Privacy Policy

Bloomi is run by Tamim Studio (“we”, “us”). For any question or request about your data, write to [email protected].

• Only a parent or legal guardian makes an account. Children never create one, never type an email address, and cannot chat with anyone.
• No ads. We do not sell or rent your data. We do not use advertising or behaviour-tracking tools.
• You can download everything we hold, or delete it all, in Settings.

• Parent account: your name, email address, how you sign in (password, email link, Google or Apple), the family name, the parent PIN if you set one, and your evening-reminder time. We need these to run your account.
• A second parent: a family can have more than one parent account. The family’s owner invites another parent with a one-time code; we keep only a scrambled copy of the code (a hash — the code cannot be read back from it), the family’s name and when the invite ends, and delete it once it is used, cancelled or replaced. After 48 hours it no longer works. The owner sees the name and email address of each parent in the family; each parent has their own sign-in and their own parent PIN.
• Child profile (written by the parent): first name or nickname, the child’s favourite colour, which friend (Mimo, Lumi, Nubee or Bloo) is their picture (a parent or the child picks it), the pet’s name, and, only if you choose to add them, the year of birth and a four-digit secret code that keeps the child’s world to themselves on a shared device (kept only as a scrambled copy — never the digits). We need these to show your child’s world.
• What the parent records: daily star ratings with optional notes, replies to your child’s requests, and your child’s daily missions (picked from a list, or a few words you write), with the days your child said one was done and the days you confirmed it.
• What the child makes while playing: coins, points, level, hearts, items owned and worn, the room, game progress and best scores, the drawings made in Mimo’s drawing studio (a picture of coloured cells, kept with the place the child put it on Mimo — never a photo), and the requests the child sends (free text of up to 280 characters, for example a wish). Parents can read and delete these.
• Linked devices: when you link a child’s device with a code or QR code, we keep a small record: an anonymous device ID (no name), which child it is linked to (or that it is a family device, which all your children play from), when it was last used, and the device’s browser or app description. It lets that device open the child’s world (or, on a family device, each child’s world), and lets you see and remove linked devices.
• Camera: the child’s device may use its camera to scan the parent’s QR code, and in Mimo’s drawing studio to photograph a drawing the child made on paper. The picture is read on the device, turned there into a small coloured drawing (a grid of colour cells), and thrown away: it is never stored or sent. A child can also draw straight on the screen, with no photo at all.
• We do not collect: location, contacts, photos, microphone recordings, advertising identifiers, or behavioural analytics.

Bloomi is built so that the parent is in charge. A parent creates the account and the child’s profile and can change or delete anything (a second parent the family’s owner invites can change things, but deleting a child or the family stays with the owner). We do not knowingly collect information directly from a child other than what play creates (progress, the drawings made in the studio, and the short requests a child sends to the parent). If you think a child has given us personal information without a parent, write to [email protected] and we will delete it.

• We do not sell, rent or trade your data.
• We use Google Firebase (sign-in and a database) to run Bloomi. Google acts as our service provider and keeps your data on its servers in Saudi Arabia.
• Authorised people on our team can see account data when it is needed to run Bloomi or to help you with a request.
• If you sign in with Google or Apple, that company tells us your name and email address (if you allow it). We tell it nothing about your family.
• “Read to me” speaks with the voices built into your phone or browser. Bloomi sends nothing for it; a few browsers offer online voices, and then the browser’s maker may receive the sentence being read.
• We may share information if the law requires it.

• Your data stays while your account exists. When you delete your account in Settings, we delete your family’s data from our database straight away; Google may keep copies in its backups for a short time.
• Pairing codes expire after 10 minutes, QR codes after 60 minutes, and invites for a second parent after 48 hours.
• Data is kept in Google’s data centres in Saudi Arabia.

• Download your data: Settings → Download my data.
• Change things: edit your profile or a child’s profile in the app.
• Delete a child: open the child’s page and delete the child; their ratings, items, drawings, requests, game progress, missions and the devices linked to that child go with them (a family device stays: it belongs to the whole family).
• Delete your account: Settings → Delete my account.
• Unlink a device at any time: from the child’s page, or, for a family device, from the children page.
• Parents in a family: the family’s owner can remove a second parent, and a second parent can leave, at any time in Settings. A second parent’s download and account deletion cover only their own account (and their place in the family); the family, its children and its data stay with the owner, who alone can delete a child or the family.
• Depending on where you live (for example the EU, the UK or Saudi Arabia) you may also have rights to access, correct, delete, restrict or move your data, to object to its use, and to complain to your data-protection authority. Write to [email protected] and we will help.

Connections are encrypted (HTTPS). Access rules mean only your family’s signed-in devices can read your family’s data, a child’s device can only reach its own child, and a family device only your family’s children, never the parent area. No system is perfectly secure; if you notice a problem, write to [email protected].

Bloomi keeps small settings on your device: language, sound on or off, that a child has seen the welcome, and game saves. There are no advertising or tracking cookies.

If we change this policy we will change the date below and tell you in the app when the change matters. Last updated: 2026-10-07.