Privacy

Last updated 2026-07-03

The model

Bloom stores your data on your Mac and has no server-side storage. AI requests pass through a relay that is stateless by design — it forwards your request and keeps nothing. Live audio doesn't even do that: it streams directly from your Mac to the provider, authorized by a short-lived token the relay mints.

What goes where

• Form fills and document extraction — sent to Anthropic (Claude) via the relay, only when you trigger them. Anthropic's commercial API terms do not permit training on this data.
• Live voice — streamed directly from your Mac to OpenAI's Realtime API while a session is active, authorized by a short-lived token minted through the relay. The audio never touches Bloom's relay.
• Meeting transcription — streamed directly from your Mac to AssemblyAI while you're capturing a meeting, authorized the same way.
• Spoken replies — text sent to a speech-synthesis provider via the relay.
• Connected services (Calendar, Notion, Slack, …) — read and written directly between your Mac and the provider, with your OAuth tokens held in your Mac's Keychain. Raw service data never transits Bloom's relay — only the minimized brief summary your Mac prepares.

What never happens

• No Bloom account; no Bloom database of users or content.
• No analytics, no trackers, no cookies — in the app or on this site.
• No background sends: your data leaves only when you trigger it, and every request is audited locally.

The full promises, versioned, are on the Trust page.