Privacy Policy
Afterbloom is a no-contact tracker for people getting through a breakup. It is built so that the most personal things you write never leave your phone; the one exception is the optional “Talk” support chat, which needs a server to work and has its own section below. This policy explains what stays on your device, the little that is sent to service providers, and how to control it.
Who we are
Afterbloom is developed by Yeldar Kaldybayev, an individual developer based in Astana, Kazakhstan (“we”). Contact: eldarkk@gmail.com.
What stays on your phone only
Your journal entries, unsent letters, your reasons for not texting, mood records, streak history and settings are stored only on your device, in a database encrypted with a 256-bit key kept in the iOS Keychain. This data is never sent to us or anyone else, and it is excluded from iCloud and computer backups. We have no way to read it.
Afterbloom does not ask for, and does not store, the name of the person you are no longer in contact with.
The home and lock screen widgets read your day count from shared storage on the same device. Notifications are scheduled locally on your phone; we don’t run a notification server.
What is sent to service providers
From the first launch, Afterbloom sends anonymous usage statistics and crash reports. They help us find bugs and see which parts of the app help. They never include your texts or anyone’s name. If you don’t want them sent, email us at eldarkk@gmail.com or delete the app.
Anonymous usage statistics — Firebase Analytics (Google)
To understand which parts of the app help, Afterbloom sends anonymous events such as “SOS opened”, “card 5 opened”, “onboarding step 2”, together with numbers like the current day count or flower stage. Events never contain your texts, notes, letters, reasons or anyone’s name. Firebase also records an app instance identifier, your device model, iOS version, app version and approximate country derived from the IP address.
Afterbloom does not use the advertising identifier (IDFA), does not track you across other apps or websites, and has advertising features turned off.
Crash reports — Firebase Crashlytics (Google)
If the app crashes, a report with technical details (stack trace, device model, iOS and app version, an installation identifier) is sent so we can fix the problem. Crash reports contain no content you have written.
Purchases — Apple and RevenueCat
Payments are processed by Apple; we never see your payment details. To check whether Afterbloom Premium is active, the app uses RevenueCat, which receives an anonymous app user identifier and your App Store transaction information. No name or email is sent. The app also gives RevenueCat its Firebase app instance identifier, and RevenueCat sends subscription events (trial started, renewed, cancelled; no payment details) to Firebase Analytics, so we can see how the subscription works.
Support chat “Talk”
“Talk” in SOS is a text chat with an AI companion that helps you get through the urge to write to your ex. It is the only part of Afterbloom that cannot work on your phone alone. Nothing is sent until you open a conversation, and it uses two service providers:
Our server — Supabase (Frankfurt, Germany)
When you first open the chat, the app creates an anonymous account: a random identifier with no name, email or phone number. During a conversation the server receives your messages, the app language, the pronoun settings you chose in setup, your current day count and whether you are on a break, your time zone and which button started the conversation. Nothing else: your journal, letters, reasons and moods never go there.
Conversations are kept only while they are running: they end after 30 minutes of silence and are deleted from the server no later than 24 hours after they started. What remains is a count of conversations per week (to apply the weekly limit) and technical logs without any message text: model name, token counts and timings. We don’t read conversations.
The AI model — Anthropic (Claude)
To write replies, the server sends the messages of the current conversation to Anthropic’s API, which processes them in the United States. Under Anthropic’s commercial terms these messages are not used to train its models and are normally deleted within 30 days. A second, smaller model checks each message for signs of danger to you or from someone else, so the app can show helplines and the local emergency number instead of an AI reply.
The summary you may save at the end of a conversation is stored only on your phone, like the rest of your journal. The anonymous chat identifier is also passed to RevenueCat so the server can tell whether Premium is active. The chat is not a person and not therapy; if you are in danger, call the emergency number.
Things that happen only when you choose
- Milestone images are drawn on your phone. They go to Instagram, your Photos or another app only when you tap share or save.
- Export (JSON or PDF) is created on your phone and handed to the share sheet you choose.
- Face ID is handled entirely by iOS. Afterbloom only learns whether unlocking succeeded.
- Helplines open your phone app or browser; Afterbloom does not see those calls or messages.
Legal basis
We process statistics and crash reports based on our legitimate interest: without them we wouldn’t know about bugs or what helps people. They contain no texts or names and are never used for advertising or tracking. You can object at any time — just email us. Purchase data is needed so the subscription you paid for works.
Where data is processed and how long it is kept
Google (Firebase) and RevenueCat may process data in the United States and other countries under their standard data protection terms, including the EU Standard Contractual Clauses. Firebase Analytics event data is kept for up to 14 months; Crashlytics reports for up to 90 days; RevenueCat keeps transaction records for as long as needed to provide and account for purchases. Our chat server runs on Supabase in Frankfurt (EU); Anthropic processes chat messages in the United States under its commercial terms, including the EU Standard Contractual Clauses. Conversations are deleted from our server within 24 hours; Anthropic normally deletes them within 30 days.
Your choices and rights
- Stop statistics and crash reports, or delete what was already collected: email us. We have no accounts and don’t know who you are, so we’ll show you how to find your app instance identifier and delete the data linked to it.
- Delete everything on your phone: Me → Delete everything, or delete the app.
- Delete your chat data now: Me → Delete everything also removes the anonymous chat account and everything stored for it on our server. Without internet, the server deletes conversations on its own within 24 hours.
- Depending on where you live (for example in the EU, UK or California), you may have rights to access, correct, delete or object to processing of your data, and to complain to your local data protection authority.
Age
Afterbloom is intended for people aged 18 and over. The app asks you to confirm your age; people under 18 are shown youth helplines instead of the app.
Not medical advice
Afterbloom is a self-help tool, not therapy or a medical device. If you are in crisis, please contact a local helpline or emergency services.
Changes
If this policy changes, we will update the date above and, for significant changes, tell you in the app.