Bloom Speech iOS App Privacy Policy

Practice information stored on your device

• Recordings, their duration and date, and practice counts are stored in the app space on your iPhone.
• Your selected practice question and the keywords, key sentences, and explanation sentences you write are stored on the same device.
• If you request AI feedback, the resulting transcript and feedback are stored on the same device.
• Your full practice history is not backed up to our server or synced between devices. Transfers and temporary storage needed for AI requests are described below. The practice folder managed by the app is excluded from iCloud device backups.

Sign in with Apple and your account

Recording and local practice work without signing in. Sign in with Apple is used when you request AI feedback or connect an account. Supabase Auth processes the authentication token and account information supplied by Apple, including your email address or Apple private relay address, to manage your account and login session. The app does not receive your Apple account password.

The Bloom Speech server links your Supabase account ID to separately generated usage and RevenueCat customer IDs. These IDs let us check subscription access and free or Plus AI usage for your account. Although randomly generated, they can be linked to your account on our server and are not treated as anonymous information. Your login session is stored in the device's Keychain.

Subscriptions and usage

To load plans, make and restore purchases, and check access, the app uses a randomly generated installation user ID while signed out and an account-linked customer ID after sign-in. This ID and App Store purchase and subscription information are sent to RevenueCat. When you sign in, existing purchase information may be checked again to connect a previous subscription to your account. Apple processes payments. Bloom Speech does not receive payment card details. Your audio recordings and speaking notes are not sent to RevenueCat.

When a RevenueCat paywall is shown, display, close, and button interaction events may also be sent to RevenueCat to measure and improve the subscription flow. For subscription operations, RevenueCat may send customer IDs, products, purchase, trial, renewal, cancellation and related events, and amount information to our private Slack channel. These notifications do not include recordings or transcripts.

The app user identifier and the device's successful AI usage record are stored separately in Keychain. The server also manages authoritative AI usage for signed-in accounts. Deleting practice history does not reset free or subscription usage, and this information may remain on your device after removing the app. You can still view and delete saved practices after cancelling a subscription.

Purposes and grounds for processing

Authentication, purchase verification and restoration, access, and usage management support the service and subscription you request. Sending audio and questions to an external AI service requires your request and permission for each recording. Local recording and playback remain available if you decline. Security, troubleshooting, and duplicate-charge prevention records are limited to operating the service safely. Where laws such as the GDPR require a legal basis, we rely on service-contract performance, permission for AI transfers, legitimate interests in security and operations, or applicable legal obligations. You can contact us to object to legitimate-interest processing.

When you request AI feedback

Tapping Get AI feedback or Analyze again opens a separate AI data sharing consent screen for that recording. It identifies the data, recipient, purpose, and retention. Transfer starts only after you tap Agree and send to Google. Choosing Do not send, closing the screen, or dismissing it sends no audio; local recording and playback remain available. Permission applies only to that transfer; retries ask again. The entire audio recording, its duration, and the selected practice question go to a Bloom Speech feedback server, along with the selected language and training task information. That server sends the audio and practice context to Google Gemini (Gemini Enterprise Agent Platform), provided by Google LLC, to generate a transcript and speaking feedback. Audio may contain personal information you speak. Your written keywords and sentences, name, email, and account ID are not included in Google AI requests. The result returns to the app and is saved on your device.

Bloom Speech requires external providers processing personal information to provide the same or an equal level of protection as described in this policy. Google Cloud's Data Processing Addendumprovides for service-purpose processing, encryption, restricted access, confidentiality, deletion, and assistance with privacy rights. Google's Gemini Enterprise Agent Platform does not use customer data to train or fine-tune AI models without prior permission or instruction. Bloom Speech does not authorize model training with these recordings. The retention exceptions below still apply separately.

The Bloom Speech server does not save audio files in a database or file store. It temporarily stores an encrypted copy of the transcript and feedback in the Supabase database to handle repeated requests and interrupted connections. This copy becomes eligible for deletion 24 hours after generation and is removed by a cleanup task scheduled every five minutes. Active requests or delayed cleanup can postpone physical deletion. Google's applicable Gemini Enterprise Agent Platform terms and privacy documents govern its processing and retention of the data sent to it. Default caching and safety monitoring may retain some request information, so we do not promise immediate erasure or zero retention by the AI provider. See Google's retention guidance.

Technical logs and retention

Account links and cumulative free and subscription usage remain on the server while your account exists. Daily analysis attempt counts are kept for about eight days. Request IDs, statuses, timestamps, and a hash of request content are kept for 30 days after completion to prevent duplicate processing and usage quota deductions, then cleaned up. After the result copy is deleted, these 30-day records do not contain transcript or feedback content.

On a hosted server, technical details such as request time, response status, and IP address may appear in Google Cloud and authentication service operations logs for service operation and troubleshooting. The Bloom Speech application does not log audio content or transcripts. Those logs are deleted under the relevant provider settings. Our Google Cloud default operations-log bucket currently retains logs for 30 days; the required cloud audit-log bucket retains logs for 400 days. These are not the retention periods for Gemini requests or Supabase auth logs.

Recordings, your written speaking outline, and feedback remain on your device until you delete individual practices, delete all practices in Settings, or remove the app. Deleting a practice on your device may not immediately delete a temporary server result, an earlier Gemini request, operations logs, or subscription notifications. The server retention periods above and each service's retention settings apply.

Security measures

Connections between the app, production server, and database are encrypted. Temporary server transcripts and feedback are encrypted with AES-256-GCM. Server APIs check login tokens and server-verified account and subscription access. Access to data and server secrets is limited to operational needs. No system eliminates every risk; avoid recording or sending sensitive information unnecessarily.

Account deletion and subscription cancellation

In Settings, choose Delete Account and confirm your identity with Apple. Deletion revokes the Apple sign-in authorization and removes the RevenueCat customer linked to your current account and your Supabase account. Deleting the Supabase account also deletes the Bloom Speech server's account links, usage records, and temporary transcript and feedback copies. If a service failure prevents completion, the app explains that you can retry.

Account deletion does not erase practice history on this iPhone or automatically cancel an Apple subscription. Use Delete All Practices to erase device records and Apple's subscription management to cancel your plan. Earlier Apple purchase records, operations logs, and Slack subscription notifications may remain separately with those services. Contact us below for related deletion requests.

External services and advertising

We use Supabase for authentication and the database, Apple and RevenueCat for subscriptions, Google Cloud and Gemini for server operation and AI processing, and Slack for subscription operations notifications. Information needed for the purposes described above is processed outside your device and may be processed on servers outside your country. The app does not show advertising, collect the advertising identifier (IDFA), or track you across other companies' apps or websites for advertising. It does not access your contacts or device location.

• Supabase processes account, email, authentication, usage, and temporary result data. Our primary database and Auth service are in the eastern United States. Data processing agreement
• Google Cloud and Gemini handle server requests, technical logs, and requested audio analysis. Our feedback server is in Virginia, United States. Gemini and provider operations or support follow their own location and retention terms; processing is not guaranteed to remain in that server region. Data processing terms
• RevenueCat processes customer IDs, subscription and purchase data, and paywall interactions through US-based services. We do not send audio, transcripts, or your written notes. Data processing agreement and subprocessors
• Slack processes RevenueCat subscription notifications for our operations. These may contain IDs, products, and amounts. Storage and processing locations follow workspace and Slack settings. Privacy information
• Apple handles your Apple account authentication, payments, refunds, and subscriptions under its own terms. Privacy information

Required data is sent over encrypted connections when you use sign-in, purchases, AI requests, and related features. Retention follows the account, result, and technical record distinctions above and provider terms. You can decline AI requests or account connection, or contact us to request processing restrictions or account deletion. This may limit sign-in, AI, or subscription verification, while local practice remains available.

Your choices

• You can change microphone permission in iPhone Settings.
• Recording, playback, and repeated practice work without requesting AI feedback.
• You can delete individual practices or all practice history in the app.
• You can sign out or delete your account after identity confirmation in Settings. Contact us below to request access to, correction of, or deletion of account data.

Privacy rights and requests

Depending on applicable law, you can request access, correction, deletion, restriction, objection, withdrawal of consent, or data portability. Email us; after minimal necessary identity checks, we handle requests under the applicable legal deadlines and conditions. We do not ask for Apple passwords or verification codes. Withdrawal does not affect earlier lawful processing; deletion of previously transferred data follows the retention explanation and legal preservation duties. You may complain to the relevant data protection authority. AI feedback is for personal practice and is not used to make legal or similarly significant employment, academic, or medical decisions.

Children and guardians

The app is not designed specifically for children. Contact us if you believe a child's information was provided without parental permission required by law. We handle verification, deletion, and other necessary action under applicable law. The App Store content age rating does not replace any required parental permission for data processing.

Contact and controller

Send privacy questions or requests to doublejstudio21@gmail.com.

• Business name 더블제이스튜디오
• Representative · Privacy officer 이우진
• Business registration no. 116-30-02197
• Address 서울특별시 강동구 성내로6가길 118, 501호
• Contact doublejstudio21@gmail.com · 010-4022-3794

Changes

We will update the date and contents of this page if our processing changes.