email us.

• Your streak, check-ins, journal entries, letters and reasons stay on your device. We cannot see them.
• There is no account to create and no sign-in.
• We do not show ads, use analytics or crash-reporting SDKs, or track you across other companies' apps and websites.
• Subscriptions are processed by Apple and verified by RevenueCat using a random, anonymous identifier.
• If you choose to use the optional AI coach, the messages you write in the coach chat are sent through our server to an AI provider to generate a reply. They are not stored by us and are not used to train AI models.
• You can export or permanently delete your data inside the app at any time.

Who we are

Rebloom is developed by Ibrahim Ballibaba, an independent developer based in Türkiye who publishes apps under the name Bilberry Lab ("we", "us", "our").

This policy covers the Rebloom app for iPhone and its widgets. For the limited personal data described below, we act as the data controller under laws such as the EU and UK GDPR and Türkiye's Personal Data Protection Law (KVKK).

Questions or requests: support@bilberrylab.com.

Information stored only on your device

Everything you enter in Rebloom, except the messages you choose to send to the AI coach, is stored locally on your iPhone and is never sent to us. This includes:

• the date of your last contact, your streak history and any resets
• mood check-ins
• journal entries and unsent letters
• your reasons
• milestones, reminder settings and the answers and preferences you choose during setup, such as the time of day that's hardest for you, your goal and the date you made your commitment
• your AI coach conversation, which is kept only on your device (the messages you send are also processed to generate replies, as described in "AI coach" below)

This data is kept in the app's private storage and in a shared container that only Rebloom's own widgets can read. It is protected by iOS Data Protection. We do not operate servers that receive it, so we cannot read, access or recover it.

Depending on your device settings, iOS may include app data in your iCloud or computer backups. Those backups are handled by Apple under Apple's Privacy Policy.

If you delete the app, its data is removed from your device.

Information we collect: subscriptions

Apart from the optional AI coach described below, the only data the app sends off your device is what is needed to manage your subscription.

Payments are processed entirely by Apple. We never receive your name, Apple ID, email address or payment card details.

To check whether you have premium access, start a free trial, restore purchases and prevent fraud, Rebloom uses RevenueCat, Inc., a subscription management service. When the app checks or changes your subscription, RevenueCat receives:

• a random, anonymous identifier created by the app, which is not linked to your name, email or Apple ID
• App Store transaction information, such as the product you bought, purchase and expiration dates, transaction identifiers, and the storefront country and currency
• basic technical information needed to handle the request, such as the app version, iOS version and device language settings

Like any service on the internet, RevenueCat's servers can see the IP address a request comes from. We do not send RevenueCat your name, email, advertising identifier or anything you write in the app.

We use this information only to provide your subscription and to see aggregate subscription figures, such as how many people subscribe. It is not used for advertising or tracking. We process it because it is necessary to provide the subscription you purchased.

If you use the AI coach, our server also asks RevenueCat whether your anonymous identifier has an active subscription, so it can confirm you have access to the coach.

RevenueCat's practices are described in the RevenueCat Privacy Policy.

AI coach (optional)

The AI coach is an optional premium feature. Before you use it for the first time, the app asks for your explicit consent. If you don't agree, nothing is sent.

When you send a message, the app sends the following to our server, which runs on Cloudflare Workers:

• the most recent messages of your coach conversation (each of your messages can be up to 1,000 characters)
• the app's language
• your anonymous RevenueCat identifier, used only to check your subscription and apply the daily message limit

Like any service on the internet, Cloudflare can see the IP address a request comes from.

Before anything is sent to an AI provider, our server checks your latest message against a list of crisis phrases. If it matches, the message is not sent to the AI provider and the app shows crisis resources instead.

Our server then forwards the conversation, together with our own instructions for the coach, to OpenRouter, Inc., which routes it to an AI model provider. We do not send your identifier, IP address or any other detail about you to OpenRouter. We only allow providers that OpenRouter lists under its Zero Data Retention policy and that do not collect data for training. These providers process the conversation to generate a reply and do not keep it afterwards.

Our server does not store or log your messages; it records only numeric metrics, such as response time and status codes. To check your subscription quickly, it keeps the result for up to 10 minutes (60 seconds if you are not subscribed) under a hashed (SHA-256) version of your identifier. To apply the daily message limit, it keeps a counter under the same hashed identifier that contains only the date and the number of messages, and deletes it at the end of each day (UTC).

Coach messages may include sensitive information, such as how you are feeling. We process them only with your explicit consent (GDPR Article 9(2)(a) and Article 6 of KVKK). You can withdraw your consent at any time in Settings › AI Coach. Withdrawing also deletes the conversation on your device and stops any further messages from being sent.

The coach's replies are generated automatically and can be inaccurate. The coach is not a therapist; see "Not a substitute for professional care" below.

What we do not collect

Rebloom does not collect:

• your name, email address or phone number (unless you email us)
• your contacts, photos, location or health data
• your device's advertising identifier
• analytics, usage tracking or crash reports through third-party SDKs

The app contains no ads. We do not track you across other companies' apps or websites, and we do not sell or share your personal information for advertising.

Reminders, widgets, export and links

• Reminders are local notifications scheduled on your device. No notification content is sent to us or to any server. You can turn them off in the app or in iOS Settings.
• Widgets read your day count from Rebloom's shared container on your device. Lock Screen widgets are visible to anyone who sees your screen, so they show only a number and neutral wording. You decide whether to add them.
• Export creates a file of your data on your device. Where it goes next is your choice through the iOS share sheet; once shared, the destination's own policies apply.
• External links, such as crisis helplines, the Terms of Use and help resources, open in Safari or your phone app. Those services have their own privacy policies.

Support emails and our website

If you email support@bilberrylab.com, we receive your email address and whatever you include in your message. When you tap Contact support in the app, the email is pre-filled with the app version to help us troubleshoot; you can remove it before sending. Messages are forwarded by Cloudflare's email routing service to a mailbox hosted by Google. We use them only to reply to you and keep them only as long as needed to help you. You can ask us to delete them at any time.

Our website, bilberrylab.com, is delivered through Cloudflare, which may process standard technical data such as IP addresses to deliver and secure the site. We do not use the website to run advertising or analytics cookies, and its fonts are served from our own domain. If you switch between the light and dark theme, your choice is saved only in your browser's local storage on your device and is never sent to us.

Service providers and international transfers

We work with a small number of providers. Each processes data only for the purpose listed and under its own privacy commitments, and we only use providers that offer the same or equal protection of user data as described in this policy.

These providers may process data in the United States and other countries. Where required, such transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.

If you have chosen in iOS Settings to share analytics with app developers, Apple may give us aggregated usage and crash statistics. You can turn this off at any time in Settings › Privacy & Security › Analytics & Improvements.

Retention, deletion and your rights

Data on your device stays until you delete it. Settings › Delete all data permanently erases it from the app and its widgets, and deleting the app removes it from your device. Deleting your data does not cancel a subscription; you can manage or cancel subscriptions in your Apple ID settings.

Subscription records held by RevenueCat are kept as long as needed to provide your subscription and to meet legal and accounting obligations. Because the identifier is random and not linked to you, we usually cannot tell which record is yours. To request deletion, email us; we may ask for your App Store order ID so we can locate the record.

AI coach. Your conversation is stored only on your device. It is deleted when you choose Delete conversation or withdraw your consent in Settings › AI Coach, or when you use Delete all data. Our server does not keep your messages. The subscription check result is kept for up to 10 minutes, and the daily message counter is deleted at the end of each day (UTC).

Support emails are deleted when they are no longer needed, or sooner on request.

Depending on where you live, including under the GDPR, UK GDPR, KVKK and California privacy law, you may have the right to:

• access the personal data we hold about you
• correct or delete it
• restrict or object to its processing
• receive a copy in a portable format
• withdraw any consent you have given
• lodge a complaint with your local data protection authority

Most of your data is on your device, so you can view, export and delete it yourself in the app. For anything else, email support@bilberrylab.com and we will respond within 30 days. We do not sell or share personal information as those terms are defined under California law.

Children

Rebloom is intended for people aged 16 and over, in line with its App Store age rating, and is not intended for anyone under 16 or under the higher minimum age that applies in your country. We do not knowingly collect personal data from children. If you believe a child has contacted us, email us and we will delete the message.

Security

Your in-app data is protected by iOS Data Protection, and connections to RevenueCat, our AI coach server and OpenRouter use encrypted HTTPS. No method of storage or transmission is completely secure, but we keep the amount of data that leaves your device to the minimum needed.

Not a substitute for professional care

Rebloom is a self-help tool, not medical or psychological treatment. If you are in crisis, contact your local emergency services or a crisis helpline. The AI coach is an automated system. Its replies can be inaccurate and are not medical, psychological or other professional advice.

Changes to this policy

We will update this policy when our practices change and revise the date at the top. If we add a feature that processes your data outside your device, we will describe it here before it is released, and using it will be your choice.

Contact

Ibrahim Ballibaba (Bilberry Lab)
support@bilberrylab.com