Last updated: June 2, 2026
Evabloom ("we", "us") provides adaptive, cycle-aware fitness coaching. This Privacy Policy describes what we collect, how we use it, and the choices you have. By using Evabloom you agree to the practices described here.
When you create an account we collect your email address, an encrypted password (or OAuth identifier), display name, and optional profile details you provide during onboarding (age, height, weight, training goals, unit preferences).
We store the workouts you generate, build, log, and complete: exercises, sets, reps, loads, rest, notes, perceived effort, custom templates, and progression history. This data powers your phase-aware programming, progressive overload, and anatomy insights.
If you choose to track your menstrual cycle, we store period start dates, cycle length, predicted phase windows, and any delayed-start adjustments you log. This is sensitive health information and is used solely to adapt your training and recovery guidance. We do not sell or share cycle data with third parties.
Post-workout feedback ("how did that feel?"), recovery status, fatigue, sleep, and stress signals you log are stored against your account and used to adjust future sessions.
Payments are processed by Stripe. We do not store full card numbers on our servers. We retain subscription state (plan, status, renewal date, trial expiry, beta access codes) so we can grant or restrict access to premium features.
We collect privacy-respecting aggregate analytics (page views, device type, country) via our hosting platform to understand product usage. We do not use third-party advertising trackers.
We share data only with the processors required to run the service: our hosting and database provider, Stripe (payments), and email delivery providers. We do not sell your personal information.
You can access, export, correct, or delete your data at any time from your profile, or by emailing us. EU/UK residents have rights under GDPR; California residents have rights under the CCPA. We honor verified requests within 30 days.
Data is encrypted in transit and at rest. We retain data while your account is active and delete it within 30 days of account closure, except where retention is required by law (e.g., payment records).
Evabloom is not intended for users under 16. We do not knowingly collect data from children.
Questions or privacy requests: support@evabloom.app.