Privacy Policy

Bloom (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our pregnancy journal application. By using Bloom, you consent to the practices described in this policy.

Account Information:Name, email address, and authentication data provided through our authentication provider (Clerk). We do not store your password.

Pregnancy Information:Due date, baby name (optional), first-time mom status, flower type preference. This data is provided voluntarily during onboarding.

Content You Create:Diary entries, voice notes, photos, videos, milestones, letters to your baby, Future Echoes, appointment details, hospital bag preferences, and baby name explorations.

Usage Data:We collect anonymized analytics data (page views, feature usage) through Vercel Analytics and Speed Insights. This data does not identify you personally.

Payment Information:Payment processing is handled entirely by PayMongo. We do not store your credit card number or payment account details. We only store subscription status and payment reference IDs.

We use your information to:

• Provide and maintain the Bloom service
• Generate your pregnancy timeline and album
• Power AI features (Bloom Guide, Memory Intelligence, weekly reflections)
• Produce and fulfill printed album orders via third-party partners
• Process subscription payments
• Send you service-related notifications
• Improve the Service through anonymized analytics

Important: How AI features use your dataWhen you use AI-powered features (Bloom Guide, Memory Intelligence, weekly reflections), your diary entries, mood data, and pregnancy information are sent to our AI provider (Anthropic / Claude) to generate personalized responses. This data is:

• Sent securely via encrypted connections (HTTPS/TLS)
• Processed in real-time and not stored by the AI provider beyond the request
• Not used to train AI models (per our agreement with the AI provider)
• Never shared with third parties beyond what is necessary to provide the AI feature

You can use Bloom without the AI features. The core diary, timeline, and album features do not send your data to any AI provider.

Your data is stored in a secure PostgreSQL database hosted by Neon (cloud database provider). Media files (photos, voice notes) are stored in Cloudflare R2 object storage. All data is transmitted over encrypted connections.

We implement reasonable security measures including:

• Encrypted data transmission (TLS/HTTPS)
• Authentication via Clerk with secure session management
• Content Security Policy (CSP) headers
• Input validation and sanitization
• HMAC-verified webhooks for payment processing

However, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

When you use the Inner Circle feature to share your journey, a unique link is generated. Anyone with this link can view a limited snapshot of your pregnancy journey (entries, milestones, media). You can delete share links at any time to revoke access. Shared data is read-only, and recipients cannot modify your content.

Bloom uses the following third-party services:

• Clerk: Authentication and user management
• Neon: PostgreSQL database hosting
• Cloudflare R2: Media file storage
• Anthropic (Claude): AI features
• PayMongo: Payment processing
• Prodigi: Printed album fulfillment
• Vercel: Hosting, analytics, and speed insights

Each service has its own privacy policy. We encourage you to review them. We share only the minimum data necessary for each service to function.

When you order a printed album, your shipping address and album content (text, photos) are shared with our print fulfillment partner (Prodigi) solely for the purpose of producing and delivering your book. Your shipping information is not used for marketing.

Bloom is designed for adults (expectant mothers and their families). You must be at least 16 years old to create an account. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data via your profile settings
• Deletion: Delete your account and all associated data
• Export: Download your diary entries and media
• Withdraw consent: Stop using AI features at any time

To exercise any of these rights, contact us at support@bloomdiary.space.

We retain your data for as long as your account is active. If you delete your account, all personal data (diary entries, media, milestones, letters, and account information) will be permanently deleted within 30 days. Anonymized analytics data may be retained indefinitely. Completed print orders are retained for order history purposes.

Bloom uses essential cookies for authentication and session management (provided by Clerk). We use Vercel Analytics which collects anonymized, cookieless analytics data. We do not use advertising cookies or third-party tracking cookies.

We may update this Privacy Policy from time to time. We will notify users of material changes through the app or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your data rights, contact us at support@bloomdiary.space.