Effective as of 29 May 2026
Thank you for using our mobile application BloomFit - Cycle Workout Coach ("BloomFit"), visiting our website at https://bloomfit.topmusetech.com and/or communicating with us via email or text or our social media accounts, if any (collectively, the “Services”).
For the purposes of data protection and privacy laws, Tiya Pte. Ltd. and Topmuse Pte. Ltd. ("we" or "us") are joint controllers for the processing of your personal information. We are committed to protecting your privacy through our data practices described in this Privacy Policy.
This Privacy Policy describes:
For the purposes of this Privacy Policy, the terms “personal information” and “personal data” are used synonymously. This Privacy Policy does not apply to our data collection activities offline or otherwise outside of the Services (unless otherwise stated below or at the time of collection).
Residents of certain U.S. states have privacy rights detailed in our Privacy Notice to US Residents. To the extent that there is a conflict between this Privacy Policy and the Privacy Notice to US Residents, the latter will control.
BY USING THE SERVICES, YOU EXPLICITLY CONSENT TO THE COLLECTION, USE, TRANSFER, AND STORAGE OF YOUR PERSONAL DATA FOR PROCESSING AS DESCRIBED IN THIS PRIVACY POLICY. We reserve the right to change and may periodically update this Privacy Policy prospectively effective upon the posting of the revised Privacy Policy on our website or within the Application. Where required, we endeavour to notify you of material changes to this Privacy Policy by posting a notice on BloomFit or via in-app notification. Your continued use of our Services following the posting of changes to the Privacy Policy or any notification to you shall mean you accept those changes. To the extent any provision of this Privacy Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.
The designated joint controller representative is Topmuse Pte. Ltd., which is entitled to act on behalf of Tiya Pte. Ltd. and is responsible for processing and responding to data requests made by you or any government authority. If you have questions about how we collect, use, process or protect your personal information, or if you have any requests in respect of your personal information, our contact information is as follows:
We will respond to your requests in accordance with applicable laws and may take additional steps to verify your identity before fulfilling your request. These steps may include verifying your account details. You may also designate an authorized agent to act on your behalf but we reserve the right to verify the agent's identity and authority, and may deny any requests in appropriate circumstances.
We endeavor to respond to all requests in a timely manner. Except as permitted under applicable data protection laws (such as GDPR or CCPA), our response to your standard data privacy requests is generally free of charge. For more complex or repetitive requests, we may charge a reasonable fee for processing your request to the extent allowed by law. We will inform you of such fees before proceeding with your request. If you have any unresolved concerns about your privacy rights or personal data protection that we could not address adequately, you may contact your local privacy and personal data protection authority for further assistance.
(I) Information you provide when you create, update your profile or use our Services
Category | Description |
|---|---|
User Data | You do not need to provide any personal identifiers (such as name or phone number) to start using BloomFit. You may provide an alias or username. When you use BloomFit, we will collect information such as your country, timezone, device language settings and subscription status in order to enable you to use the features. We collect some of this data from your device. For more information about how we collect and use this data, see ‘Your general (non-precise) location’ in the Usage Data category. During the onboarding survey, we also collect your name, fitness goals, workout type preferences, preferred exercise time, and daily duration to build your baseline profile. When you send us feedback or requests, we may collect your real name and email address etc as well as the contents of those feedback or requests. |
User Content | All username (pseudonym), information, text, audio/sounds or images or any other materials whatsoever, whether input, entered, uploaded, transmitted or used by you in conjunction with BloomFit (collectively “Submitted Content”) are collected by us. Do note that your Submitted Content may include fitness and wellness data (see below). The Output generated using your Submitted Content are also collected by us. The Output will include localized cycle-aware daily status summaries, personalized training plans, and customized exercise advice created based on your Submitted Content as well as historical training records that you choose to save for future reference within the app. We may process your Submitted Content and Output for purposes of enabling you to use the mobile app, monitoring for and preventing abusive or harmful use of our Services, conducting technical analysis to improve the quality of our Services on a de-identified basis, or for analytics purposes. |
Fitness & Wellness Data | We collect and process Fitness and Wellness Data in order for you to better track your physical condition and fully utilize the cycle-synced coaching features of BloomFit. During our onboarding survey, you may voluntarily provide certain fitness and wellness parameters, including: Height and weight Health indicators such as BMI Gender Age / date of birth Lifestyle and daily energy baselines Fitness / wellness objectives, workout preferences, and activities To maximize data privacy, these baseline metrics are stored locally on your mobile device and are not uploaded to our servers unless strictly necessary to process specific real-time AI features. If your menstrual cycle history, period duration, or symptoms data is missing or unavailable from Apple Health, BloomFit will present a questionnaire page allowing you to manually input your last period start date, period length, and cycle duration. In this version of the App, all such manually submitted questionnaire data is NOT transmitted to our servers or written back to your Apple HealthKit database. Some of these Fitness & Wellness Data that you provide to us may be considered sensitive data or classified under special category of data. When you voluntarily take steps to submit such data to us via the mobile app, you may be asked to provide your explicit consent before you can use the features of BloomFit. By you choosing and taking steps to use our Services and providing information to us, you also consent to the (continued) collection, use and processing of your Fitness & Wellness Data and, unless otherwise stated in this Privacy Policy, we use this consent as one of the legal grounds for the processing of such data. You can withdraw your consent at any time, by not using the BloomFit app (and its features) or sending us a request to delete your data or simply contacting us for assistance. You may refer to paragraph 6(C) below for more information. We do not process such data to render (and we do not render) any professional medical advice or process the data for any diagnostics purposes. |
Optional data you may choose to share with us | |
Category | Description |
Survey and User Research Data | When you respond to a survey or take part in user research, we collect and use the personal data you provide. |
Apple Health (HealthKit) Data | If you choose to connect Apple Health ("HealthKit") with BloomFit, we will request your permission to read certain categories of health and fitness data from HealthKit. We will only access the specific data types that you explicitly authorize. These may include (depending on your selection): Active energy burned Height, weight, BMI Steps, walking/running distance Heart rate (including resting heart rate (RHR), heart rate variability (HRV), and active workout zones) Sleep tracking metrics, respiratory rate (RR), blood oxygen saturation (SpO2), and wrist temperature fluctuations Menstrual flow intensity, period logs, and related reproductive metrics We only use HealthKit data for the following purposes: To calculate your chronic and acute training loads (including ATL, CTL, and ACWR ratios across a 14-to-42-day rolling window) to generate your persistent AI Insights and daily training recommendations To generate personalized workout plans and calculate your proprietary physiological scoring metrics, including your Recovery Score, Readiness/Energy Score, and Sleep Quality Score based on your combined biometrics To provide insights, analytics, or personalized recommendations based on your selected data To improve the accuracy and functionality of BloomFit features We do not use HealthKit data for marketing, advertising, or profiling, nor do we share it with third parties except as needed to provide core app functionality or comply with legal requirements. We also do not store or transfer HealthKit data to external services for unrelated purposes. You may withdraw your permission at any time in your Apple Health settings. Once access is revoked, BloomFit will stop collecting HealthKit data immediately, and you may request deletion of previously collected data at any time. |
AI Coach Interactions & Text Memory | The AI Coach features requires the processing of interactive natural language text to function. When you first access the AI Coach, an in-app explicit consent pop-up will appear requesting your authorization. If you choose "Not Now", you will be immediately exited from the AI Coach interface, and no text conversations or memory tokens will be processed or generated. If you explicitly agree to proceed, the AI Coach will automatically synthesize text-based preferences (such as documented fitness boundaries, recurring physical injuries, or routine habits) that you manually type during your chats. These extracted "Memory Tokens" are stored securely on our servers to maintain context across your training sessions. You retain absolute control over these synthesized logs and can manually review, modify, or permanently erase individual memory entries at any time under the Memory Management section within your Settings. |
(II) Information We Get When You Use Our Services
When you use our Services, we may automatically collect information about you and how you use our Services. We only use pseudonymized or anonymised data that have gone through a privacy-enhancement process to protect and improve the functionalities of the Services.
Category | Description |
|---|---|
Usage Data | These are personal information collected and processed when you’re accessing or using the Services. They include: Information about how you use BloomFit. They include information about your activities using the Services (including date and time), such as: account settings interactions with the Services and their features Your technical data. They include: online identifiers such as IP addresses information about the devices you use such as: Your general (non-precise) location. They include country, region, state or timezone. We may learn about this from technical data (e.g. network type, language setting of your device). We need this for: Load and network balancing Security services Enabling you to use the app's features |
(III) Information We Collect from Third Parties
Categories of Third Parties | Description | Data Categories |
|---|---|---|
Payment and transaction fulfillment providers | When you pay subscription fees (where applicable) to access the features on BloomFit. The Apple App store (where you downloaded BloomFit) is responsible for handling any and all payments of In-App purchases. They will collect your payment information such as credit card details and other identification information such as name, billing address, email address. After you provide the requisite information and complete the transaction, a purchasing account will be created and maintained by Apple. Apple will use your personal information to process any purchases, to confirm your orders via email, to make future purchases more convenient for you and to handle, where applicable, refunds. We do not collect or process any personal information save that Apple will provide us with high-level records of non-sensitive transaction information and subscription data (such as order number, time of order, IDFA, user ID, subscription type etc) so that we can activate the paid features for your use or improve the performance of our BloomFit app. | Pseudonymised Payment Transaction Information |
Technical Service Partners | We work with technical service partners that give us certain data. This includes mapping IP addresses to non-precise location data (e.g. country or region, city, state). This makes it possible for BloomFit to provide the BloomFit Service, content, and features. We also work with security service providers who help us protect user accounts. | User Data Usage Data |
Marketing partners | When you download BloomFit through our marketing partners, they provide information about their channel. | Usage Data |
Law Enforcement Agencies | We may receive information from law enforcement about potential violations of our Terms of Use. | User Data User Content |
DO NOT SELL. We do not sell your personal information. We also do not transfer, disclose or share your personal information with third parties, except where the information is necessarily transferred, disclosed and shared with our authorised third-party partners who must use and process your information solely to provide you with the Services on our behalf.
We use your personal information for the following purposes only when it is necessary to do so for valid reasons (such as with your consent, to comply with the law, to provide you with the Services, to protect your rights and interest or to fulfil our legitimate business interests) and in accordance with applicable laws:
Purpose | Legal basis | Personal Information |
|---|---|---|
To allow you to use the Services and generally manage your account. | They are necessary to provide you the Services. | Account Information: Pseudonymised Device ID & Storage Capacity |
To deliver and facilitate the delivery of the Services and to allow you to use the BloomFit features. | They are necessary to provide you the Services. You have provided your consent when you take steps to provide us with certain information or continue to use the features. | User Content |
To support wellness tracking, personalized insights, and activity-based features within BloomFit. | They are necessary to provide you the Services. You have provided your consent by entering data manually or connecting third-party services such as Apple Health. (Note: Questionnaire metrics submitted manually due to missing Apple Health data are processed and saved locally on your device.) | Fitness & Wellness Data, Apple Health (HealthKit) Data: height, weight, steps, heart rate, sleep, last period start date, period length, cycle duration and other metrics you choose to provide |
To allow you to subscribe to the paid Services. | They are necessary to provide the paid Services. You provide consent when you take steps to upgrade to the paid Services or take steps to provide us with certain information to use the premium features. | Pseudonymised Payment Transaction Information: Transaction ID |
To provide you certain additional optional features of the BloomFit service. We will clearly ask for your consent. | Consent | Consent Data |
To better understand how BloomFit users use and interact with the Services. To identify and work on areas for improvement. To optimize the user experience. | We have legitimate interests to develop and improve our products and features for our users. | Activity Information: Activity logs, timestamps, country |
To detect and prevent fraudulent activities, software and tools within the Services and/or employed by end users. To identify a banned account or a device. | It is in our legitimate interests to ensure the security of the environment of our Services and safety of our users. | Fraud Detection Information: Basic device information (eg:brand, model, device system version settings) Device identification information (eg: IDFV, OAID) Device network information (Eg: WIFI, IP address, network connection status) Installed application information (Eg: SDK host application package name and version number) |
To comply with our legal obligations, respond to legal requests, respond to requests from law enforcement authorities (such as police, prisons, courts) as well as exercise, establish or defend our legal rights. | Compliance with legal obligations | User Data Usage Data User Content Survey and User Research Data |
To take appropriate action in respect of intellectual property infringement claims or reports of inappropriate content or activity. | Legitimate interest to protect our legal rights | User Data Usage Data User Content |
To diagnose, troubleshoot and fix issues with the service To discover error frequency and trends to ensure a high level of functionality for the Services. | They are necessary to provide you the Services. | Crash Reporting Information: Crash/ Error information collected from your usage with the BloomFit app |
To provide you with customer and technical support when you have enquiries, provide feedback, when you need troubleshooting, to fix bugs and to assist with any issues you might experience using the Services. | With your consent to resolve your questions. | Customer Support Information: Email, details of the request |
When BloomFit users respond to a survey or take part in user research, we collect and use the personal information as described in the survey or user research. | You provide consent for processing personal information. | Survey and User Research |
To conduct business planning, reporting, and forecasting. For example, when we look at aggregated user data like the number of new sign ups in a country in order to plan new locations to launch our products and features in. | Legitimate Interest Our legitimate interests here include researching and planning so that we can keep running our business successfully. | Aggregated usage data |
To evaluate and develop new features or technologies. | Legitimate interest to improve our products, improve user experience and develop new products for our users. | Synthetic User Content |
We may share your information with other entities in the following situations:
A) Our Related Entities: We might share your personal information with our related entities in the same corporate group to assist us in technical processing operations (such as data hosting, analytics or maintenance), finance, legal, HR or accounting assistance, enhancing security against spam, abuse, fraud, infringement or other wrongdoings, and improving the Services; for corporate audit, analysis, strategic planning, research and development, corporate transactions (for example merger and acquisition, sale of company assets, financing etc); or compliance with applicable law. Each entity within the group may only use your personal information in accordance with this Privacy Policy.
B) Our Authorised Partners: We work with third party vendors to provide the BloomFit app ("Authorised Partners" or "Vendors"). We seek to update our list of Authorised Partners below as soon as practicable. These Authorised Partners process your information only at and according to our instructions. They perform tasks such as hosting, user support, analytics and fraud detection and prevention. For more information, please read the privacy policies of our Vendors.
Vendor | Purpose |
|---|---|
Server hosting, Data storage | |
Statistics and analytics | |
Security and anti-fraud services | |
Statistics and analytics |
C) AI Service Providers and Data Processing
To provide our core AI-powered fitness coaching and wellness insights, we partner with specialized AI providers. Your Submitted Content is transmitted via encrypted APIs for real-time processing to generate your cycle-synced training recommendations.
Provider | Model/Feature & Purpose |
|---|---|
Used for natural language analysis, fitness personalization, and chat conversational insights. |
Regarding these AI partners, we further disclose:
D) Government Agencies: In order to combat fraud and illegal activity, we may process and disclose information to other organizations or provide information to government agencies in response to any lawful request. If required by any government authority or courts for any purposes such as the enforcement of any laws or to prevent their contravention, we may release your personal information as is legally required or permitted.
By default, your personal data is stored on secure cloud infrastructure located in the United States.
In order to provide you with the full range of Services efficiently, your personal information may be accessed by our authorized personnel globally and/or lawfully transferred at our instructions for limited access, use, or processing by our authorized personnel and related entities within the same corporate group around the world.
Because the data protection and privacy laws in the United States and other countries may differ from those of your home country, we ensure that adequate safeguards are in place to protect your personal information. These safeguards include relying on standard contractual clauses, robust data processing agreements, and other lawful mechanisms to ensure a level of protection consistent with this Privacy Policy.
By using our Services and providing information to us, you consent to the storage, transfer, and processing of your information in the United States and other jurisdictions outside your home country. We use this consent and the necessity of performing our contractual obligations to you as the legal grounds for such data transfers.
We will ask for your permission to access your camera or other device functions (where required) so that you may use the features of the app. For example, you can manage your preferences or withdraw your authorization for specific data features at any time. We will also ask for your permission to send you push notifications. You may opt-out at any time by changing the settings on your mobile device.
Upon your written request and successful verification of your identity, we will provide you with a copy of your personal information in an electronic format.
You may, at any time, withdraw your consent for us to collect, use, disclose or transfer your personal information to third parties. You also have the right to rectify or delete your personal information, or limit the processing of your personal information. Upon receipt of your written request, we require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences regarding the same. In general, we shall seek to process your request within thirty (30) calendar days of receiving it. Depending on the nature and scope of your request, you may not be able to access some or all features on BloomFit, and we may have to terminate the End-User License Agreement we have with you. We will notify you before completing the processing of your request. Should you decide to cancel your request, please inform us immediately.
Please note that:
Under applicable laws, you may have the right to obtain a transferable version of your personal information to transfer to another provider.
To exercise your personal information rights, please contact us according to Section 1 "Contact Us" above. You will not be subject to discriminatory treatment for exercising your rights.
You may cancel your paid subscription plan (when it becomes available) any time. If you decide to cancel your paid subscription, you will enjoy the paid features as per the full billing cycle. If you decide to delete the BloomFit app from your mobile device before the paid subscription expires, you may lose your subscription status, your personal information or other related information associated with the account. You will be informed and required to acknowledge the consequences of deleting your account. However, we may retain some information to the extent necessary to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with applicable legal requirements.
You may delete your BloomFit account at any time by logging to your account settings on the app. If you decide to delete your BloomFit account, we will delete or deactivate your account and your personal wellness information (including your fitness history and logged cycle metrics) from our active databases.
Please note that any onboarding or questionnaire data stored locally on your device (such as manually entered height, weight, age, or custom menstrual period history) will not be affected by server-side account deletion; to permanently remove this local data, you must uninstall or delete the BloomFit application from your mobile device.
You may lose your personal information or other related information associated with the account. You will be informed and required to acknowledge the consequences of deleting your account. However, we may retain some information to the extent necessary to serve our legitimate business interests such as to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with applicable legal requirements.
In order to help ensure a secure environment for the Services and safe experience for our users, we are continuously developing and implementing reasonable administrative, technical and physical security measures to protect your personal information from unauthorized use or access and against loss, misuse or alteration. We utilize industry-standard security protocols, including encryption for data in transit and at rest, to safeguard your wellness and fitness information.
While we try our best, we cannot warrant the security of any information transmitted to us through or in connection with the Services, or stored on our or our authorized partners' systems.
Any improper collection or misuse of personal information is a violation of this Privacy Policy and our Terms of Use and should be reported to bloomfit.support@topmusetech.com.
These privacy-enhancing techniques involve modifying or removing certain identifying information from your personal data and information to make it more difficult to link the data or information to you. We only use information that has gone through this privacy-enhancement process if we are using them to improve functionalities of the Services.
Generally, we will store your personal information only for the time period necessary:
Once we determine that the retention of your personal information is no longer necessary for the above purposes, or that retention is no longer necessary for any legal or business purpose, we will cease to retain your personal information, or anonymise the personal information so that it can no longer be used to identify any particular individual.
We take our responsibilities to the BloomFit community very seriously. We also believe in protecting children's privacy online. The BloomFit app is not meant for use by persons under the age of 18 years old. If you are under the age of 18, please do not use our BloomFit app in any manner. If you are a minor, you may only access and use the BloomFit app with the consent and under supervision of your parent or legal guardian. Please note that you must be of legal age according to the laws of your home country to make any In-App purchases on BloomFit.
We do not knowingly collect personal information and data from anyone under the age of 18 and the BloomFit app is not directed at anyone under the age of 18. Any person who provides their personal information to us through our Services explicitly represents that they are 18 years of age or older. If we become aware that someone under 18 years of age provided us with their personal information, we will close the account of that person and promptly delete their information or remove their information to the extent required by law, save when we are under a legal obligation to keep certain information.
If you are a parent or legal guardian of a minor, and wish to review any personal data that may have been unknowingly collected by us about your child or ward, or request that their BloomFit account or personal information be deleted, you may contact us at bloomfit.support@topmusetech.com. We will respond to your requests after verifying the identities of the relevant users and their parents or legal guardians, and obtaining consent (if required under the laws) from the relevant users.
We use third-party services such as Google Firebase and AppsFlyer to help us understand how BloomFit is used and to improve performance and user experience. These services may collect and analyze certain device and usage data, including mobile identifiers, app usage statistics, and crash reports.
These technologies may function similarly to cookies and may involve the collection of personally referable information under applicable laws. This data may be shared with or accessed by the respective service providers to perform analytics, attribution, or to optimize BloomFit’s performance.
We will ask for your prior consent before enabling such tracking technologies, except where they are strictly necessary for the operation or security of BloomFit. You may withdraw your consent any time by adjusting your device settings.
Residents of certain U.S. states have privacy rights detailed in our Privacy Notice to US Residents. To the extent that there is a conflict between this Privacy Policy and the Privacy Notice to US Residents, the latter will control.
Pursuant to the General Data Protection Regulation (GDPR) and the UK Data Protection Act, we now explain the valid legal bases we rely on in order to process your personal information.
We may process your information if you have given us specific permission to use your personal information for a specific purpose, or in situations where your permission can be inferred. You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:
This section applies to you if you reside in Malaysia. In this section, the term “processing” shall have the same meaning as prescribed in the Malaysian Personal Data Protection Act 2010 (“MY PDPA”).
Personal Information of Minors – In respect of personal information relating to a minor (i.e. individuals under the age of 18), you confirm that you are the parent or legal guardian or person who has the parental responsibility for the said minor to consent on his/her behalf to the processing of his/her personal information in accordance with this Privacy Policy.
Obligatory Personal Information – It is obligatory that you supply us your details for fields marked as compulsory (where applicable) when you register an account or use our Services (collectively, “Compulsory Personal Information”). If you fail to supply us with any of the Compulsory Personal Information, we may refuse to, or may be unable to, process your personal information for any of the purposes specified in this Privacy Policy.
Language – In the event of any inconsistency between the English version and the Bahasa Malaysia version of this Privacy Policy, the English version shall prevail over the Bahasa Malaysia version.
** End of Document **