Privacy Policy

What we collect

• Account: your email address (used to sign in — Bloom has no passwords).
• Profile: your first name and, if you add them, your due date or last menstrual period date, partner's name, and hospital preference.
• Your journey: anything you record in the app — diary entries and photos, bump photos, calendar events, weight, kick counts, contractions, sleep, hospital bag progress, baby name shortlist, and your birth plan.
• Service records: minimal logs needed to run the app safely, such as when invite or feedback emails were sent (used for rate limiting).

Much of this is health-related information, which Australian law treats as sensitive. We treat all of it that way. Bloom has no advertising trackers and no third-party analytics.

How we use it

Only to run Bloom for you: showing your journey back to you, sending the emails you ask for (sign-in codes, partner invites, appointment reminders you switch on, and your feedback to us), and protecting the service from abuse. We do not sell your information, share it with advertisers, or use it for marketing.

Partner sharing — only if you choose it

Your data is private to your account. If you invite a partner, they get read-only access to your journey after accepting an emailed invite. You can revoke their access at any time from Profile → Partner Access, effective immediately.

Where your data lives

Bloom runs on trusted infrastructure providers acting on our behalf: Supabase (database, sign-in, and photo storage — hosted in Singapore on AWS), Vercel (serving the app and this website), and Brevo (delivering the emails described above). Each processes your data only to provide their service to Bloom. Because some infrastructure is located outside Australia, your information may be stored overseas; we choose reputable providers with strong security practices.

Data is encrypted in transit, each account's data is isolated by database-level access rules, and photos live in private storage accessible only via expiring links.

How long we keep it — and how to delete it

We keep your data until you delete it. You can delete individual entries at any time, or permanently delete your entire account — including all entries, photos and your sign-in identity — from Profile → Delete account in the app. Deletion is immediate and cannot be undone. Emails already delivered to inboxes (like invites you sent) can't be recalled.

On your device

Bloom stores your sign-in session and small preferences (like which articles you've read) in your browser's local storage. There are no advertising cookies. Signing out clears the sensitive parts.

Your rights

You can access and correct your information directly in the app, and delete it as described above. For anything else — questions, access requests, or complaints — contact us and we'll respond promptly. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Children

Bloom is intended for adults and is not directed at children under 16.

Changes and contact

If this policy changes, we'll update this page and the date at the top. Contact: [contact email to be published before launch].