Protected local archive
The iPhone record uses Apple’s protected app storage. Device passcode protection and optional Face ID help limit casual access. Mama Bloom’s archive is excluded from Apple device backup so the health record is not uploaded as app backup data.
Paired Watch custody
The Watch receives a limited forecast snapshot and can queue quick logs for delivery to the paired iPhone. Watch data uses app-owned storage and is cleared through the coordinated local-record deletion flow. Physical-device delivery and deletion are verified as part of release testing.
Discreet system surfaces
Widgets reveal no cycle detail by default. A broad range and quick-action labels are separate opt-ins. Siri, Spotlight, Shortcuts and Action button actions use generic language and hand off to the protected app; they do not speak cycle values or write an observation in the background.
Optional diagnostics stay local
Private quality diagnostics are off until enabled. When enabled, a bounded, protected local archive stores scrubbed Apple MetricKit crash, hang, energy and performance reports. It is separate from the cycle record and has no automatic upload path. A diagnostic file leaves only through an export the user deliberately prepares and sends, and the local archive can be deleted in the app.
No advertising or tracking SDKs
The current binary contains no advertising, advertising profile, third-party behavioural analytics, tracking or developer cloud-sync SDK. The final uploaded archive and Apple privacy report must be checked again before each release.
Apple-controlled services
Apple Health permissions, StoreKit transactions, WatchConnectivity, App Intents, Siri, Spotlight, Shortcuts, MetricKit, device security and the share sheet are Apple platform services. Mama Bloom requests the narrow permissions needed for the feature you choose; Apple’s independent terms and controls apply.
Reporting a concern
Send an initial report to support@mamabloom.app with “Security report” in the subject, or use the Support page. Never attach cycle records, Health exports, screenshots containing health information or live exploit data before a secure exchange method is agreed.