Here's exactly what we collect, what we don't, and why.
Last updated: 11 October 2026 · Effective: 3 October 2026
Short version: BloomBoard is an app for Mac and Windows, with an iPhone app on the way. Used on its own without an account, your tasks, boards, notes and settings stay on your device. When you sign in, your data is stored securely in the cloud so it syncs across your devices and, if you work in a team, with your teammates. We do not sell your data, show ads, or track you across other apps. Email, calendar and AI features only run when you turn them on.
BloomBoard is made by MyBloomBoard ("we", "us", "our"), an independent software company based in Dubai, United Arab Emirates. BloomBoard is a productivity app for Mac and Windows, with an iPhone app on the way. Designed for professionals and growing teams, BloomBoard brings task management, goal tracking, AI assistance, and connected productivity tools into a single focused workspace. You can contact us at support@mybloomboard.app.
This Privacy Policy explains how we handle information when you use the BloomBoard desktop app (Mac and Windows), the BloomBoard iPhone app once it is released, and the website at mybloomboard.app.
If you use BloomBoard without signing in, all of your app data is stored locally on your computer. This includes:
This data stays on your device unless you sign in (see section 6) or turn on a feature that needs it.
BloomBoard offers an optional Google integration. If you choose to connect your Google account:
What we access: Your Gmail inbox and email content (to show them in the app), the ability to archive, delete or mark emails read or unread (only when you do that in the app), the ability to send emails on your behalf (only when you press send), and your Google Calendar events (read-only) to display upcoming meetings inside the app.
What we do NOT do: We never store your emails or calendar events on our servers. We never read your data in the background. We never use it for advertising or profiling, and we never sell it.
Tasks made from an email: When you turn an email into a task, the task you create (its title, a short summary, the email's subject and sender) is saved with your other tasks, and synced to your account if you are signed in. You can edit or delete it like any task. We do not store the email itself.
When you use AI on an email: If you ask Bloom AI to write a reply or turn an email into a task, the text of that email is sent through our server to our AI provider, Anthropic, only to produce that result, and only when you ask. We do not keep it, and Anthropic does not use it to train its models.
Where tokens are stored: OAuth access tokens are stored locally on your device only. They are never uploaded to our servers.
The Google integration uses OAuth 2.0. The scopes we request are:
You can disconnect your Google account at any time from Settings → Connected Apps inside the app. This immediately revokes our access and deletes your stored tokens.
BloomBoard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalised AI or machine learning models.
BloomBoard can connect to your Microsoft account for Outlook email and Outlook Calendar. This is optional. When you choose to connect it:
You can disconnect your Microsoft account at any time from Settings → Connected Apps inside the app.
BloomBoard includes AI-powered features (Bloom AI, email writing, daily planning, meeting notes) powered by two AI services:
What is sent to the AI. To answer a request, the app sends the text that request needs. Depending on the feature, that is your message and earlier messages in that conversation; relevant context from your workspace such as tasks, boards, events and team member names; in team chat, recent messages in that chat; the email you are replying to or turning into a task; or the notes you paste. Bloom AI can also search the web, which sends a search query.
We do not store the content of your AI conversations or voice inputs on our servers. AI features are only triggered when you explicitly open them and submit a request.
Signing in is optional for personal use and required for syncing between devices and for team features. Accounts and synced data are hosted with Supabase. When you create an account or sign in:
Sync. A copy of your app data (tasks, boards, notes, settings) is stored with your account so it is the same on each of your devices.
Team workspaces. If you join a team, the following are stored so your teammates can see them: your profile (name, email, position, department, status and avatar), shared boards and cards, tasks assigned between members, chat messages and the photos, files and voice notes you send in chat, reactions and read receipts, and leave you choose to share. Your online status and typing indicator are shared live while the app is open and are not stored.
Calls. Audio and video calls are carried by LiveKit. We do not record or store call audio or video. We keep a record of each call (who took part, when, and for how long) and connection-quality statistics so we can fix call problems.
Files. Photos, files and voice notes sent in chat are stored with Cloudflare or Supabase Storage. Anyone who has the direct link to a chat photo can open it.
Notifications. On iPhone, we store a device token so Apple Push Notification service can deliver message and call notifications. It is removed when you sign out.
You can delete your own messages at any time (they are removed for everyone), leave a team, or ask us to delete your account and its data by emailing support@mybloomboard.app.
Payments are handled by Polar (polar.sh), our merchant of record. When you buy a plan or start a trial at checkout, you give your email address and payment details to Polar. Polar processes the payment, billing and sales tax. We do not see or store your full card details. We receive your email address, the plan you chose and the status of your subscription so we can unlock your plan.
You can also start a free trial on our website (7 days for Bloom, 14 days for Team) with just your email address. When you sign in to the BloomBoard app with the same email, the app checks your plan with our server and unlocks it. No personal browsing or app usage data is sent during this check.
If you bought BloomBoard before accounts were introduced, your license key still works. The app sends the key to our licensing server to check that it is valid and records how many devices it is activated on.
Our website at mybloomboard.app does not use advertising trackers, third-party cookies, or fingerprinting.
The live demo on our website records how it is used so we can improve it. For each demo visit we record: your country (from your connection, stored as a country code only), the site or campaign that referred you, your device type, how long you spent in the demo, which features you opened, what you typed into the demo's search and Bloom assistant, whether you clicked a download button, and your answer if you choose to tell us what brought you to the demo. The demo also records anonymous reactions if you use the reaction buttons.
Each demo visit uses a random ID that lasts only for that browser tab. We do not store names, email addresses, IP addresses or cookies with this data, and we do not use it for advertising. Please don't type personal information into the demo. The BloomBoard app itself does not include ad trackers or third-party analytics tools.
To be explicit, we do not collect or have access to:
We do not sell, trade, or rent your personal data to any third party. We do not share your data with advertisers. The only third-party services that may receive data are:
BloomBoard is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
You have the right to:
To exercise any of these rights, contact us at support@mybloomboard.app.
We take reasonable measures to protect any data that passes through our systems. OAuth tokens are stored locally and encrypted by the operating system's secure storage. We use HTTPS for all API communications.
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
Questions about this Privacy Policy? Reach us at:
MyBloomBoard
Dubai, United Arab Emirates
support@mybloomboard.app
mybloomboard.app
We reply within two business days.