Privacy Policy

Bloomy is a family recipe box. This page explains what information the app and website collect, why, and how you can control or remove it. Bloomy is a single-developer app — there is no ad network, no analytics-for-sale, and no data broker involved.

What Bloomy stores

In the iPhone and iPad app, recipes, weekly meal plans, shopping lists, and the tags, notes, and photos you attach to them are stored on your device. If you sign in, that same data is synced to a private database record tied to your account so it stays available across your devices and can be shared with a family or circle you join. The website has no on-device library: it reads and writes your account’s database record directly, so you need to be signed in to use it.

In the iOS app, without a Bloomy sign-in, recipes remain usable locally. On Apple devices with iCloud enabled, the local library can also sync through Apple CloudKit. Cloud AI features send the content needed for the requested task to the providers described below.

Account & sign-in

Bloomy uses Sign in with Apple or Sign in with Google. Neither method shares your password with Bloomy — Apple or Google authenticate you and pass Bloomy your name and the email address associated with your account (or a private relay address, if you chose to hide your email with Apple). That identity is used only to create your account and to identify you to family members you share recipes with.

Family & circle sharing

Joining a household or recipe circle shares your recipe library with the other members of that group, and shows your name next to what you’ve shared. Personal notes, favorites, and last-cooked history remain private to your account. Your personal shopping lists and weekly meal plans are never shared through recipe sharing — those stay private to your own household unless you separately invite someone into it.

Connected assistants (Claude, ChatGPT)

You can connect Bloomy to an AI assistant such as Claude or ChatGPT. You start this yourself from the assistant, sign in to Bloomy, and approve the connection on a Bloomy consent screen. From then on, when you ask the assistant about your recipes or meals, it can read your recipes (including recipes shared with you by your household and circles), your weekly meal plan, your shopping list, your household’s name and member display names, and your saved cooking preferences — and it can save recipes to your Try list, plan dinners, and add or check off shopping items. Because the meal plan and shopping list are shared within a household, an assistant connected by one member can change the plan and list everyone in that household sees, exactly as that member could in the app.

Whatever the assistant reads is sent to the assistant’s provider (Anthropic for Claude, OpenAI for ChatGPT) under their privacy terms, not ours; Bloomy does not send anything to them on its own. Recipe cards can include temporary links to recipe photos. Your own private recipe notes and saved cooking preferences are included when requested. Bloomy does not include invite codes, other members’ private notes, or AI usage in its tools. Identity scopes approved during connection can include your account email. Bloomy keeps a log of which tool was called and when for abuse prevention and debugging, without recipe or list contents, for up to 30 days.

To disconnect, remove the connector in the assistant’s settings; you can also revoke it from Bloomy in Settings → Connected apps. Revoking stops all further access within an hour.

Cookies & local storage (website)

The Bloomy website uses a small number of cookies and browser storage, all needed for it to work. Supabase sets session cookies that keep you signed in. A tz cookie stores your browser’s time zone so “today” on the meal plan and shopping pages is your day rather than the server’s. Your light or dark appearance choice is kept in your browser’s local storage. Bloomy doesn’t use advertising or cross-site tracking cookies.

Hosting & request logs

The website is hosted by Vercel. Like any web host, Vercel processes your IP address and standard request details (the page requested, browser type, and time) to deliver the site and keep it secure, and may keep those request logs for a limited time.

Subscriptions

Bloomy Plus is billed and processed entirely by Apple through the App Store. Bloomy never receives your payment details — Apple shares only whether a subscription is active, which product you bought, and when it renews or expires.

AI features

Some features use an AI model to do their work: importing a recipe from a link, suggesting tags, adapting a recipe, laying out a cook chart, and answering questions about a recipe. When you use one of those, the text it needs — the recipe, or the page you asked Bloomy to import — is sent to a model provider, which returns a result. OpenAI handles individual and batch tag suggestions, generated recipe images, ingredient and method phase organization (including during imports), and shopping list tidying, which sends the names and quantities on your list. Anthropic handles recipe imports and import cleanup, adaptations, “Out of this?” substitutions, scaling notes, weekly planning, near-duplicate checks, cook charts, tag-list cleanup, and recipe questions. Some tasks may use a fallback model from the other named provider.

Cloud processing can run as part of an import or when you request a batch operation; it is not limited to one recipe at a time. Recipe-photo scanning reads text on your device; that extracted text may then be sent for recipe processing. Generated images use recipe text sent to OpenAI. Photos saved with recipes may sync through iCloud and, when signed in, Bloomy’s storage. Bloomy does not use your recipes to train models; cloud requests use the providers’ API services.

Fridge photos. “Cook from what I have” sends the photo you choose to Anthropic, which reads the ingredients in it. The photo is sent for that one request only. Bloomy does not store it, and it is not kept in our logs. It is shrunk on your device first, and the matching of ingredients to your recipes happens on your device.

Voice. In the iOS app, spoken cook-mode commands are recognised on your device, and nothing you say is sent anywhere. Only a question you ask aloud is sent as text, like any other recipe question. The website has no voice features.

Household preferences. The notes and weekly protein targets you save in Settings are stored with your account and shared with everyone in your household, who can read and change them. When you use Adapt, “Out of this?”, recipe questions or Plan my week, Bloomy adds them to the request as context for the model. Planning your week also sends the titles, tags, cooking times and last-cooked dates of up to 80 recipes from your box.

If you would rather not involve Bloomy in this at all, Settings lets you use your own AI account — Anthropic, OpenAI, Google Gemini, OpenRouter, or any OpenAI-compatible endpoint you choose. The key is stored only on your device or in your browser, never on Bloomy’s servers, and those requests go directly from your device to the provider under your account. Generating recipe pictures, and reading fridge photos with a model that can’t see images, still use Bloomy’s cloud service.

Deleting your data

In the iOS app, deleted recipes go to Recently Deleted before being permanently removed, so you can undo a mistake; deleting a recipe on the website removes it from your account right away. You can permanently delete your account from Settings → Your data. Deletion removes your sign-in, profile and private notes. Recipes and their photos already shared with a circle or household remain available to that group without your account attached. Recipes that nobody else shares are deleted. Shopping lists and meal plans stay with a remaining household member; they are never retained for circles.

What Bloomy doesn’t do

Bloomy doesn’t sell or rent your data, doesn’t show ads, and doesn’t share your recipes, meal plans, or account information with third parties except the providers needed to run the app: Supabase for the database, Vercel for hosting the website, Apple and Google for sign-in, Apple for iCloud sync and subscriptions, and the AI providers described above — and that last one only for the text a feature you asked for needs.

Children

Bloomy is not directed at children and does not knowingly collect information from children under 13.

Changes to this policy

If this policy changes, the effective date at the top of this page will be updated.

Contact

Questions about this policy or your data: support@bloomyrecipes.app