Privacy policy
Your diary stays on your phone. Bloop shows no ads and contains no analytics. If you sign in to Sync, an encrypted copy of your diary is also kept on our sync server as a backup, and with Bloop+ your other phones can reach it when you sign in. We never read it, sell it or share it.
This policy covers the Bloop app for Android and iPhone, made by Hundred Engine, an independent developer.
What Bloop keeps on your phone
- Your moments: the mood you picked, the time, the feelings and activities you tapped, the line you wrote, and up to three photos you added.
- Your own words and activities, your memory jar, and your settings (your friend and its name, theme, language, reminder time, app lock on or off).
All of this lives in Bloop's private storage on your device. Photos you add are copied from your gallery into that storage; they are never uploaded. Uninstalling Bloop, or using Me, Privacy & data, Delete everything, deletes it.
Your phone's own backup
If backup is on in your Android phone's settings, Android may copy Bloop's storage, including your diary, to your Google account, under Google's policy. You can turn this off in your phone's settings.
What leaves your phone
- App updates: when Bloop opens, it asks Expo's update service (Expo privacy policy) whether a newer version of the app exists. The request carries the app version, the platform and a random ID for this install that Expo uses to count updates. It carries nothing from your diary.
- Bloop+: purchases go through Google Play or Apple's App Store; the developer never sees your payment details. To know whether Bloop+ is yours, Bloop asks RevenueCat, a purchase service, when it opens. RevenueCat receives a random ID it creates for this install, your purchases and their receipts, the app version, the device's operating system and language, and your IP address. Once you sign in to Sync, Bloop+ belongs to your sync account: RevenueCat then gets a random ID of that account instead (made by our sync server, the same on each of your phones, telling RevenueCat nothing else about you), your phone's purchases are tied to it, and our sync server asks RevenueCat whether that ID has Bloop+ and keeps the answer, so it works on every phone signed in with the same account. Signing out gives this install a new random ID; Bloop+ stays with your sync account and comes back when you sign in again. It receives nothing from your diary. "Restore Bloop+" asks the store account on your phone for an earlier purchase.
- Sync and backup (optional): off until you sign in in Me, Sync; signing in and backing up are free, bringing a saved diary onto another phone comes with Bloop+. You sign in with Google (or Apple). On the latest version this opens your phone's own Google or Apple sign-in screen (older versions use your phone's browser; on Android the latest version offers Google only). Bloop then sends our sync server, run by Hundred Engine on Cloudflare, the sign-in token Google or Apple gives it and a random check value; with Apple also a one-time code. Google's token always contains your name and email address: the server reads only the account's ID from it and discards the rest without storing it. Apple is asked for neither. The server uses Apple's one-time code once, to end the sign-in's access at Apple right away, so it keeps no Apple token. It keeps only a scrambled form of the account's ID and of each phone's sign-in key, never your name or email. Your phone then sends your moments, words, memory jar and settings (except the app icon and app lock) as one copy encrypted with a key the server keeps for your account and gives only to your signed-in phones. Because the server holds that key, this is encryption at rest, not end-to-end: the developer does not read your copy, but technically could. Next to the copy the server keeps, unencrypted, the number of entries in it and when it was saved, so another phone signed in to the account can show that a diary is saved. Photos are not synced. Me, Sync, Sign out stops sync on that phone and keeps the copy. Me, Sync, Delete account deletes Bloop's data on the server at once (the diary copy and the Bloop+ record), as does the deletion page. The same sign-in also works for Hundred Engine games; their cloud saves are not touched, and the account itself goes once none of them has anything left. The diary on your phone stays, and Bloop+ comes back with "Restore Bloop+" on the store account that bought it. Deleted data can stay in the database provider's recovery copies for up to 30 days.
What Bloop does not do
- No ads, no analytics, no crash-reporting or social SDKs, no tracking across apps.
- No sign-up needed to use Bloop, no sharing with other users. Without sync, nothing you write, tap or photograph leaves your phone.
- The developer does not sell data about you to anyone.
On your phone
- Reminders are scheduled on your phone; no server sends them. They are off until you turn them on.
- App lock uses your phone's own fingerprint, face or passcode. Bloop only learns whether unlocking succeeded.
- Widgets show your friend and the mood you logged on your home screen, where anyone looking at your screen can see them. Remove a widget to hide it.
- Photos are picked with your phone's own photo picker, which shares only the photos you choose.
Children
Bloop is made for a general audience aged 13 and over and is not directed at children.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new effective date. A change that would send anything from your diary off your phone would only come with a clear notice in the app first.
Contact
Questions about this policy or the app: yogy.prakoso.yogy@gmail.com.
Ringkasan (Bahasa Indonesia)
Diary-mu ada di HP-mu. Bloop tanpa iklan dan tanpa analitik. Momen, kata, foto, dan pengaturan disimpan di penyimpanan pribadi Bloop dan terhapus kalau app dihapus atau lewat Aku, Privasi & data, Hapus semuanya. Yang keluar dari HP hanya: pengecekan versi app ke layanan pembaruan Expo, dan pengecekan serta pembelian Bloop+ lewat RevenueCat dan Google Play/App Store, tanpa isi diary. Kalau kamu masuk ke Sync (gratis), salinan diary-mu disimpan terenkripsi di server sync kami sebagai cadangan; membawanya ke HP lain termasuk dalam Bloop+. Di sebelahnya server menyimpan jumlah catatan dan waktu simpannya tanpa enkripsi, supaya HP lain yang masuk dengan akun yang sama bisa menunjukkan bahwa diary-mu tersimpan. Setelah masuk, Bloop+ ikut akun sync-mu: RevenueCat menerima ID acak akun itu, bukan nama atau email; kuncinya disimpan server, kami tidak membaca, menjual, atau membagikannya, foto tidak ikut, dan akun Bloop beserta salinannya bisa dihapus kapan saja lewat Aku, Sync, Hapus akun (diary di HP tetap ada, game lain yang memakai akun masuk yang sama tidak terhapus, dan Bloop+ kembali lewat Pulihkan Bloop+). Masuk lewat layar Google atau Apple di HP-mu mengirim token masuk ke server kami; nama dan email di token Google dibuang tanpa disimpan. Android bisa ikut mencadangkan data app ke akun Google-mu kalau fitur cadangan HP-mu nyala. Pertanyaan bisa dikirim ke yogy.prakoso.yogy@gmail.com.