Privacy Policy

Effective date: April 30, 2026

1. Who we are

Bloom is operated by SRG REO 1 LLC, a Texas limited liability company (“Bloom,” “we,” “us,” or “our”). You can reach us at support@bloomformoms.com.

2. What this policy covers

This Privacy Policy describes how we collect, use, store, and protect personal information when you use the Bloom mobile application (the “App”), our website at bloomformoms.com (the “Website”), and related services including waitlist signups, account management, and customer support (together, the “Services”).

It does not cover practices of third-party services you connect to Bloom (for example, Apple HealthKit, your healthcare provider, or your payment processor). Those services are governed by their own privacy policies.

3. Information we collect

3.1 Information you give us directly

• Waitlist information: when you sign up for our waitlist, we collect your email address and the pregnancy stage you select.
• Account information: your email address, password (stored as a hash), and name or display name if you choose to provide one.
• Profile information: pre-pregnancy baseline data (height, weight, age), due date, pregnancy week, prior pregnancy history if you choose to share it, and any conditions you opt to log.
• Pregnancy and wellness logs: kick counts, symptoms, mood, notes, weight, sleep, and any other entries you create in the App.
• Communications: messages you send to support@bloomformoms.com or feedback you provide in-app.
• Cancellation feedback: when you delete your account, we may collect optional feedback about your reasons (including selected categories and any free-text response). This information is used only to understand product improvement opportunities.

3.2 Biometric and health data from connected sources

With your explicit permission, Bloom imports biometric and health data from sources you authorize. Currently this includes Apple HealthKit, and over time may include direct integrations with wearable devices and platforms (for example, Garmin, Oura, Whoop, or similar).

The data we may import includes, depending on the source: heart rate, heart rate variability, resting heart rate, body temperature, blood oxygen, sleep, steps, and active energy.

Bloom uses this data to calculate pregnancy-adjusted ranges based on your individual pre-pregnancy baseline, and to generate insights for you inside the App. We do not use this data for advertising or marketing, we do not sell it, and we do not share it with data brokers, ad networks, or third parties for their own purposes.

Apple HealthKit.When data is sourced from Apple HealthKit, we comply with Apple’s HealthKit terms, which require that HealthKit data is used only for health and fitness purposes inside the App and is not used for advertising, sold, or shared with data brokers. You can revoke HealthKit access at any time in your iPhone’s Settings under Privacy & Security > Health > Bloom.

When you connect another source (a wearable device or platform), that source is governed by its own privacy policy and terms. Once data reaches Bloom, the protections in this policy apply.

3.3 Information collected automatically

When you use the App, we automatically collect limited technical information needed to operate it: device type, operating system version, App version, time zone, language preference, crash logs, and basic in-App actions (for example, “user opened kick counter”) used only to debug and improve the product.

When you visit our Website, we automatically collect IP address, browser type, device information, referring URL, pages viewed, and time of visit, through cookies and similar technologies described in section 3.5.

We do not use advertising SDKs in the App, and we do not use analytics tools that share your data with the SDK provider for their own commercial purposes.

3.4 Information from payments

Subscription payments are processed by our third-party payment processor, which collects your payment information directly under its own privacy policy. We receive only the limited information needed to confirm your subscription status, such as your subscription tier, status, and the last four digits of your card. We never see or store your full card number, CVV, or banking credentials.

3.5 Cookies and similar technologies

Our Website uses cookies and similar technologies to operate the site, remember your preferences, and understand how visitors use the Website. These technologies fall into the following categories:

• Strictly necessary: required for the Website to function (for example, hosting and security).
• Functional: remember your preferences (for example, the trimester you selected on the waitlist).
• Analytics: help us understand how the Website is used so we can improve it. We use only privacy-respecting analytics that do not share data with the analytics provider for their own commercial purposes.

We do not use advertising or behavioral tracking cookies. You can control cookies through your browser settings; disabling cookies may limit some Website functionality. We do not respond to “Do Not Track” browser signals at this time.

4. How we use your information

We use the information described above only for the following purposes:

• To provide the Bloom service: calculating your personalized pregnancy-adjusted ranges, displaying your logs, generating insights, and powering features like the kick counter and notifications.
• To communicate with you: sending account-related emails (subscription receipts, password resets, important updates to this policy), and replying to your support requests.
• To improve Bloom: fixing bugs, diagnosing performance issues, and understanding which features are useful, using the limited technical information described in section 3.3.
• To keep Bloom secure: detecting and preventing fraud, abuse, and security incidents.
• To meet legal obligations: complying with applicable laws, valid legal process, and regulatory requirements.

We do not allow third parties to use your data to train their AI models. We do not use your data for advertising or marketing to you on other platforms.

5. When we share your information

We share your personal information only in these limited situations:

5.1 Service providers

We engage third-party service providers to operate Bloom. They process personal data only on our instructions and only to provide their service to us. The categories of service providers we use include:

• Cloud hosting, database, and authentication infrastructure
• App distribution and push notification delivery
• Payment processing
• Transactional email delivery
• Connected device and wearable integrations (when you choose to connect them)

We require service providers to protect personal data through contractual and other appropriate means. A current list of our specific service providers is available on request.

5.2 Legal process

We will only disclose personal information in response to valid legal process (such as a subpoena, court order, or warrant) issued by a body with proper jurisdiction. When we receive such a request, we will disclose only the minimum information legally required, notify you where permitted by law and operationally feasible, and evaluate each request and object to those that appear overly broad or improper.

Bloom will oppose any request to provide legal authorities with access to user data for surveillance or prosecution purposes. We will notify users if we receive any such request whenever legally permissible.

5.3 Business transfers

If Bloom is acquired, merged, or undergoes a similar transaction, your information may transfer to the new entity as part of that transaction. We will notify you of any change in ownership or control, and you will continue to have the rights described in section 8, including the right to delete your account.

5.4 With your explicit consent

We will share your data with anyone else only when you direct us to do so (for example, if we add a feature in the future to share a report with your healthcare provider, and you opt in to do so).

5.5 What we do not do

• We do not sell your personal information for money or anything else of value.
• We do not “share” your personal information for cross-context behavioral advertising as defined under the California Consumer Privacy Act.
• We do not disclose your data to advertisers, ad networks, or data brokers.
• We do not share your data with employers, insurers, or anyone in your workplace.

6. Sponsored content

Bloom may include sponsored educational content from time to time, such as a feature article or video series produced in partnership with a brand. When we include sponsored content, all of the following will be true:

• Clearly labeled. Sponsored content will be labeled as such, with the sponsor identified.
• No user-level data sharing. Sponsors do not receive any information about you. They do not learn whether you saw, read, or interacted with their content. They may receive only aggregate metrics across the entire Bloom audience (such as total views).
• No targeting based on your data. Sponsors cannot target specific users based on health, biometric, pregnancy, or any other personal data. Sponsored content is shown the same way to all eligible users in the relevant section of the App.
• No tracking pixels or SDKs. Sponsored content does not introduce third-party tracking, advertising, or analytics technology into the App.

7. Research and de-identified data

We may use de-identified, aggregated data derived from Bloom users for the following purposes:

• Improving the Bloom product (for example, refining pregnancy-adjusted range models).
• Publishing or contributing to scientific research on prenatal health.
• Partnering with academic institutions, healthcare organizations, or research entities. Some of these partnerships may be paid.

The following apply to all such uses:

• De-identified only. Before any data is used for research or shared with any partner, all direct identifiers (name, email, account ID, device identifiers, IP address) are removed, and the data is processed using techniques designed to prevent re-identification.
• No sale of identified data. We do not sell or otherwise disclose data that identifies you.
• You can opt out at any time. You may opt out of having your de-identified data included in research or partnership data sets at any time by emailing support@bloomformoms.com, with no impact on your access to Bloom.
• No identified-data research without consent. If we ever want to conduct research that uses identified data, we will request your explicit, informed, study-specific consent. You can decline without affecting your access to Bloom.
• No re-identification. We will not attempt to re-identify any de-identified data we maintain or share, and we contractually require our research partners to do the same.
• Ownership. Bloom is the sole owner of de-identified and aggregated data derived from the Services, subject to your opt-out rights described above and in section 7.

Treatment of research data on account deletion

When you delete your Bloom account, we anonymize the account record (removing your name, email, and login credentials) as described in section 8. Your health data is retained in de-identified form linked to the now-anonymous account.

De-identified data already contributed to research datasets is retained by default. You may request fuller deletion of your de-identified health data, including exclusion from future research datasets and partnerships, by emailing support@bloomformoms.com. Data already shared with partners under prior collaborations cannot be retroactively withdrawn.

8. Your rights and choices

All Bloom users have the following rights with respect to their personal information, regardless of jurisdiction:

• Access: request a copy of the personal data we hold about you.
• Correct: update or fix inaccurate information.
• Delete:delete your account. You can do this directly in the App under Settings > Delete Account, or by emailing us. When you delete your account, we anonymize your account record (removing your name, email, and login credentials) and retain your health data in de-identified form as described in section 7. To request fuller deletion of your data, including your de-identified health data, email support@bloomformoms.com.
• Export: request a portable copy of your data.
• Opt out of de-identified research: as described in section 7.
• Withdraw consent: where we rely on your consent to process data, you can withdraw it at any time.
• Limit use of sensitive personal information: where applicable law provides this right, you may request that we limit use and disclosure of your sensitive personal information to purposes necessary to provide the Services.
• Appeal: where applicable law provides this right, you may appeal our denial of any rights request by replying to our denial notice or emailing support@bloomformoms.com with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state attorney general or other applicable regulator.

How to exercise your rights

To exercise any of these rights, email support@bloomformoms.com. We will respond within the time required by applicable law (generally 45 days, with the possibility of one 45-day extension for complex requests).

We will need to verify your identity before responding. We may ask you to provide information matching what we already have on file. The information you provide for verification will be used only for that purpose.

You may use an authorized agent to submit a request on your behalf. We will require written, signed authorization from you and verification of both your identity and the agent’s identity. A parent or legal guardian may submit a request on behalf of a minor child.

Notes for U.S. state residents

If you live in a U.S. state with a comprehensive consumer privacy law, you have rights under that law including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. Bloom does not sell personal information and does not “share” personal information for cross-context behavioral advertising as those terms are defined under such laws.

If you live in Washington state, the My Health My Data Act applies. The pregnancy, biometric, and health data categories Bloom collects are “consumer health data” under that law and are subject to its protections.

9. Data security

We use technical and organizational measures designed to protect personal information, including:

• Encryption of data in transit (TLS 1.2 or higher) and at rest.
• Row-level access controls so users can access only their own records.
• Restricted access to production systems, limited to authorized personnel and subject to audit logging.
• Regular security reviews and patching of dependencies.

We will notify you of any security breach affecting your personal information as required by applicable law.

10. Data retention

We keep your personal information only as long as we need it to provide the Service or to meet legal obligations.

• Active accounts: we keep your data for as long as your account is active.
• Deleted accounts: when you delete your account, your account record is anonymized as described in section 8. Identifying information is removed from our active systems at deletion and from backups within 90 days. De-identified health data is retained as described in section 7.
• Inactive accounts: if you have not used the App for 5 years, we may delete your account and associated data.

Limited financial and legal records (such as transaction history) are retained as required by tax and accounting law.

11. Children

Bloom is not directed to children under 18 and we do not knowingly collect data from anyone under 18. If we learn we have collected data from someone under 18, we will delete it. If you believe a minor has created an account, please contact support@bloomformoms.com.

12. Bloom is a U.S. service

This Privacy Policy does not apply to users of our Services who are located outside the United States. Our Services are hosted in the United States and are intended for U.S. users. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States. Bloom is not designed to comply with the General Data Protection Regulation (GDPR) or other non-U.S. data protection regimes.

13. Changes to this policy

If we make material changes to this policy, we will notify you in the App and by email at least 30 days before the changes take effect. Your continued use of Bloom after that period means you accept the updated policy. If you do not accept it, you can delete your account before it takes effect and your data will be removed as described in section 8.

14. Contact

Questions, requests, or concerns about this policy or your data:

Email: support@bloomformoms.com

SRG REO 1 LLC
5900 Balcones Drive, Suite 100
Austin, TX 78731