Privacy Policy — Bloow

Last updated: 5 November 2026

This policy describes how Bloow ("the App", "we") collects, uses, shares and retains your data when you use the Bloow iOS mobile app available on the App Store and the website bloow.app.

1. Data controller

• Publisher: Marc Malick Coulibaly-Hemat, sole proprietor (entrepreneur individuel), trading as MH ADVISORY, operating the Bloow brand
• Address: 10 rue Charles Hildevert, Bât A, Appt 3, étage 1, 77178 Oissery, France
• SIREN: 942 946 419 — SIRET: 942 946 419 00010 — APE: 62.02A
• Contact: contact@bloow.app
• Website: bloow.app
• Legal notice: Legal notice

2. Data we collect

Depending on the features you use, we may process:

• Account: sign-in is only via Sign in with Apple (no email/password account). We receive your Apple user ID and, only if you choose to share them, your email address (or Apple's Hide My Email relay address) and your name.
• Profile and onboarding: skin type, skin concerns, goals, routine preferences, onboarding answers.
• Facial data (with your camera permission — see section 3): 4 still photos of your face, derived skin analysis scores and results.
• Health data (with your HealthKit permission): step count only, read-only (see section 5).
• Wellness check-in (entered by you): sleep, stress, water intake (hydration), and any other daily habit fields you choose to fill in. These stay in your account to personalise routines and tracking. They are not sent to AI providers.
• Menstrual cycle (optional): information you choose to provide, used only to adapt your routines.
• Subscription: subscription status via Apple and RevenueCat (we never collect payment card data).
• Referral (if you use that feature): the referral or invitation code and the fact of the invitation, solely to attribute it.
• Technical: session identifiers, error logs, app version, device model.
• In-app usage analytics (only after your consent): in-app usage events via PostHog (EU instance).

Website: bloow.app uses no analytics tools and no tracking or advertising cookies. The host (Vercel) may process technical logs needed to operate and secure the site.

GPS location: Bloow does not collect your location. Advertising: Bloow shows no ads, performs no ad tracking (no IDFA, no cross-app tracking) and never sells data.

3. Facial data

If you choose to use the face scan, the App uses the front camera, on-device face detection and head-pose estimation (ARKit) solely to guide you and trigger the capture of 4 still photos. No facial recognition or biometric identification (unlocking, authentication, identifying or verifying a person's identity) is performed. The App does not access Apple's Face ID data, does not create any biometric model or face template, and records no video.

3.1 Information collected

• Face detection and head pose (on-device): during the scan, the App detects the presence of a face and the head orientation (front, profiles, chin up) to automatically capture the right views. This pose data is processed in real time on the device, is not stored and is never sent to our servers.
• Photos: exactly 4 still photos — front, left profile, right profile, chin up — compressed on the device before upload. No video is recorded or transmitted.
• Capture metadata: scan ID, date/time, captured view.
• Derived results: skin condition analysis (e.g. apparent hydration, blemishes, redness, texture) and recommended product categories for your routine.

3.2 Uses

Photos are used only to:

• analyze your skin and generate product categories for your routine;
• track your progress over time (comparing your scans).

They are never used to identify you, for advertising, or sold.

3.3 Sharing and storage

• Transmission: the 4 compressed photos are sent over an encrypted (TLS) connection to our scan server function hosted by Supabase (European Union, region eu-north-1, Stockholm).
• AI analysis: the scan function sends the photos to third-party AI models via OpenRouter (an OpenAI "mini" model; Anthropic Claude Haiku as fallback) to produce the analysis (see section 4). These providers act as processors and process the photos for the current request.
• Storage: photos and results are stored in our Supabase project (EU), linked to your account, with restricted access.
• Limit: maximum 3 scans per day.

3.4 Retention

• Scan photos and results: kept while your account is active, to enable progress tracking.
• Account deletion: you can delete your account in the App, or by emailing contact@bloow.app. All your photos and facial data are then deleted from our servers.
• AI providers: photos are processed for the request; any provider-side retention is governed by their respective policies (see section 4.4).

Summary — collection and use of facial data: "If you choose to use the face scan, Bloow captures 4 still photos of your face (front, left profile, right profile, chin up) using on-device face detection. Only these compressed photos, never video, are sent to our Supabase server (EU) and analyzed by third-party AI models via OpenRouter, solely to analyze your skin and track your progress. No facial recognition or biometric identification is performed. Photos are kept until you delete your account, which you can do at any time in the App."

4. Third-party artificial intelligence

Skin analysis relies on third-party AI models. Before your first scan, the App informs you that your photos will be sent to a third-party AI service and asks for your consent. You may choose not to use the scan.

4.1 Providers

• OpenRouter (AI API router) — openrouter.ai/privacy
• OpenAI ("mini" model family) — openai.com/policies/privacy-policy
• Anthropic (Claude Haiku, fallback) — anthropic.com/privacy

Transmission through our Supabase server function (API keys server-side, never in the App).

4.2 Data that may be sent

• Only the 4 compressed scan photos.
• No other data is sent to the AI: no profile, skin type, concerns, cycle information, sleep, stress, water, HealthKit data, email, referral data or account identifier.

4.3 Purposes

• Skin condition analysis.
• Generating the product categories of your routine.

4.4 Safeguards

We select providers offering appropriate contractual and technical safeguards (encryption in transit, commercial API terms). We configure our providers not to use your data for model training where this option is available. Standard contractual clauses apply to transfers outside the EU.

Summary — third-party AI: "Bloow sends your scan photos to third-party AI models (OpenAI, Anthropic) via OpenRouter, from our Supabase server, solely to analyze your skin and suggest a routine."

5. Health data (HealthKit)

• Only your step count is read, read-only; Bloow writes nothing to Health.
• This data stays on your device: it is not sent to our servers or to AI providers.
• It is never shared with third parties, nor used for advertising or marketing.
• You can revoke access at any time in iOS Settings → Health → Data Access.

6. General purposes

• Provide and personalize the App (scan, routine, hydration, sleep, stress and activity tracking).
• Adapt your routines (including to your cycle, if you provide it).
• Manage subscriptions and restore purchases.
• Attribute a referral if you use that feature.
• Send reminders (notifications) if you enable them.
• Improve reliability and security (and, with consent, measure usage).
• Comply with our legal obligations.

7. Legal bases (GDPR)

• Performance of contract: providing the App and the subscription.
• Consent: camera / face scan and AI photo analysis, HealthKit, menstrual cycle information (health data, explicit consent), notifications, PostHog analytics.
• Legitimate interest: security, abuse prevention (scan limit), technical logs.

8. Processors and third-party services

• Apple: Sign in with Apple, App Store, in-app purchases, HealthKit, ARKit/face detection (on-device).
• Supabase: authentication, database, photo storage, server functions — EU hosting (Stockholm).
• OpenRouter, OpenAI, Anthropic: AI photo analysis (section 4).
• RevenueCat: subscription management (no payment card data collected by us).
• PostHog (EU instance): in-app usage analytics only (not on the website), after consent — posthog.com/privacy.
• Vercel Inc.: hosting of the website bloow.app (United States) — vercel.com/legal/privacy-notice.

9. Affiliate links and referral

• Affiliate links: some product recommendations may contain affiliate links. If you buy through them, Bloow may earn a commission. This does not change the price you pay. We do not send your photos, account, HealthKit data or wellness check-in to affiliate partners. Purchases on partner sites are subject to those sites' policies.
• Referral: if you use a referral or invitation feature, we process the code or identifier needed to attribute the invitation. We do not sell this data and we do not send it to AI providers.

10. Retention periods

• Account and profile data: while the account is active, deleted upon account deletion.
• Facial data: see section 3.4.
• Wellness check-in (sleep, stress, water) and cycle data: kept while the account is active; deleted with the account.
• Steps (HealthKit): not stored by us (stay on the device).
• Referral data: kept while the account is active; deleted with the account.
• Subscription data: according to applicable accounting and legal obligations.
• Website technical logs: processed by the host for operation and security, for a limited period.

11. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. You can withdraw consent (camera, HealthKit, analytics, cycle) via iOS settings or in the App, and delete your account and all your photos in the App or by emailing contact@bloow.app.

To exercise your rights: contact@bloow.app. You may also lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

12. Security

We implement reasonable technical and organizational measures (TLS encryption in transit, Supabase authentication, per-user access rules, server-side API keys, restricted access) to protect your data.

13. Transfers outside the EU

App data is hosted in the EU (Supabase, Stockholm). The website is hosted by Vercel (United States). AI providers (OpenRouter, OpenAI, Anthropic) and some services (RevenueCat) may process data in the United States. Appropriate safeguards are in place (standard contractual clauses, Data Privacy Framework where applicable).

14. Minors

The App is intended for people aged 16 and over. If you believe a minor has provided us with data without parental consent, contact us for deletion.

15. Changes

We may update this policy. The date at the top will change accordingly. For substantial changes, we may ask for your consent again in the App.

16. Contact

Questions: contact@bloow.app — Website: bloow.app — Legal notice