Privacy Policy
Last updated: August 20, 2026
MatraBloom ("MatraBloom", "we", "us", or "our") operates the MatraBloom website, the MatraBloom mobile application (the "App"), and related services (collectively, the "Services").
This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices and rights you have. By using the Services, you agree to the practices described in this policy.
1. Information we collect
1.1 Information you provide to us
- Account information. When you create an account or sign in, we collect your name, email address, and any other details you choose to provide.
- Profile information. Details you add to your profile, such as a photo or preferences, if you choose to add them.
- Content you create. Check-ins, mood entries, journal entries, recovery progress, and any other content you record inside the App or submit through the website. This content is stored to deliver the App's core functionality.
- Purchase information. Transactions are processed by the relevant app store (Google Play). MatraBloom does not store your payment card details; the app store collects them subject to its own privacy policy.
- Support communications. Information you share when you contact us, such as for support or feedback.
1.2 Information we collect automatically
- Usage information. How you interact with the Services — pages visited, features used, actions taken, and time spent.
- Device information. Device type, operating system, app version, and similar technical details.
- Log information. IP address, browser type, referring/exit pages, and diagnostic data.
1.3 Information we do not collect
We do not collect precise real-time location, contacts, call logs, or SMS data. We do not sell your personal information.
2. How we use information
- To provide, operate, personalize, and improve the Services.
- To respond to your questions, feedback, and support requests.
- To understand aggregate usage patterns and build more helpful content and features.
- To send service-related communications where relevant.
- To detect, prevent, and address technical issues, fraud, and abuse.
- To comply with legal obligations and enforce our Terms of Service.
3. Legal bases for processing (for EEA/UK users)
Where the GDPR or UK GDPR applies, we process personal information on the following legal bases:
- Contract. Processing necessary to perform the Services you request.
- Legitimate interests. Operating and improving the Services, maintaining security, and understanding usage — balanced against your rights and interests.
- Consent. Where we rely on your consent (for example, optional marketing), you may withdraw it at any time.
- Legal obligation. Where processing is required by law.
4. How we share information
We do not sell your personal information. We only share data with service providers we rely on to run the product (such as Firebase / Google Cloud hosting and analytics providers), who process it on our behalf and under our control. We may disclose information where required by law, to protect legal rights, or in connection with a business transfer.
5. Cookies and similar technologies
We use cookies and similar technologies on the website to understand usage and improve the experience. See our Cookie Policy for details, including how to manage or disable them.
6. Data retention
We retain personal information only as long as needed to provide the Services and fulfil the purposes described in this policy, or as required by law. You may request deletion of your account and associated data at any time. See our Account Deletion page for how to do so.
7. Data security
Data is encrypted in transit and protected using industry-standard security practices. While we work to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Data transfers (international)
Your information may be processed in countries other than your own, including the United States, using standard contractual clauses or other appropriate safeguards where required by applicable law.
9. Your rights and choices
- Access and correction — review or correct the personal data we hold about you.
- Deletion — request deletion of your account and associated data.
- Opt out of analytics — block analytics scripts in your browser or device settings.
- Object / restrict / portability — where applicable, you may object to processing, request restriction, or request a portable copy of your data.
- Withdraw consent — where processing is based on consent.
- Do Not Sell My Personal Information — we do not sell personal information.
To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.
10. Children's privacy
The Services are designed for adults and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take steps to delete it.
11. Analytics
We use Google Analytics and Firebase Analytics to understand how visitors use the site and app, which pages are helpful, and how people find their way to the app. This data is aggregate and is not used to identify you individually.
12. Third-party links and services
The Services may link to third-party websites or services with their own privacy practices. We are not responsible for their policies. See our Third-Party Services page for more detail.
13. Changes to this privacy policy
We may update this policy as MatraBloom grows. The "last updated" date on this page will always reflect the most recent version. Material changes will be highlighted in the App or by email where appropriate.
14. Contact us
For privacy questions or data requests, email privacy@matrabloom.app.
For general support, email support@matrabloom.com.