Security and your data

How Bloom connects to each platform

Bloom never asks for the password to your Instagram, Facebook, X or TikTok account. You sign in on the platform’s own screen, the platform asks whether Bloom may post for you, and it hands Bloom a token that can do only what you approved. You can take that permission away at any time from the platform’s own settings, without telling Bloom.

Bluesky works differently because Bluesky does: you create an app password in Bluesky’s settings, which is separate from your main password and can be revoked there whenever you like. Bloom never needs your main Bluesky password.

Bloom asks each platform only for the permissions it uses to publish what you schedule. The integrations page lists what it can post on each one.

What is stored, and how

• Connection tokens are encrypted with AES-256-GCM when Bloom saves them.
• Your Bloom password is never stored. Bloom keeps a bcrypt hash of it, and passwords must be at least eight characters.
• Your posts and media are stored so they can be published at the time you chose: 500MB of media on the free plan, 10GB on Pro and Plus.
• Your income ledger, if you use it, is visible only to you in your account. It is typed in or imported by you; Bloom does not connect to banks or payout accounts.

Bloom does not sell your data or use it for advertising, and there are no advertising trackers in the app. The privacy policy is the full statement.

Getting your data out, and deleting it

Download everything. From inside the app you can download a file of everything Bloom holds about you. The download link works for 90 seconds and then expires. Your stored platform connections are deliberately left out of the file, so the export cannot be used to post as you.

Delete your account. You can permanently delete your account from inside the app; Bloom asks for your password first. There is also a public page explaining how.

Disconnect a platform. Remove any connected account in Bloom, and revoke Bloom’s access on the platform’s side as well if you want it gone at both ends.

When a scheduled post fails

Bloom checks for due posts every 30 seconds. If a platform refuses a post for a temporary reason, Bloom tries again after three minutes and again after fifteen. If it still fails, you get a push notification, and an email unless you turned email alerts off, with the choice to retry, post it yourself or dismiss it. Bloom does not keep retrying silently, and it does not post late without telling you.

What Bloom does not have yet

• No two-factor sign-in. Your Bloom account is protected by its password. Use a long, unique one.
• No team access controls. Each account is for one person, so there is nothing to share and no roles to manage.
• No independent security audit to cite. Bloom is a small product from The Ken Dolls LLC in Texas. If you find a problem, write to support and a person will answer.

Frequently asked questions