Privacy Policy for Bloom Birth

Last Updated: October 2026

Introduction

Welcome to Bloom Birth. Bloom Birth is provided by Enigma ("Enigma," "we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

By using Bloom Birth, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Personal Information You Provide

When you register and use Bloom Birth, you may provide:

• Account Information: Email address, name, password, and phone number (optional)
• Profile Information: Due date, pregnancy week, birth preferences
• Health Information: Nutrition tracking and meal logs
• User Content: Custom affirmations, journal entries, birth plan details
• Payment Information: Processed by third-party payment providers (Apple App Store and Google Play)

2. Automatically Collected Information

We automatically collect:

• Device Information: Device type, operating system, app version
• Push Notification Token: If you allow notifications, a token that lets us send them to your device
• Diagnostic Data: Crash reports and error logs, including the app screens and actions leading up to an error

3. Information from Third Parties

• Payment Providers: Purchase and subscription status from Apple, Google Play, and RevenueCat

How We Use Your Information

We use collected information for:

1. Providing Services

• Create and maintain your account
• Personalize weekly content based on pregnancy week
• Track your progress and achievements
• Generate personalized birth plans
• Sync data across your devices
• Provide customer support

2. Improving the App

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features based on user needs
• Optimize app performance

3. Communication

• Send weekly pregnancy updates (if enabled)
• Notify you of new features or content
• Respond to your inquiries
• Send important service announcements

4. Legal and Security

• Prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and property

How We Share Your Information

We DO NOT sell your personal information. We may share information with:

1. Service Providers

We work with trusted third-party services:

Railway

• Purpose: Hosting for our servers and database, where your account and app data are stored
• Data shared: Account info and user content
• Privacy: Railway Privacy Policy

Amazon Web Services (Amazon SES)

• Purpose: Sending account emails, such as email verification and password reset
• Data shared: Email address and the content of those emails
• Privacy: AWS Privacy Notice

Sentry

• Purpose: Error tracking and crash reporting
• Data shared: Device info, error logs, user ID (anonymized)
• Privacy: Sentry Privacy Policy

RevenueCat

• Purpose: In-app purchase and subscription management
• Data shared: User ID, subscription status, transaction data
• Privacy: RevenueCat Privacy Policy

Expo

• Purpose: Delivering push notifications (Expo Push Notification Service)
• Data shared: Push notification token, notification content, device info
• Privacy: Expo Privacy Policy

2. Legal Requirements

We may disclose information if required by law, court order, or government request, or to:

• Comply with legal process
• Protect our rights and property
• Investigate fraud or security issues
• Protect user safety

3. Business Transfers

If Enigma or Bloom Birth is acquired or merged, your information may be transferred to the new owner.

Data Security

We implement appropriate security measures to protect your information:

Security Measures

• Encryption: All data transmitted over HTTPS/TLS
• Secure Storage: Your data is stored in our own database, hosted by Railway, and is available only to your signed-in account
• Password Security: Passwords hashed using industry-standard algorithms
• Access Controls: Limited employee access to personal data
• Regular Audits: Security reviews and vulnerability assessments

Important Note

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

1. Access and Update

You can access and update your information in the App:

• Profile settings
• Birth plan preferences
• Notification settings

2. Delete Your Data

You have the right to delete your account and data:

• Go to Profile → Account → Delete account (deletion takes effect immediately)
• Or email: support@withbloombirth.com; we will delete your data within 30 days
• Full instructions: Deleting your account

3. Export Your Data

Request a copy of your data:

• Email: support@withbloombirth.com
• We'll provide data in JSON format within 30 days

4. Opt-Out of Communications

• Disable push notifications in app settings or device settings
• Unsubscribe from emails using the link in any email
• Note: We may still send essential service notifications

5. Do Not Track

We don't respond to Do Not Track signals as there's no industry standard.

Children's Privacy

Bloom Birth is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, contact us at support@withbloombirth.com and we will delete it promptly.

Age Requirement: Users must be 13 or older. Pregnant minors should use the app with parent/guardian consent.

International Data Transfers

Bloom Birth is operated from the United States. If you're accessing from outside the US, your information may be transferred to, stored, and processed in the US where our servers and service providers are located.

EU Users: We comply with applicable data protection laws. Your data is protected under standard contractual clauses.

Data Retention

We retain your information:

• Account Data: Until you delete your account
• User Content: Until you delete or your account is deleted
• Crash Reports: Up to 90 days
• Deleted Data: Removed from active systems within 30 days, may persist in backups for up to 90 days

California Privacy Rights (CCPA)

If you're a California resident, you have the right to:

Right to Know

Request information about data we've collected about you in the past 12 months.

Right to Delete

Request deletion of your personal information.

Right to Opt-Out

We don't sell your personal information, so opt-out doesn't apply.

Right to Non-Discrimination

We won't discriminate against you for exercising your privacy rights.

To exercise these rights: Email support@withbloombirth.com

GDPR Rights (EU Users)

If you're in the EU, you have:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights: Email support@withbloombirth.com Data Protection Officer: support@withbloombirth.com

Cookies and Tracking

Mobile App

We don't use cookies in the mobile app. We use:

• Crash Reporting: Sentry (essential for app stability)
• Push Notification Token: To send notifications you have turned on

Web Pages

Our web pages (this Privacy Policy, the Terms of Service, Support and account deletion pages) do not use analytics or advertising cookies.

Third-Party Links

Bloom Birth may contain links to third-party websites or services (e.g., medical resources). We are not responsible for their privacy practices. Review their privacy policies before providing information.

Medical Disclaimer & Data Use

IMPORTANT: Bloom Birth is for educational and informational purposes only. It is not medical advice.

• We don't share health data with healthcare providers without your consent
• Health data is not used for insurance or employment decisions
• Always consult your doctor or midwife for medical advice

Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes by:

• Posting the new policy in the app
• Sending a push notification
• Emailing you (if you've provided email)

Effective Date of changes will be noted at the top.

Your continued use after changes constitutes acceptance.

Contact Us

Questions or concerns about privacy?

Email: support@withbloombirth.com Website: Privacy Policy Mail: Enigma (Bloom Birth) [Your Address] [City, State ZIP]

Response Time: We aim to respond within 48 hours.

Consent

By using Bloom Birth, you consent to this Privacy Policy and our collection, use, and sharing of your information as described.

Bloom Birth by Enigma - For every season of you.

This privacy policy is effective as of October 2026 and applies to all users of the Bloom Birth mobile application.