Bloom ("Bloom," "we," "us," or "our") is operated by Juniper House, LLC, a South Dakota limited liability company. Bloom is a companion for the family journey — and that journey involves health information: cycles, pregnancies, a baby's earliest rhythms. This policy explains, specifically and concretely, how we handle consumer health data and the rights you have over it, including rights under the Washington My Health My Data Act and similar consumer-health-data laws in other states.
This policy supplements our Privacy Policy. Where the two overlap, this policy governs for consumer health data.
1. What we will never do with your health data
- We never sell consumer health data. Not to data brokers, advertisers, or anyone — and we will never ask you to authorize a sale, because there will never be one.
- We show no advertising and never use your health data for advertising or marketing of any kind.
- We use no third-party analytics or tracking software. Your health data is not profiled, mined, or analyzed for any purpose other than showing you your own story.
- We do not use geofencing. Bloom does not collect your location at all, and we never use location technology around any facility, health-related or otherwise.
- Your reproductive data is private even within your family. Cycle and fertility data is readable only by you — never by a linked co-parent — enforced at the database level.
2. The consumer health data we collect
We collect the following categories of consumer health data, only when you choose to provide them or grant access:
- Reproductive and cycle information: menstruation logs, cycle-related body signals, basal body temperature you record, ovulation and pregnancy test results you enter, cycle settings, and related notes.
- Pregnancy and birth information: pregnancy status, due date, and birth details you enter (such as birth date, weight, length, and time of birth).
- Maternal wellbeing information: weight entries and mood check-ins, if you choose to record them.
- Pregnancy activity information: kick-counting sessions, if you use that feature.
- Infant care and growth information: feeding, diaper, sleep, and nap logs, and growth measurements for your baby.
- Apple Health data, read with your permission: if you connect Apple Health, Bloom reads certain reproductive-health and body-signal data types on a read-only basis, as described in Section 7 of our Privacy Policy. Your raw sleeping wrist-temperature readings are processed entirely on your device and never reach our servers.
3. Where this data comes from
- Directly from you — information you enter in the app.
- From Apple Health, only with your explicit permission, which you can revoke at any time in iOS Settings.
- From your linked co-parent, for shared family information only — for example, care events your partner logs for your baby. Your co-parent never contributes to, and never sees, your reproductive or cycle data.
4. Why we collect it, and how we use it
We collect and use consumer health data for one purpose: to provide Bloom's features to you and your family. That means your timeline, garden, cycle insights, journey tracking, care logging, memory-keeping, notifications you have enabled, and keepsake books you choose to create. We do not use consumer health data for advertising, marketing, research, profiling, or any purpose unrelated to the features you are using.
5. How consumer health data is shared
We do not sell consumer health data, and we do not share it for advertising. It is disclosed only to the service providers (processors) that operate Bloom's infrastructure, under contracts that limit their use of it to providing services to us:
- Supabase — our database and server infrastructure, where your account data is stored under access controls, in the United States.
- Apple — Sign in with Apple, Apple Health (read on-device), app distribution, and notification delivery. Notification content is deliberately written so that sensitive health specifics do not appear in push payloads.
- Lulu — our print partner, which receives the contents of a keepsake book only if you place an order, and only the pages you chose to include.
- Stripe — payment processing for keepsake orders. Stripe receives payment and shipping details, not your health data.
We share consumer health data with no affiliates (we have none) and no other third parties. If that ever changed, this policy would be updated first and, where the law requires, your consent obtained.
6. Your consent
Bloom asks for your consent to collect and use health-related information before you enter it — as a distinct choice, separate from accepting our Terms of Service or Privacy Policy. You can withdraw that consent at any time in the app (see Section 7). Certain features — such as cycle tracking and Apple Health import — ask for their own additional permission before they begin.
7. Your rights over your health data
You have the right to:
- Know and access the consumer health data we have collected about you, including the categories of sources and the third parties to whom it has been disclosed (listed in Section 5). You can export a copy of your data from within the app, or request one by email.
- Withdraw consent to our collection and use of your consumer health data, in the app's health data and privacy settings or by contacting us. Withdrawing consent stops further collection; because Bloom's core features depend on this data, withdrawal will limit what the app can do.
- Delete your consumer health data. You can delete your account and its data from within the app at any time, or request deletion by email. Deletion requests are honored across our systems and passed to our service providers. Limited records we are legally required to retain — such as transaction records for a keepsake order — are described in Section 9 of our Privacy Policy. A keepsake book that has already been printed and shipped to you cannot be recalled, but the digital order contents are covered by deletion.
To exercise any of these rights, use the in-app controls where available, or email privacy@juniperhouse.io. We will verify your request using your account email and respond within the time required by law (for Washington residents, within 45 days, extendable once by 45 days where reasonably necessary). We will never discriminate against you for exercising your rights.
8. If we decline a request — your right to appeal
If we decline to act on a request, we will tell you why. You may appeal our decision by replying to our response or emailing privacy@juniperhouse.io with the subject line "Appeal." We will respond to your appeal in writing within 45 days, explaining our decision. If your appeal is denied and you are a Washington resident, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
9. Changes to this policy
If we make material changes to how we handle consumer health data — a new category collected, a new processor, a new purpose — we will update this policy, provide notice in the app, and obtain your consent where the law requires it before the change applies to your data.
10. Contact us
Juniper House, LLC
privacy@juniperhouse.io (privacy and data requests)
support@juniperhouse.io (general support)