Privacy
Last updated 2026-07-03
The model
Bloom stores your data on your Mac and has no server-side storage. AI requests pass through a relay that is stateless by design — it forwards your request and keeps nothing. Live audio doesn't even do that: it streams directly from your Mac to the provider, authorized by a short-lived token the relay mints.
What goes where
- Form fills and document extraction — sent to Anthropic (Claude) via the relay, only when you trigger them. Anthropic's commercial API terms do not permit training on this data.
- Live voice — streamed directly from your Mac to OpenAI's Realtime API while a session is active, authorized by a short-lived token minted through the relay. The audio never touches Bloom's relay.
- Meeting transcription — streamed directly from your Mac to AssemblyAI while you're capturing a meeting, authorized the same way.
- Spoken replies — text sent to a speech-synthesis provider via the relay.
- Connected services (Calendar, Notion, Slack, …) — read and written directly between your Mac and the provider, with your OAuth tokens held in your Mac's Keychain. Raw service data never transits Bloom's relay — only the minimized brief summary your Mac prepares.
What never happens
- No Bloom account; no Bloom database of users or content.
- No analytics, no trackers, no cookies — in the app or on this site.
- No background sends: your data leaves only when you trigger it, and every request is audited locally.
The full promises, versioned, are on the Trust page.