Bloolock is a discipline and alarm-clock app. This policy explains exactly what it collects, why, who else sees it, and how to get rid of it.
For any privacy question or request, write to abhisheknaik9845@gmail.com.
The short version
- We collect what the app needs to work: your account, your answers to the setup interview, and the record of the habits you prove each day.
- Some of what you tell us is sensitive — the setup interview can cover compulsive behaviour, including pornography and substance use. We treat it as sensitive and we never publish it.
- Photos taken for a photo-proof alarm never leave your phone. They are compared on the device and discarded. We have no photo storage.
- We do not sell your data. We do not show ads. There is no advertising SDK.
- You can delete your account from inside the app, or from the delete account page.
What we collect
1. Account data
Your email address and a password, or a Google/Apple sign-in, handled by our authentication provider. Also a display name, and optionally a username and a self-declared city, state and country.
Why: to give you an account that works on more than one device, and to place you on a city leaderboard if you choose to give a city. The city is a name you type; the app never reads your device's GPS or precise location.
2. Your setup interview answers
Before you start, Bloolock asks what you are trying to change. Most answers stay on your phone. Six are saved to your account when you create one: your name, age bracket, how you said you were feeling, the habit you named as your main problem, your estimate of the hours involved, and the identity you chose.
Sensitivity: the habit you name may be pornography use, alcohol or another substance, or another compulsive behaviour. It is never shown on a leaderboard, never included in a notification, and never attached to community posts. The pornography path is private by default.
3. Your progress record
Proofs you set up, check history, sealed days, streak, XP and rank, alarms and whether they were answered or missed. This record is the product.
4. Community content
Messages in rooms or to a mentor, and any proof you choose to post. Other users of that room can see these with your display name and rank. Nothing is used to train a model.
5. Purchase data
Subscription status and an anonymous customer identifier. We never see or store your card or billing address — Google Play takes the payment.
6. Usage analytics
Anonymous product-usage events (screens reached, setup steps, purchase started or finished) — that something happened, not the content of your answers.
7. Diagnostics
If the app hits an error, we may record technical details to fix it.
What we do NOT collect
- Photos. Photo-proof uses the camera on-device; images are never uploaded.
- Microphone audio. Not requested; blocked in the shipped build.
- Precise location. No GPS permission.
- Contacts, calendar, call logs, SMS, or your other apps.
- Advertising identifiers. No ad SDK.
Who else sees it
A small number of processors under their own terms. We do not sell personal data or share it with advertisers.
| Provider | What it handles | Policy |
|---|---|---|
| Supabase | Account, interview answers, progress, community — database & auth | supabase.com/privacy |
| Google Play Billing | The payment itself | policies.google.com/privacy |
| RevenueCat | Subscription entitlement | revenuecat.com/privacy |
| PostHog | Anonymous product analytics | posthog.com/privacy |
Why we are allowed to hold it
Where UK/EU GDPR or India's DPDP Act applies: account and progress data to perform our contract; sensitive interview answers on explicit consent (withdraw by deleting your account); analytics on legitimate interest in knowing whether the product works.
How long we keep it
While your account exists. On deletion, personal data is removed from our systems immediately and from routine encrypted backups within 30 days. Anonymous aggregates may remain. Tax/accounting may require a minimal transaction record.
Deleting your data
- In the app: Profile → All settings → Delete account.
- Without the app: these instructions.
Your rights
Access, correction, deletion, export, and objection where applicable. The app has "Export everything". Otherwise email abhisheknaik9845@gmail.com — we respond within 30 days.
Children
Bloolock is not for children. You must be at least 18 for paths that deal with adult material. We do not knowingly collect data from anyone under the store listing minimum age.
Security
HTTPS/TLS in transit. Access-controlled databases with row-level restrictions. No system is perfect; breaches are disclosed as the law requires.
International transfers
Providers operate globally (including US and EU). Where required, we rely on standard contractual clauses.
Changes
We update the date at the top. Significant changes are announced in the app before they take effect.