Privacy policy
Last updated: 26 October 2026.
Bloomento is run by Amr Hamdy ("we"). This policy explains what Bloomento stores, why, who helps us run it, and what you can ask of us. It covers bloomento.com and Bloomento for Google Meet.
What we store. Your account: your name, email address, a hashed password (never the password itself), your Organization and its Team time zone, and who your Manager is. What you write: Notes, Points, Comments, Actions, Tags and the Report's settings, along with when One-to-ones are planned, start and end, and how long was spent on each item. If you turn on push, the browser's push address for your device. To keep you logged in and protect the service: login sessions, the IP address and browser of each session, and short-lived counts used to limit repeated login attempts.
Who sees it. Your Organization decides who sees what: a Manager and their Report see what they share in their One-to-one; a Manager's private Notes are seen only by them; Admins of your Organization manage its people. We look at your data only to keep the service running, to fix a problem you report, or when the law requires it.
Why we use it. Only to run Bloomento for you: to show your One-to-ones, send the emails and push notifications you asked for, and keep your account secure. We don't sell your data, don't show ads, and don't use analytics or tracking cookies.
Cookies. Bloomento uses only the cookies it needs to keep you logged in, including inside Google Meet's side panel, and to remember a few of your choices. No advertising or tracking cookies.
Who helps us run it. Cloudflare hosts the app. Neon stores the database, in Frankfurt, Germany. Resend sends our emails (sign-up, invites, password resets, reminders). When you use Organize, the text of the Notes being organized is sent through OpenRouter to an AI model to suggest Points; it is used only to answer that request. Your browser's push service (from Apple, Google or Mozilla) delivers push notifications. Each of them processes data only to provide their service to us.
Google user data. Bloomento for Google Meet opens Bloomento in Meet's side panel. You log in with your Bloomento email and password, not your Google account. The add-on doesn't read your Google account, email, calendar, contacts or the meeting's audio, video or chat, and it receives no Google user data beyond what Meet needs to show the panel.
How long we keep it. For as long as your account is active. A Manager or Admin can Deactivate someone (their data stays, read-only) or Delete a Report, which removes them and everything in their One-to-ones for good. Emails' links expire after a short time. Recovery copies kept by our database provider expire within 30 days.
Your choices. You can ask us for a copy of your data, to correct it, or to delete your account and what you wrote, by emailing amr.ahmed.ismael@gmail.com. If your account belongs to an Organization, we may first ask its Admin, since they manage it. You can turn push off at any time in Settings.
Security. Data travels over HTTPS, passwords are stored hashed, and access to the database is limited to the service itself.
Children. Bloomento is for work teams and isn't meant for anyone under 16.
Changes. If we change this policy, we update the date at the top; for a significant change we tell you in the app or by email first.
Contact: amr.ahmed.ismael@gmail.com.