Privacy Policy
Your financial data is sensitive, and we treat it that way. This policy explains what we collect, why, and the rights you have under UK data-protection law.
Last updated: Draft — effective date set on launch
1.Who is the data controller
In short: This is who is responsible for your data, and how to reach us about anything privacy-related.
Plain-English summary — the full policy below is what's binding.
The data controller for your personal data is Blooom. The full legal entity name, England and Wales company registration number, registered office address and ICO registration number will be published here once company registration completes.
For any privacy question or to exercise your rights, contact us at privacy@blooom.money.
2.What data we collect
In short: We collect your account details, the money information you enter, privacy-friendly usage data, and your AI-coach messages and the facts it remembers.
Plain-English summary — the full policy below is what's binding.
- Account details — your name, email address and password (stored securely, hashed by our authentication provider).
- Financial data you enter — the balances, interest rates, product details, savings and investment goals, budget and other money information you choose to add. This can reveal sensitive details about your finances, so we handle it carefully.
- Usage & analytics data — how you use the app (pages viewed, features used, approximate device/browser information), collected in a privacy-friendly way to help us improve Blooom.
- AI-coach conversations — the messages you exchange with the AI coach, and the durable facts the coach remembers about you to give more relevant guidance (for example “I’m a first-time buyer saving for a deposit”). These remembered facts are visible to you and you can edit or delete them.
3.Our lawful bases
In short: We only process your data where the law allows — to run your account, with your consent, or for legitimate interests such as security.
Plain-English summary — the full policy below is what's binding.
Under UK GDPR we rely on the following lawful bases to process your data:
- Performance of a contract — to create and run your account and provide the core features you sign up for (including any Blooom+ subscription).
- Consent — for optional things such as non-essential analytics cookies and marketing emails. You can withdraw consent at any time.
- Legitimate interests — to keep the service secure, prevent fraud and abuse, and improve and develop Blooom, where those interests are not overridden by your rights.
4.How we use your data
In short: We use your data to run Blooom, work out your net worth and eligibility, power the coach, send emails you've agreed to, and keep the service secure.
Plain-English summary — the full policy below is what's binding.
We use your data to:
- provide, personalise and maintain the Blooom service;
- calculate your net worth, surface opportunities, and show eligibility-based information relevant to you;
- power the AI coach and remember durable facts you approve;
- send service and, with consent, marketing communications by email;
- keep the service secure and prevent misuse; and
- comply with our legal and regulatory obligations, and improve the product.
6.International transfers
In short: Some providers process data outside the UK. Where that happens, we rely on the safeguards UK data-protection law recognises.
Plain-English summary — the full policy below is what's binding.
Some of our sub-processors (including Anthropic and certain hosting or analytics providers) may process data outside the UK, including in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data-protection law — such as the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, or an adequacy decision — to ensure your data remains protected.
7.Data retention
In short: We keep your data while your account is active. Delete your account and we delete or anonymise it, apart from anything the law requires us to keep.
Plain-English summary — the full policy below is what's binding.
We keep your personal data for as long as your account is active and you are using Blooom. If you delete your account, we delete or irreversibly anonymise your personal data, except where we need to retain limited information to meet legal, tax, accounting or fraud-prevention obligations, or to resolve disputes — in which case we keep only what is necessary and for no longer than required. Aggregated, anonymised data that no longer identifies you may be kept indefinitely.
8.Your rights
In short: You can access, correct, delete, move, restrict or object to your data, and withdraw consent. Download and delete are built into your settings.
Plain-English summary — the full policy below is what's binding.
Under UK GDPR you have the right to: access your data, rectify inaccurate data, request erasure, port your data to another service, restrict or object to certain processing, and withdraw consent at any time where we rely on it.
You can exercise the two most common rights directly in the app: “Download my data” (access and portability) and “Delete my account” (erasure), both in your account settings. For any other request, or if you need help, email us at privacy@blooom.money.
9.AI-coach data handling
In short: The coach gets only a small summary of your data per question, not your whole account. It remembers durable facts you can see, edit and delete, and Anthropic doesn't train on it.
Plain-English summary — the full policy below is what's binding.
The AI coach is designed to use the minimum data necessary. Each time you ask a question, we build a small “grounding” summary from your own data on our servers and send only that to the AI model to answer — not your entire account.
The coach only remembers durable facts that help it be useful over time (for example your goals or life stage) — not raw chat transcripts. You can see, edit and delete what the coach remembers about you at any time.
Our AI provider, Anthropic, does not use data submitted through its API to train its models. The AI coach provides information and guidance only, and does not give regulated financial advice — see our Terms & Conditions.
11.Security
In short: We protect your data with per-user isolation, encryption in transit and server-only secrets. No system is ever completely secure, but we work to keep it safe.
Plain-English summary — the full policy below is what's binding.
We take the security of your data seriously. Measures include:
- Per-user isolation — row-level security ensures each user can only ever access their own data.
- Encryption in transit — data is transmitted over encrypted (HTTPS/TLS) connections.
- Server-only secrets — sensitive keys and privileged access are kept on the server and never exposed to your browser.
No system can be guaranteed 100% secure, but we work to protect your data using appropriate technical and organisational measures.
12.Children
In short: Blooom is for adults aged 18 and over. We don't knowingly collect data from under-18s, and we'll delete it if we find any.
Plain-English summary — the full policy below is what's binding.
Blooom is intended for adults only. You must be 18 or over to use it, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at privacy@blooom.money and we will delete it.
13.Complaints & the ICO
In short: If you're unhappy with how we handle your data, tell us first — and you can also complain to the ICO.
Plain-English summary — the full policy below is what's binding.
If you have a concern about how we handle your data, please contact us first at privacy@blooom.money so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
14.Changes to this policy
In short: We may update this policy and will give reasonable notice of material changes. The date at the top shows when it last changed.
Plain-English summary — the full policy below is what's binding.
We may update this policy from time to time. Where changes are material, we will give you reasonable notice (for example in-app or by email). The “last updated” date at the top of this page shows when it last changed.
Contact
Talk to a person
A real person reads every message and replies — no ticket numbers, no phone maze. Email us any time and we'll help.
hello@blooom.moneyWe aim to reply within a couple of working days.
Something gone wrong? How we handle complaints.