Privacy Policy

Effective date: August 13, 2026

1. Who we are

Bloom is operated by SRG Labs LLC, a New Jersey limited liability company, wholly owned by SRG Holdings LLC, a Wyoming limited liability company ("Bloom," "we," "us," or "our"). You can contact us at support@bloomformoms.com.

Bloom provides a mobile application and related services focused on reproductive, maternal, postpartum, and women's health insights (the "Services"). We recognize that reproductive, pregnancy, fertility, postpartum, and related health information is among the most sensitive personal information a person can share.

Bloom is not a covered entity or business associate under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Information you share with Bloom is not protected by HIPAA. We nevertheless treat your information as highly sensitive and apply administrative, technical, and physical safeguards designed to protect it.

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our mobile application, our website, and related features, tools, and communications.

It does not apply to third-party services you connect to (such as Apple HealthKit or wearable providers), which are governed by their own privacy policies.

3. Information we collect

3.1 Information you provide directly

We collect information you choose to provide, including:

• Account information (email, password hash, display name)
• Profile and pregnancy information (due date, stage, age, height, weight, pregnancy history if provided)
• Health and wellness inputs (symptoms, mood, sleep, weight, notes, kick counts, and similar logs)
• Communications (support messages, feedback, emails)

3.2 Health and biometric data

With your permission, we collect health and biometric data from connected services, including Apple HealthKit and wearable providers. This may include:

• heart rate and heart rate variability
• resting heart rate
• sleep data
• activity and step data
• temperature trends
• blood oxygen
• other device-provided physiological metrics

We use this data to provide personalized reproductive and maternal health insights.

3.3 Automatically collected information

We collect limited technical and usage data, including:

• device and operating system information
• app version
• usage events and interactions
• crash logs and performance metrics
• IP address (for security and diagnostics)

3.4 Payment information

Payments are processed by third-party providers. We do not store full payment card details.

4. How we use information

We use information to:

• provide, operate, and maintain the Services
• generate personalized reproductive, maternal, postpartum, and wellness insights
• enable health tracking, monitoring, and visualization features
• communicate with users, including support, updates, and service-related messages
• improve, develop, test, validate, monitor, and enhance the Services, including through product development, quality assurance, analytics, feature development, algorithm development, and operational analysis
• conduct internal analytics and product improvement
• ensure security, fraud prevention, abuse detection, and platform integrity
• comply with legal obligations and enforce our terms and policies
• communicate with users regarding support, service updates, educational content, product announcements, and other information related to the Services
• perform additional internal business purposes that are compatible with the context in which the information was collected and permitted under applicable law

AI and automated systems. We may use information, including de-identified information, to develop, train, test, validate, improve, and evaluate algorithms, statistical models, machine learning systems, artificial intelligence technologies, and related analytical tools used in connection with the Services and future products and services.

5. How we share information

Bloom may share information as described in this Privacy Policy.

The following applies to information collected through the Bloom app and your account. Website-only advertising and analytics are described in Section 5.5.

We do not sell identifiable reproductive, pregnancy-related, postpartum, fertility, or other health information.

We do not share identifiable reproductive, pregnancy-related, postpartum, fertility, or other health information with advertisers for cross-context behavioral advertising.

We may license or otherwise make available de-identified datasets derived from information provided directly by users and, where permitted by applicable agreements and platform requirements, information obtained through connected services, provided the user has opted into data sharing. Certain disclosures may be considered a "sale," "sharing," or other regulated disclosure under applicable privacy laws. Where required by law, Bloom will obtain consent or provide users with applicable rights regarding such disclosures.

5.1 Service providers

We engage third-party service providers to support the Services, including:

• cloud hosting and database infrastructure
• analytics and product measurement tools
• error monitoring and performance tools
• authentication and security providers
• payment processors
• communications and email providers
• AI and computing providers

These providers may process information on our behalf and under our instructions to provide services, support business operations, improve service quality, assist with security, and enable product development, analytics, and related activities.

5.2 Legal requirements

We do not voluntarily provide user data to law enforcement or government agencies. We may disclose information if required by law, including in response to:

• subpoenas
• court orders
• warrants
• other legally binding requests

Where permitted, we may challenge requests that are unlawful or overly broad, particularly those involving sensitive reproductive or health-related data.

5.3 Business transfers

If Bloom is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. The receiving entity may continue to use information in accordance with this Privacy Policy or a successor policy.

5.4 With your direction or consent

We may share information when you explicitly request or authorize it (for example, exporting a report to a healthcare provider).

5.5 Website advertising and analytics

We use advertising and analytics tools (such as the Meta Pixel) on our website to measure marketing performance and show relevant ads to site visitors. These tools may collect basic information like pages visited and device type. They do not receive any health data or information from the Bloom app. We do not sell personal information or share identifiable health data with advertisers.

6. De-identified and aggregated data

We may use de-identified, aggregated, or statistical data derived from the Services for:

• internal analytics and product improvement
• understanding usage patterns and health trends
• aggregate trend analysis and model development
• product research and development
• improving algorithms and system performance

We do not attempt to re-identify de-identified data. We may publish or share aggregated insights that do not reasonably identify any individual.

As between Bloom and users, Bloom retains all rights, title, and interest in de-identified, aggregated, and non-user-identifiable data and outputs derived from the Services.

6.1 Optional data sharing

Bloom may offer you the option to share your de-identified information with third parties working to advance reproductive, maternal, postpartum, and women's health. Sharing is optional, requires your affirmative opt-in, and does not affect your use of Bloom. You can change your choice at any time.

If you opt in, Bloom may share de-identified information with partners advancing women's health — including academic and non-profit researchers, and organizations developing women's-health products and services — for research, analytics, and product development. Exception — Apple HealthKit: information derived from Apple HealthKit is only shared in alignment with Apple's HealthKit terms.

You can withdraw at any time, which stops future sharing. Withdrawal applies going forward and does not reverse uses that already occurred. Once information has been incorporated into de-identified datasets, research, publications, or models, prior uses cannot be retrieved or reversed.

6.2 Ownership of Derived Data

To the fullest extent permitted by applicable law, platform requirements, and contractual obligations, Bloom owns and may use, commercialize, license, disclose, or publish de-identified data, aggregated data, statistical information, benchmarks, derived datasets, analytical outputs, models, algorithms, insights, and other information created from or based on information collected through the Services, provided such information does not reasonably identify an individual.

Bloom will not attempt to re-identify de-identified information and will require recipients of de-identified datasets to refrain from attempting to re-identify individuals where required by applicable law or contractual obligations.

7. Data retention and deletion

We retain information for as long as necessary to provide the Services and for legitimate business and legal purposes.

7.1 Account deletion

When you delete your account:

• personal identifiers (such as name, email, and login credentials) are removed or disassociated from your account
• personal data is deleted from active systems within a reasonable operational timeframe
• backups may persist temporarily as part of routine disaster recovery systems
• limited data may be retained where required for legal, security, fraud prevention, or compliance purposes

For users who have opted into data sharing, account deletion does not require Bloom or its recipients to retrieve, delete, reverse, or unwind prior datasets, analyses, publications, models, or other outputs created before deletion became effective.

7.2 De-identified data

De-identified, aggregated, statistical, and derived data may be retained indefinitely and used for the purposes described in this Policy, provided such data does not reasonably identify an individual.

8. Data security

We implement reasonable safeguards, including:

• encryption in transit and at rest
• access controls and least-privilege permissions
• monitoring and logging of system access
• secure authentication systems
• regular security reviews and patching

9. Your rights and choices

Depending on your location, you may have rights to:

• access personal information
• correct inaccurate information
• delete your account
• obtain a copy of your data
• opt out of certain data uses
• withdraw consent where applicable

To exercise any of these rights, email support@bloomformoms.com. We will respond within the time required by applicable law. We may need to verify your identity before processing your request. If we deny a request, you may appeal by replying to our decision.

Residents of certain U.S. states may have additional privacy rights, including rights related to sensitive data and consumer health data.

For the email and push notifications we send, what they are based on, and how to stop receiving them, see Section 10.

10. Communications and email preferences

We use the email address associated with your account, and any push notification permission you grant on your device, to send the categories of messages described below.

10.1 Service and account messages

These messages are necessary to operate your account and to provide the Services. They include:

• account creation, email verification, and sign-in support
• password reset and security notices
• membership, billing, renewal, payment failure, and cancellation notices
• changes to this Privacy Policy, our Terms of Service, or the Services
• replies to support requests you send us

Because these messages are part of providing the Services, they are not promotional and are not subject to a separate opt-out. If you no longer wish to receive them, you may delete your account.

10.2 Pregnancy updates and educational content

We may send updates timed to your stage of pregnancy — for example, a weekly summary of what is typically happening at that point. To determine what to send and when, we use the due date you provide and the week of pregnancy calculated from it. The timing and content of these messages are therefore derived from health information you have given us.

These messages contain general educational information. They are not medical advice, they are not a clinical assessment of you, and they do not diagnose or interpret any condition.

We do not include your individual health readings, metrics, or personalized health observations in the subject line or body of these messages. Information of that kind remains in the app.

If you tell us that your pregnancy has ended, or you pause your account, we stop sending pregnancy-stage updates. You do not need to unsubscribe separately for this to take effect.

10.3 Product announcements and offers

We may send occasional messages about new features, changes to Bloom, membership offers, and invitations to opt into the data sharing described in Section 6.1. These messages are promotional and are always optional.

10.4 Managing your preferences

You can stop receiving the messages described in Sections 10.2 and 10.3 at any time by:

• using the unsubscribe link included in every one of those messages, or
• emailing support@bloomformoms.com

We act on opt-out requests promptly, and in any event within the time required by applicable law. Opting out does not affect the service and account messages described in Section 10.1, your membership, or your ability to use Bloom.

Push notifications are controlled separately, in your device settings and in the Bloom app under Profile, then Notifications. Turning off push notifications does not change your email preferences, and opting out of email does not change your push notifications.

We do not sell or rent your email address, and we do not share it with advertisers for cross-context behavioral advertising. We use third-party email delivery providers to send these messages on our behalf, as described in Section 5.1.

11. HealthKit and wearable data

When you connect Apple HealthKit or other wearable services:

• we use data only to provide the Services to you
• we do not use HealthKit data for advertising
• We do not sell HealthKit data or data derived from HealthKit
• you may revoke access at any time in device settings

HealthKit-specific restrictions apply only to Apple HealthKit data. Other wearable integrations may be governed by separate terms consistent with this Policy.

12. Children's privacy

The Services are not intended for individuals under 18. We do not knowingly collect data from individuals under 18. If we become aware of such data, we may delete it where required by law.

13. International use

The Services are intended for users in the United States. If you access the Services from outside the United States, you understand your information may be processed in the United States.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice through the Services and/or by email. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

15. State privacy disclosures (U.S.)

Certain information collected by Bloom may constitute "consumer health data" under applicable state laws. We process such information only for purposes described in this Privacy Policy and in accordance with applicable law. Additional rights and disclosures may apply depending on your state of residence.

16. Contact us

support@bloomformoms.com

SRG Labs LLC
971 US Highway 202 North, Suite R
Branchburg, NJ 08876