Apps · Bloom · Privacy

Privacy Policy

Effective September 11, 2026

Bloom (the "App") is a single-player merge puzzle game published by Taoufik Jabbari ("we", "us"). This policy explains what data the App collects, how we use it, and your choices.

1. Information we collect

Bloom collects the minimum information needed to deliver the game's features:

• Game progress (on your device only): your current board, best score, and the highest plant tier reached. Stored in iOS local storage. Never leaves your device.
• Leaderboard data (anonymous): when you open World Ladder, Bloom sends an anonymous Firebase user ID, a display handle (randomly generated, for example "WildLotus3142"; you can change it in Settings) and your best score to Google Firestore so the leaderboard can rank you. The handle is public, so choose one that does not identify you.
• Usage analytics: Firebase Analytics records standard, anonymized usage events so we can understand how the game is played.
• Advertising identifiers: Google AdMob may use your device's advertising identifier (IDFA on iOS, advertising ID on Android) to show personalized ads, subject to your App Tracking Transparency choice on iOS and consent rules in the EU/UK. If you decline tracking when prompted, AdMob will serve only non-personalized ads.
• Crash and diagnostic data: Firebase Crashlytics collects crash reports (device model, OS version, and the state of the App at the moment of a crash) so we can find and fix bugs. These reports contain no personal information.
• Purchases: Bloom offers an optional one-time "Remove Ads" purchase, processed by Apple through the App Store (StoreKit) or by Google through Google Play Billing. Apple or Google handles payment; we never see your card or billing details. Firebase Analytics records that the purchase happened (product and price) as a standard purchase event, without any payment details.
• Optional sign-in (iOS only): after your 5th game over, Bloom offers Sign in with Apple to back up your progress. It is optional and the sheet can be cancelled; the game works fully without it. If you accept, Apple shares your Apple ID email (or a private relay address if you choose Hide My Email) and, on the first authorization only, your name. Firebase Authentication stores this email and name in your account record, and the email is also kept on your device so Settings can show which Apple ID is linked. We use them only to link the same World Ladder row (handle, score) across devices and reinstalls; they are never shown to other players, never used for advertising, and never sold. The Android app has no sign-in and uses an anonymous Firebase identity only. You can delete the account and all of its data at any time from Settings inside the App (see section 6).
• Push notifications (optional): after a game, Bloom may ask whether you want notifications, for example when someone beats your score or a new challenge arrives. On iOS, only if you allow them, the App registers with the Apple Push Notification service through Firebase Cloud Messaging and stores the resulting device push token, your language and your platform in your user record in Firestore so we can send those notifications. On Android the App registers a Firebase Cloud Messaging token after your first game, and notifications are shown only if you allow them. You can turn notifications off at any time in your device settings, and the token is deleted when your account is deleted (see section 6).

2. Information we do NOT collect

• Apart from the optional Sign in with Apple described above (iOS only), we do not ask for your name, email, phone number, or photos.
• We do not access your contacts, calendar, microphone, camera, or precise location.
• We do not sell or rent any data to third parties.

3. How third parties use data

Bloom uses the following third-party services:

• Google Firebase (Authentication, Firestore, Cloud Messaging, Analytics, Crashlytics): provides anonymous identities so leaderboard scores can be ranked, holds the optional Apple sign-in link on iOS, delivers push notifications, and reports usage and crash data. See Firebase's privacy notice.
• Google AdMob: serves banner and interstitial ads. AdMob may collect device identifiers (IDFA, IP) for ad delivery, fraud prevention, and frequency capping. See Google's policy and AdMob data practices.
• Apple App Store / Google Play: processes the optional Remove Ads purchase. See Apple's privacy policy and Google's privacy policy.

4. Ad consent and tracking choices

In the EU, UK, and EEA, Bloom shows a consent form before requesting personalized ads. On first launch, iOS will ask you whether to allow Bloom to track you across other apps and websites for advertising purposes. Your choice is respected:

• Allow: AdMob may serve personalized ads based on your activity in other apps.
• Ask App Not To Track: AdMob will only serve non-personalized (contextual) ads.

You can change this any time: on iOS, in Settings → Privacy & Security → Tracking; on Android, in Settings → Privacy → Ads. You can also manage AdMob's use of your data directly through Google at myadcenter.google.com. Purchasing Remove Ads removes all ads.

5. Children's privacy

Bloom is rated for ages 4+ and is suitable for all audiences. We do not knowingly collect personal information from children. Apart from the optional sign-in and notifications described above, the only data leaving the device is a Firebase ID, a display handle and a score. If you believe a child has provided any identifiable information, please email taoufik.leon.jabbari@gmail.com and we will delete it.

6. Data retention and deletion

On-device data is removed when you uninstall the App. Leaderboard scores are tied to your Firebase ID, which stays anonymous unless you used the optional Apple sign-in on iOS. To delete your leaderboard entry, your account (including the Apple sign-in link, email and name), your push token and everything tied to your ID, open Settings inside the App on iOS and use "Delete my account": this removes your Firestore rows and your Firebase account and clears local data immediately. On Android, or if you prefer, request deletion by emailing taoufik.leon.jabbari@gmail.com with the handle shown on your device (Settings inside the game).

7. International transfers

Firebase and AdMob are operated by Google LLC (USA). Data sent to those services may be stored or processed in the United States. By using Bloom you consent to such transfer where applicable.

8. Changes to this policy

We may update this Policy. The "Effective" date above will change when we do. Material changes will be reflected in an updated App Store release.

9. Contact

For privacy questions or deletion requests, contact taoufik.leon.jabbari@gmail.com.