Make a tiny habit part of your day.

Your plant does not wilt and your progress is not taken away. Come back when you can, or make the action smaller.

This owner-test preview is free; there is no subscription or payment step. It is not verified for general use.

You need to sign in to get started. Once your garden is available on the device, you can work locally during a connection interruption and sync when connected again. Signing in and syncing need an internet connection, and online service may be interrupted. Sign-in options depend on the available providers.

Bloomstep uses a sign-in service from Microsoft. Depending on your chosen provider, the sign-in page may show a Microsoft service address such as ciamlogin.com. Enter your password only on the genuine Google or Microsoft sign-in page you chose; Bloomstep does not collect your password.

Email store-developer@outlook.com for support or privacy requests, including when you cannot sign in. After sign-in, you can also use the app's private feedback option. Do not include passwords or sensitive habit details. For a non-sensitive bug, use the project's public GitHub issues; posting requires a GitHub account and the report is public. Never post private records, account exports, credentials or privacy requests there. Feedback is not an email signup, and a reply or response time is not guaranteed. This website does not collect contact details or offer a mailing list.

Use Settings to export your records as JSON. The app also has deletion controls for habits, private feedback and your cloud account data. Offline deletion requests wait for sync; exported files and provider backups are separate copies.

No. Bloomstep is a habit-building tool, not medical care or treatment. Choose actions that are safe for you. It is designed for ages 16 and up.

This preview installer is not digitally signed, so Windows may show an unknown-publisher/reputation prompt. A warning alone doesn't establish malware, and we cannot guarantee safety. Not all unknown programs are malicious, as Microsoft explains. Before opening a file, compare its source, architecture, exact filename and SHA-256 with the current releases page. A matching SHA-256 verifies that the bytes match the published checksum; it does not prove the file is safe or digitally signed.

An unknown-reputation prompt is different from a warning that identifies a known-malicious or dangerous file, and from a download blocked by your organization or device policy. For those malware or policy blocks, stop; do not try to override them. If an Edge or Windows prompt is unclear, cancel and ask your device administrator.

Only for an unknown-reputation prompt, if the exact source, filename and SHA-256 match, your device policy permits the action, and you understand and accept the risk, Windows may offer More info → Run anyway. If it does not appear or any check is uncertain, cancel. Cancellation is always an option. Leave SmartScreen, antivirus and Safe Browsing enabled; do not bypass a managed policy or use elevation as a way around a warning. This installer is intended for your Windows account and does not need administrator rights.

Microsoft's guide to Edge warnings explains how SmartScreen checks downloads. Keep protection enabled; your browser's wording and available options may differ.

Bloomstep is an early, unsigned Windows app for trying tiny, routine-linked habits, check-ins and a personal growing garden. This version is for designated owner testing only; it has not been verified for general use. Sign-in is required, and some features and sign-in options are still being refined. It is not a complete release or medical care. There is no Microsoft Store version yet. Private feedback is available in the app after sign-in.

Draft privacy notice for the limited preview; updated 12 October 2026. Bloomstep is Sampath Kumar's personal independent project. Sampath Kumar is responsible for how the project uses your information. Bloomstep is not operated by Microsoft, and Microsoft's hosting or Sampath Kumar's employment does not mean Microsoft endorses the app.

What is processed and why

When you sign in, Bloomstep syncs your recipes, check-ins, reflections, feedback and basic account settings to your private account. Your sign-in provider handles your sign-in and the identity details it requests; Bloomstep uses the returned identity to give you account access. Bloomstep also keeps service records about when feedback arrives and when a team reply is sent. These are separate from optional app measurements. Do not store medical records, passwords or other sensitive information in Bloomstep.

Website and app measurements are optional and are not required to download or use the app. If you opt in, they help us understand broad product activity; they are not advertising profiles. The website choice resets when you reload the page. The app choice is stored on your device. You can turn either choice off to stop future optional measurements. This does not stop information needed to provide your account or respond to a support request. This notice does not claim compliance with a particular privacy law or certification; the rights that apply depend on where you live and the law that applies.

Optional app measurements are off by default. If enabled, limited technical error reports may include an error category and where it occurred, but not the error message, technical trace or your habit or account text. Some unexpected app closures may not be captured, so these reports do not show how often the app crashes. A separate optional reminder choice may record when you enable or disable in-app reminders and whether they remain enabled after 30 days. It does not tell us whether Windows allowed or delivered a reminder, and it does not include your habit text, location or complete reminder history. Turning off either choice stops future records; previously synced records follow the retention and deletion rules below.

Hosting and other services

Microsoft Azure hosts this website and its services. Azure Cosmos DB stores private account records, and Microsoft Entra External ID handles sign-in. Google or Microsoft personal accounts are involved only if you choose that sign-in option; availability depends on the provider setup. GitHub hosts the project's source files and downloads and handles public bug reports under its own policies. These services may process network and security information independently of your measurement choices.

No third-party product analytics tools are enabled on the public website. A separate testing website uses Google Analytics only after a tester opts in; test visits have been received there, but that does not mean customer activity or analytics are enabled on the public site. It does not show that people installed or used the app. This release does not include an advertising, payment or AI service; any future AI feature would be explained and optional.

Retention and deletion boundaries

Optional app measurements are kept for 396 days from when the activity originally happened (13 months). Daily website counts and page-comparison records are kept for up to 90 days. Records of requests to Bloomstep's services and daily summaries are kept for 30 days. A temporary random code helps avoid duplicate website counts for up to five minutes, then is removed during subsequent service activity.

Your garden, feedback and settings do not expire because you stop using the app. They remain until you use the matching deletion control. Deleting an account or record removes its active content, but a small marker remains to prevent an offline device from bringing deleted content back when it syncs. Turn off optional measurements to stop future event records. Use Settings to export or delete your records. Offline deletion requests wait until they can sync; exported files are separate copies you control.

Cloud sync capacity is limited in this preview, and online service may be unavailable at times. When that happens, the app indicates the service is unavailable; your local garden remains on your device.

Azure backup settings checked on 10 October 2026 specify backups every four hours, an eight-hour retention setting and storage in more than one geographic region. These settings do not guarantee that a backup will be available or that a complete restore will work. This preview does not promise a recovery service or a recovery deadline. Deleting information from the active database does not immediately remove it from existing backups, and we do not know exactly when providers delete backup copies. A test using a local copy of the service checked that deletion markers remain after an app restart; restoring from Azure backups and keeping those markers after a restore have not been tested. We do not know whether restoring a backup could bring back deleted information. Retention periods for provider security logs, sign-in records and support email copies are also unconfirmed.

Contact and rights requests

For support or a request to access, correct or delete your information, email store-developer@outlook.com. You do not need to sign in to email. Private in-app feedback is also available after sign-in; Settings offers export and deletion controls. Include only the information needed to explain your request. We may need to confirm account ownership. A response time is not guaranteed. Where applicable, you may also contact your local data-protection authority.

What is not yet confirmed: how long providers keep security logs, sign-in records, support email copies and backup copies, and how Azure restores affect deleted records. This notice does not claim these details are resolved. Do not post personal information or privacy requests in public GitHub issues; use that route only for non-sensitive bug reports.