In plain words
- We collect what you put in your profile and chats, plus basic device and usage data to run and protect the app.
- Other members see your profile. Your chats are seen only by the people in them, and by our team when a report needs it.
- When a Fade session ends, its messages leave the chat, but we keep an encrypted copy for 90 days, only to respond to legal requests.
- We never sell your data, show third-party ads, record your calls, or track your location.
- You can see, change or delete your data, and delete your account, at any time.
1. Who we are
Bloomlet, which still appears as SuperSpace on iPhone, on the App Store and in older versions, is operated by SuperBits Labs, India (“we”, “us”). This policy explains what personal data we collect when you use the Bloomlet app and this website, why, who we share it with, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. For anything about your data, write to our Grievance Officer at info.super.bits@gmail.com.
2. What we collect
What you give us
- Account: your name and the email or phone number tied to how you sign in (Apple, Google, or a phone number in some older versions).
- Profile: date of birth (we show your age, not your birthday), gender, who you’d like to see, photos, prompts and answers, interests and anything else you add.
- Phone verification: if you verify your number for the ✓ badge, the number and when it was verified.
- Conversations: the messages, photos, voice notes, stickers and flowers you send and receive, including in Fade (see section 6).
- Calls: who you called, when and for how long. We never record the audio or video of calls.
- Safety: people you block, reports you make, and reports made about you.
- Support: anything you tell us when you contact us.
What we get when you use the app
- Activity: the profiles you see, flowers and messages you send, chat levels and blooms, and how you use features, so the app works and we can improve it.
- Device: device model, operating system, app version, language, a notification token, and your IP address (used to protect the service from abuse). Crash reports when something goes wrong.
- Purchases: which plan or pack you bought, when, and its status, as reported by Apple or Google. We don’t receive your card or bank details. For coins bought in older versions, the payment reference from our payment provider.
We do not collect your precise location, your contacts, or your photo library beyond the photos you choose to upload.
Sensitive information
Some profile details, such as your gender, who you’d like to see, and anything you choose to share about your beliefs or lifestyle, can reveal sensitive information. You choose whether to share it, and we use it only to run Bloomlet for you (for example, showing you the people you asked to see).
3. How we use it
- To run Bloomlet: create your account, show your profile, show you people, deliver messages, stickers, calls and notifications, and manage plans and purchases.
- To keep people safe: check ages, prevent fake accounts, spam and scams, review reports, enforce our Terms and Community Guidelines, and help the authorities when the law requires it or someone is in danger.
- To improve the app: fix crashes and understand which features work, using usage data.
- To talk to you: answer support requests and send messages about your account or changes to our terms. Bloom reminders and other notifications can be turned off in the app or your phone’s settings.
- To meet the law: keep records that tax, accounting and other laws require.
We process your data because you asked us to provide Bloomlet and agreed to these uses when you signed up, and where the law requires or allows it. You can withdraw consent at any time by deleting your account; this doesn’t affect what we did before.
4. Who we share it with
Other members
Your profile (first name, age, photos, prompts, interests and badge) is visible to other members. Your messages are visible to the people you send them to. Your name and photo appear during calls.
Service providers
We use trusted providers to run Bloomlet, only for that purpose and under contract:
| Provider | What for |
|---|---|
| Google Firebase | Sign-in, notifications, usage analytics and crash reports |
| Apple and Google | Sign-in (if you choose them), app store purchases and subscriptions |
| Amazon Web Services | Storing profile photos |
| Our cloud servers | Our backend, message storage and the relays that help connect calls |
| Razorpay | Payments for coins in older versions of the app |
The law and safety
We share data with the police, courts or regulators when the law requires it, and when we believe in good faith it is needed to protect someone from harm, to respond to child safety concerns, or to protect our members and the service.
If our business changes
If SuperBits Labs is merged, acquired or sells Bloomlet, your data may move to the new owner, who must respect this policy.
We never sell your personal data and never share it for third-party advertising.
5. How long we keep it
We keep your data while your account is open. When you delete your account, we delete your profile, photos, messages, blocks and sign-in. We keep a limited amount for longer only where we need to:
- purchase and transaction records, for as long as tax and accounting law requires;
- reports and safety records, to stop people who were removed from coming back and to support investigations;
- messages from Fade sessions, as described in section 6;
- data we are legally required to preserve.
6. Fade
Fade is an optional private session inside a chat, available once a chat reaches level 2. Either person can turn it on, and both are told.
- During Fade: messages sent in Fade (text, photos, voice notes and stickers) stay in the chat.
- When Fade is turned off: those messages leave the chat for both people.
- What we keep: an encrypted copy of those messages for 90 days after the session ends, with a record of who sent each one and when, and their photos and voice notes in our private storage. We keep this only to respond to legal requests. It can’t be viewed in the app or in our dashboard.
- After 90 days: the copy is permanently deleted, along with its photos and voice notes, unless the law requires us to keep it longer. Copies may remain in our server backups for a limited time after that, until those backups are deleted.
- Paid stickers: a paid sticker sent in Fade leaves the chat with the other messages, but we keep our record of it in our purchase and Bloom Rewards records: who sent it, who received it, and any note written with it. That record isn’t part of the 90-day copy and isn’t deleted with it.
- If you delete your account: this copy isn’t removed early. It is deleted at the end of its 90 days.
- Chat levels: we keep a count of the messages and days from Fade sessions, because a chat’s level doesn’t go down when they leave.
- Screenshots: during Fade, screenshots are blocked on Android. On iPhone they can’t be blocked: in current versions the app comes out blank in screenshots and screen recordings, and if someone takes a screenshot, the other person is told. Fade can’t stop someone keeping what you send in other ways, such as photographing the screen with another device.
7. Keeping it secure
Data travels over encrypted connections, calls are encrypted in transit, and only people who need access to run Bloomlet have it. No system is perfectly secure, so please use a secure sign-in and tell us at once if you think your account has been misused. If a breach is likely to affect you, we will tell you and the authorities as the law requires.
8. Your choices and rights
- See and change: edit your profile in the app at any time.
- Delete: Profile → Settings → Delete my account, or the steps at app.superspace.superbits.in/account-deletion.
- Notifications: turn them off in the app or your phone’s settings.
- Under the DPDP Act 2023, you can ask us for a summary of your data and who it was shared with, ask us to correct, complete or erase it, withdraw consent, nominate someone to act for you, and raise a grievance. Email info.super.bits@gmail.com; we may need to confirm it’s you.
If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.
9. Where your data is stored
Your data is stored on our cloud servers and with the service providers above, which may be in India or in other countries. Wherever it is, we protect it as this policy describes and as Indian law requires.
10. Children
Bloomlet is only for people aged 18 and over. We don’t knowingly collect data from anyone younger. If you believe a child is using Bloomlet, tell us at info.super.bits@gmail.com and we will remove the account. See our Child Safety Standards.
11. This website
This website doesn’t use cookies, analytics or advertising trackers. Our host (GitHub Pages) and font provider (Google Fonts) receive your IP address to deliver the pages, under their own privacy policies.
12. Changes to this policy
We may update this policy. If a change matters for you, we will tell you in the app or by email before it takes effect, and update the date at the top.
13. Contact
Grievance Officer, SuperBits Labs, India: info.super.bits@gmail.com. We acknowledge requests within 24 hours and aim to resolve them within 15 days.