Privacy Policy

1. Introduction

Bloom ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

By using the App, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

We collect information that you provide directly to us and information collected automatically:

Personal Information:

• Name, email address, and profile information
• Authentication data from Apple Sign-In or Google Sign-In
• Profile photos and avatars
• Phone numbers (if provided for future contact)

Content Information:

• Photos, videos, audio recordings, and text notes you upload
• Captions, metadata, and timestamps associated with your content
• Child information (names, birthdays, gender) that you provide

Usage Information:

• Device information (model, operating system, unique identifiers)
• App usage data and interaction patterns
• Performance and error logs
• Subscription status and purchase history

Location Information:

• We may collect location data if you grant permission (e.g., for photo geotagging)
• You can disable location services in your device settings

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App and its features
• Process and store your memories and content
• Manage your account and authentication
• Process subscription payments and manage billing
• Enable sharing features (Circles) with family members you designate
• Calculate and award Blooms (virtual rewards)
• Send you service-related communications
• Respond to your inquiries and provide customer support
• Improve the App and develop new features
• Detect, prevent, and address technical issues
• Ensure security and prevent fraud
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Information Sharing and Disclosure

We share your information only in the following circumstances:

With Your Consent:

• When you explicitly share content with Circle members
• When you choose to make content visible to other users

Service Providers:

• We use third-party services that process your data on our behalf:
  • Supabase (data storage and backend services)
  • RevenueCat (subscription management)
  • Cloudflare Stream (video hosting)
  • Apple and Google (authentication services)
• These providers are contractually obligated to protect your data

Legal Requirements:

• When required by law, court order, or government regulation
• To protect our rights, property, or safety
• To prevent fraud or abuse
• In connection with a business transfer (merger, acquisition, etc.)

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication through Apple and Google
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure cloud storage through Supabase

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Children's Privacy

Bloom is designed for parents and guardians to document their children's memories. We take children's privacy seriously:

• We do not knowingly collect personal information directly from children under 13
• Content about children is uploaded by parents/guardians who have authority to do so
• Parents/guardians are responsible for obtaining necessary permissions
• We comply with applicable children's privacy laws including COPPA

If you believe we have inadvertently collected information from a child, please contact us immediately.

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access:

• Request access to your personal data
• View and download your content through the App

Correction:

• Update your profile information in the App settings
• Edit or delete your content at any time

Deletion:

• Delete your account and all associated data
• Request deletion of specific content
• Note: Some data may be retained for legal or operational purposes

Data Portability:

• Request a copy of your data in a portable format

Opt-Out:

• Disable location services in device settings
• Manage notification preferences in the App
• Cancel your subscription at any time

To exercise these rights, contact us at support@bloom.app or use the in-app settings.

8. Subscription and Payment Information

When you purchase a subscription:

• Payment is processed through Apple App Store or Google Play
• We receive transaction information (subscription status, renewal dates)
• We do not store your payment card information
• Payment data is handled by Apple/Google according to their privacy policies
• We use RevenueCat to manage subscription status and renewals

Subscription Information:

• Subscription plan type (weekly or annual)
• Subscription start and expiration dates
• Renewal status and cancellation information

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze App usage and performance
• Improve user experience

You can control cookies through your device settings, though this may affect App functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence:

• Our service providers (Supabase, Cloudflare, etc.) may be located in different countries
• Data may be stored on servers in the United States or other jurisdictions
• We ensure appropriate safeguards are in place for international transfers

For users in the European Economic Area (EEA), we comply with GDPR requirements for international data transfers.

11. Data Retention

We retain your information for as long as necessary to:

• Provide the App and its services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account:

• Your profile and account information are deleted
• Your content (photos, videos, etc.) are deleted from our servers
• Some information may be retained for legal or operational purposes
• Deletion may take up to 30 days to complete

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@bloom.app.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at support@bloom.app. You also have the right to lodge a complaint with your local data protection authority.

14. Third-Party Links and Services

The App may contain links to third-party websites or integrate with third-party services:

• Apple Sign-In and Google Sign-In (authentication)
• RevenueCat (subscription management)
• Supabase (backend services)
• Cloudflare Stream (video hosting)

We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy in the App
• Updating the "Last Updated" date
• Providing notice through the App or email

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy. If you do not agree, you may stop using the App and delete your account.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@bloom.app

We will respond to your inquiry within a reasonable time, typically within 30 days.

17. Consent

By using the App, you consent to:

• The collection and use of your information as described in this Privacy Policy
• The processing of your data in the United States and other countries
• The sharing of your information as described in this Privacy Policy

If you do not consent, please do not use the App and delete your account if you have already created one.