PT Agent

PT Agent · by Bloomday

Privacy Policy

Last updated 16 October 2026

This policy explains how Bloomday operates PT Agent (“PT”, “we”, “us”) at pt.bloomday.io and handles information when you use it.

1. Information PT handles

Your account and conversations
Your phone number or messaging identifier, account identity, invitation and trial status, preferences, instructions, messages, attachments you submit, generated answers and delivery records.
Accounts you connect
Depending on the service and permissions you choose: email addresses, message headers and content; calendar event details; client names and contact details; workouts, progress, check-ins, bookings and other records visible in an authorized coaching account. Coaching records can include sensitive health-related information.
Connection and technical records
OAuth permissions and tokens, or credentials you enter into a secure connection form for supported browser-based services; account sessions, consent and action records, read results and summaries, service errors and usage information. Infrastructure providers may process IP addresses and connection metadata to operate and protect the service.

Provide only information you are entitled to share. Coaches are responsible for informing their clients and obtaining any permission needed to use their records with PT. Do not send passwords in ordinary messages; use the relevant secure account-connection flow.

2. Why we use information

We use information to identify your account, connect the services you request, answer questions, summarize available records, prepare drafts, carry out authorized actions, maintain conversation continuity, deliver enabled reminders or reviews, and investigate service failures or abuse. PT’s features depend on the services and permissions enabled for your account.

3. Google account data

Connecting Google is optional and happens on Google’s consent screen. PT receives an account identifier and email address to bind the connection to your PT account. The current integration offers these permissions:

  • Send Gmail: send an email on your behalf when you authorize the particular action through PT.
  • Read owned calendar events: retrieve event details, such as titles, dates, times, descriptions, locations and attendees where present, to answer scheduling questions.
  • Write owned calendar events: create, update or delete events on calendars you own when authorized through PT.

PT does not request Gmail inbox-reading permission and does not fetch or search existing Gmail messages. Email recipients and content come from your instructions or other information you provide. These capabilities require the corresponding permission; granting account access does not itself authorize every possible action. PT retains encrypted access and refresh tokens so it can provide the connected features without asking you to sign in each time. Google passwords are not collected by PT’s OAuth flow.

Relevant Google data and derived summaries can be included in requests to our AI processors and in replies delivered to your messaging account. If you authorize an email or an event involving another person, its contents may also be disclosed to the recipients or attendees you specify.

PT’s handling of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used for the user-facing assistance described here. We do not sell it or use it for advertising, credit decisions or surveillance. Data obtained through Google Workspace APIs is not used to develop, improve or train non-personalized AI or machine-learning models, including general-purpose models.

Human access to Google data is limited to your affirmative permission to inspect specific information, necessary security or bug investigations, legal requirements, or permitted internal operations using aggregated data. We do not use your private email or calendar content for unrelated human review.

4. AI processing and other service providers

PT sends relevant conversation context, connected-account results, documents or screenshots to AI services to interpret requests and produce answers. Anthropic is the currently selected primary AI provider; OpenAI is also integrated and may process supported tasks or media. This is processing to deliver PT’s features, not a claim that your data stays entirely on your device.

  • Fly.io: application hosting, storage and cloud-browser infrastructure. PT’s main application is hosted in Sydney, Australia.
  • Anthropic and OpenAI: AI inference and supported content processing.
  • Messaging providers: Sendblue for the Messages channel, and Meta/WhatsApp or Twilio when the corresponding channel is enabled. Providers process the content and delivery metadata sent through their channel.
  • Connected platforms: Google, Microsoft and the coaching services you connect receive requests needed for the features you use.

These providers can process information outside Australia, including in the United States and other countries where they operate. Their infrastructure, security and retention practices also apply; PT does not promise Australia-only processing or zero provider retention. We share data to operate the features you use, not with advertising networks or data brokers. Disclosures may also be necessary to meet legal obligations or protect the service. Any transfer of Google user data through a business ownership change requires prior user consent where Google’s policy requires it.

5. Storage, security and retention

PT stores account, conversation, connection, task and audit records on its server. Google tokens and saved credentials for supported browser connections use application-level encryption. The main application’s persistent volume is encrypted, public pages use HTTPS, and account access is authenticated. These measures reduce risk but do not make any online service risk-free.

Retention depends on the record. Temporary account links expire, and some cached read results and browser-job content are periodically removed. Conversation history, answers, consent/action records and operational records can remain after an account is disconnected. There is currently no single automatic deletion deadline covering every category.

Disconnecting Google removes PT’s stored tokens for that connection and attempts to revoke the Google grant. You can also revoke it directly in your Google Account connections. Disconnecting supported browser accounts removes their saved connection, cached account data and browser session; cleanup may wait if the browser service is temporarily unavailable. Neither action removes copies already delivered to your phone, email recipients or other services.

You can close your PT account yourself on your accounts page. PT stops at once; your conversation history, what PT remembered and your connected-account data are kept for 30 days so you can reopen the account with everything as it was, and are then deleted. For deletion of remaining PT-held information, contact us below. We verify the request, remove data that is no longer needed, and explain any records that must be retained for security, disputes or legal obligations. Backup copies and provider-held records may remain subject to their applicable retention processes.

6. Cookies and public pages

The public homepage and policy pages do not set cookies, use tracking pixels or load advertising or analytics scripts. Sign-in and account pages use necessary cookies for authentication, request protection and convenience, such as remembering a phone-number entry. Hosting and network providers may still process technical request metadata.

7. Access, correction, deletion and complaints

Email goolen98@gmail.com to request access to, correction of or deletion of your information, ask about a connected account, or make a privacy complaint. Identify the account and describe the request, but do not email passwords, tokens or unnecessary client records. We may need to verify your identity and authority before acting.

We will review the request, contact you if more information is needed, and explain the outcome or any reason we cannot fulfil it. If a privacy concern remains unresolved, you may contact the Office of the Australian Information Commissioner, where applicable.

8. Updates

We will update this page when PT’s data practices change. Material changes will be brought to users’ attention, and new uses of Google data will require renewed consent where applicable. The date above identifies this version.