Privacy

Family information you type in — children's first names, ages, allergies, medical notes, interests, care logs, planner events, tasks and documents. This is used only to show you your own family's information.

Your account details — the email address of each adult you invite, and the access level you give them.

Questions you ask Bloom AI — used to answer you and to count your monthly free questions. Bloom Chapters does not use your family information or Ask Bloom conversations to train our own AI models.

We do not sell, rent or share your family's data with advertisers or partner brands.

We do not build advertising or behavioural profiles of children.

We do not publish anything about your family. Nothing you add is public.

Accounts are created and managed by adults. Bloom Chapters is designed for use by families and the adult caregivers they authorise.

Children do not create accounts. A child cannot sign in, cannot be contacted through the app, and has no login of their own.

Parents, guardians and other authorised adults may create child profiles on a child's behalf. A child profile is a record inside your family account, not an account in its own right.

A child profile may contain developmental, educational and organisational information — for example a first name, age or stage, nursery or school, interests, milestones, routines and reminders.

Bloom Chapters may store health-related information that you choose to enter, including allergies, medical notes, feeding information, sleep information, developmental information and pregnancy information.

This information is entered voluntarily by a parent or an authorised caregiver. Nothing in this category is required to use the app, and you can leave any of it blank, edit it or delete it at any time.

It is stored so that it can be shown back to you and the caregivers you have authorised — for example so a grandparent collecting from nursery can check an allergy. It is not used for advertising, profiling or recommendations, and it is never shared with partner brands.

Allergies, medical notes, feeding logs and medication records are “special category” data under UK GDPR because they concern health. We only hold this if you choose to enter it.

It is encrypted at rest, exactly like the rest of your family's data, and is visible only to the family members you have given permission to see it — the account owner controls this through roles.

It is never used for advertising, affiliate targeting, Ask Bloom personalisation, or to train our own AI models. Our lawful basis for holding it is your explicit consent, which we ask for separately before any health information is first saved and which you can withdraw at any time in Settings. You can also delete the information itself at any time.

When you ask Bloom Chapters AI a question, the text of your question is sent to our AI model provider (Google Gemini, accessed through Lovable) to generate a reply. Alongside your question we send only coarse context, assembled on our server: your country; the stage and coarse age band of the child you have selected, or of each profile in your family if you ask a family-wide question (which means the number of profiles can be inferred); and, where your question is clearly about local services, entitlements or deadlines, your region and local-authority code. If your question relates to a Bloom-curated Important Date, up to six of those verified official dates (title, date and issuing organisation) may also be included so the answer can refer to them accurately.

We never send names, dates of birth, health or medical information, your notes, documents, photos, care or feeding logs, or your own calendar entries, appointments and private family dates. Those are never included automatically in an Ask Bloom request.

Bloom Chapters does not use your family information or Ask Bloom conversations to train our own AI models. Your question is processed by our AI service providers solely to provide the Ask Bloom service, subject to their contractual data-processing terms. We log the request's technical details — model, tokens, cost, timing and safety outcome — but not the text of your question.

Please do not include your child's full name, date of birth or other identifying details in a question — describe the situation instead. Health-related questions are answered as general information only; see our medical disclaimer, and always check anything important with your GP, midwife or health visitor.

Every answer carries a “Report response” option. If you use it we store the answer you flagged, the category you chose and any note you add, so our safety team can review it. We do not store the question you asked. There is no microphone or audio recording in Bloom Chapters: if you dictate a question, that is your phone's own keyboard voice-to-text and no audio reaches us.

We process personal information for one or more of the following reasons:

• To provide the services you have asked for.
• To create and manage your family account and child profiles.
• To show you content matched to your children's ages and stages.
• To store the information you choose to save, such as checklists, planner events and documents.
• To manage a subscription, if you take one out.
• To answer support requests you send us.
• To meet legal obligations, where they apply to us.

Some information is processed simply because you have explicitly chosen to give it to us — health notes, allergies and pregnancy details are the clearest examples. Where that is the case you are in control: you choose whether to enter it, and you can remove it whenever you like.

Child information is private. It is not public, not searchable and not visible to other users of Bloom Chapters.

Your family's data is visible only to the adults you have invited and who have accepted. Nobody outside your family can see it.

The account owner controls family access. You decide who is invited, what role they hold, and you can change or remove someone's access at any time — it takes effect immediately.

We never sell your information. Not your data, not your children's data, not to anyone.

We keep your family's information for as long as your account is open, because it is the content of the app itself — your planner, your children's records, your saved items.

When you delete your account, your personal records are removed immediately and permanently. There is no grace period, so please be sure before you confirm.

Ask Bloom feedback reports — the answers you flag with “Report response”, with the category and any note — are kept for a maximum of 180 days and are then deleted automatically. Deleting your account removes them straight away. Technical AI request logs (model, tokens, timing, safety outcome — never your question) are kept for 90 days.

A small amount of information may be kept longer where the law requires it. Payment, invoice and transaction records may be retained for the period required by applicable tax, accounting and legal obligations. That is limited to what is legally necessary and never includes a child's name, date of birth or health information.

You may request deletion of your account at any time, and you may request a copy of your data by contacting us. There is no self-service export in the app today.

Supabase — hosts our database, authentication and file storage, so it holds your account details and everything you add to your family.

Lovable — hosts the app and routes Bloom AI requests to the model provider.

Google (Gemini) — generates Bloom AI answers from the question you send and the coarse context described above.

Stripe — processes subscription payments and holds the payment and billing details you give it. We never see your full card details.

Resend — delivers account emails such as password resets and family invitations, which means it processes the recipient email address.

Apple, Google and Mozilla push services — deliver push notifications to your device if you turn them on. They receive the message and your device's push address, not your family records.

Our infrastructure providers may store and process data in the UK, the EEA or another country with data protection standards recognised as adequate, or under contractual safeguards such as the UK's International Data Transfer Agreement. We do not transfer your family's data anywhere without an appropriate legal safeguard in place.

We use functional storage only — to keep you signed in, remember your preferences (such as theme or layout) and hold draft entries on your device. We do not use advertising cookies, and we do not use tracking pixels or cross-site trackers.

Where we use analytics, it is privacy-preserving and aggregate — for example counting which features are used, without identifying a child. We do not share analytics data with third-party advertising networks, and we do not build advertising profiles from it.

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data, subject to what we must legally retain;
• ask us to restrict or object to certain processing;
• ask for your data in a portable format; and
• withdraw consent at any time, where consent is the basis for processing.

To exercise any of these, contact us and we will respond within one calendar month. For account and family deletion specifically, see the “Deleting your data” section above, or go to Settings.

Encryption — Information is encrypted in transit between your device and our servers, and encrypted at rest on the database and file storage.

Authentication — Every adult signs in with their own credentials. Sessions are held securely and expire. We never store your password in a readable form.

Database access controls — Access rules are enforced by the database itself, on every single request, rather than by hiding buttons in the app. A request for another family's records is refused at the data layer.

Role-based permissions — Each adult you invite holds a role — owner, parent, partner, grandparent, caregiver or viewer — and that role decides what they can see and change. Removing someone takes effect immediately.

No system can promise perfect security, and we will not pretend otherwise. What we can say is that children's information is treated as the most sensitive data in the product and is protected accordingly.

For any question about your family's data — including a request for a copy of it, a correction, or deletion — contact us through the form below. It reaches our support inbox directly and we answer within five working days.

If you are not happy with how we have handled your information, you have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.