Bloom is licensed by your residence and runs on iPads your team deploys —
it isn't a consumer-direct app, and there is no general-purpose API into
your data.
One residence, one tenant.
Each facility runs on its own Postgres instance with row-level
security. There is no cross-facility data bridge — by design,
not by configuration.
Private things stay private.
Resident journals, gratitude entries, and personal goals are
database-scoped to the resident. Staff cannot read them, and the
rule is enforced at the storage layer, not just in the UI.
No ads, no analytics SDKs.
No Facebook SDK, no Google Analytics, no tracker of any kind
inside the apps. The only outbound traffic is to your facility's
backend and Apple Push Notification service.
White-labeled for your residence.
Your name on the iPad, your colors, your activities, your library.
Your Lumon account manager handles provisioning; you stay in
control of what residents see.