Privacy Policy

Last updated: March 15, 2026

1. Introduction

Bloom ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use the Bloom mobile application and related services (the "Service").

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and date of birth provided during onboarding.
• Authentication data: We use secure authentication to verify your identity. We do not store your password.
• Health data: Menstrual cycle dates, flow levels, blood color and texture, mood scores, emotional tags, physical symptoms, and notes you choose to log.

3. How We Use Your Information

Your information is used solely to:

• Provide and maintain the Service.
• Display your cycle history, daily logs, and statistics.
• Authenticate your identity and secure your account.

We do not use your data for advertising, analytics profiling, or any purpose other than delivering the Service to you.

4. Data Sharing

We do not sell, rent, or share your personal or health data with third parties. We may share data only in the following limited circumstances:

• Service providers: We use trusted infrastructure providers to host and operate the Service. These providers are bound by strict data processing agreements.
• Legal requirements: If required by law, court order, or governmental request.

5. Data Storage & Security

Your data is stored in a secure PostgreSQL database. All communication between the app and our servers is encrypted using TLS. We use industry-standard security practices to protect your information, including industry-standard authentication protocols.

6. Your Rights

You have the right to:

• Access your personal data at any time through the app.
• Update or correct your profile information.
• Request deletion of your account and all associated data by contacting us.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will permanently remove all your personal and health data within 30 days.

8. Children's Privacy

Bloom is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@bloomapp.com.