Privacy Policy

Effective date: June 14, 2026

1. Who we are

Bloom is operated by SRG Labs LLC, a New Jersey limited liability company, wholly owned by SRG Holdings LLC, a Wyoming limited liability company ("Bloom," "we," "us," or "our"). You can contact us at support@bloomformoms.com.

Bloom provides a mobile application and related services focused on reproductive, maternal, postpartum, and women's health insights (the "Services"). We recognize that reproductive, pregnancy, fertility, postpartum, and related health information is among the most sensitive personal information a person can share.

Bloom is not a covered entity or business associate under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Information you share with Bloom is not protected by HIPAA. We nevertheless treat your information as highly sensitive and apply administrative, technical, and physical safeguards designed to protect it.

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our mobile application, our website, and related features, tools, and communications.

It does not apply to third-party services you connect to (such as Apple HealthKit or wearable providers), which are governed by their own privacy policies.

3. Information we collect

3.1 Information you provide directly

We collect information you choose to provide, including:

• Account information (email, password hash, display name)
• Profile and pregnancy information (due date, stage, age, height, weight, pregnancy history if provided)
• Health and wellness inputs (symptoms, mood, sleep, weight, notes, kick counts, and similar logs)
• Communications (support messages, feedback, emails)

3.2 Health and biometric data

With your permission, we collect health and biometric data from connected services, including Apple HealthKit and wearable providers. This may include:

• heart rate and heart rate variability
• resting heart rate
• sleep data
• activity and step data
• temperature trends
• blood oxygen
• other device-provided physiological metrics

We use this data to provide personalized reproductive and maternal health insights.

3.3 Automatically collected information

We collect limited technical and usage data, including:

• device and operating system information
• app version
• usage events and interactions
• crash logs and performance metrics
• IP address (for security and diagnostics)

3.4 Payment information

Payments are processed by third-party providers. We do not store full payment card details.

4. How we use information

We use information to:

• provide, operate, and maintain the Services
• generate personalized reproductive, maternal, postpartum, and wellness insights
• enable health tracking, monitoring, and visualization features
• communicate with users, including support, updates, and service-related messages
• improve, develop, test, validate, monitor, and enhance the Services, including through product development, quality assurance, analytics, feature development, algorithm development, and operational analysis
• conduct internal analytics and product improvement
• ensure security, fraud prevention, abuse detection, and platform integrity
• comply with legal obligations and enforce our terms and policies
• communicate with users regarding support, service updates, educational content, product announcements, and other information related to the Services
• perform additional internal business purposes that are compatible with the context in which the information was collected and permitted under applicable law

AI and automated systems. We may use information, including de-identified information, to develop, train, test, validate, improve, and evaluate algorithms, statistical models, machine learning systems, artificial intelligence technologies, and related analytical tools used in connection with the Services and future products and services.

5. How we share information

Bloom may share information as described in this Privacy Policy.

We do not sell identifiable reproductive, pregnancy-related, postpartum, fertility, or other health information.

We do not share identifiable reproductive, pregnancy-related, postpartum, fertility, or other health information with advertisers for cross-context behavioral advertising.

We may license or otherwise make available de-identified datasets derived from information provided directly by users and, where permitted by applicable agreements and platform requirements, information obtained through connected services, provided the user has opted into research participation. Certain disclosures may be considered a "sale," "sharing," or other regulated disclosure under applicable privacy laws. Where required by law, Bloom will obtain consent or provide users with applicable rights regarding such disclosures.

5.1 Service providers

We engage third-party service providers to support the Services, including:

• cloud hosting and database infrastructure
• analytics and product measurement tools
• error monitoring and performance tools
• authentication and security providers
• payment processors
• communications and email providers
• AI and computing providers

These providers may process information on our behalf and under our instructions to provide services, support business operations, improve service quality, assist with security, and enable product development, analytics, and related activities.

5.2 Legal requirements

We do not voluntarily provide user data to law enforcement or government agencies. We may disclose information if required by law, including in response to:

• subpoenas
• court orders
• warrants
• other legally binding requests

Where permitted, we may challenge requests that are unlawful or overly broad, particularly those involving sensitive reproductive or health-related data.

5.3 Business transfers

If Bloom is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. The receiving entity may continue to use information in accordance with this Privacy Policy or a successor policy.

5.4 With your direction or consent

We may share information when you explicitly request or authorize it (for example, exporting a report to a healthcare provider).

6. De-identified and aggregated data

We may use de-identified, aggregated, or statistical data derived from the Services for:

• internal analytics and product improvement
• understanding usage patterns and health trends
• aggregate trend analysis and model development
• product research and development
• improving algorithms and system performance

We do not attempt to re-identify de-identified data. We may publish or share aggregated insights that do not reasonably identify any individual.

As between Bloom and users, Bloom retains all rights, title, and interest in de-identified, aggregated, and non-user-identifiable data and outputs derived from the Services.

6.1 Research and data-sharing

Bloom may offer you the opportunity to opt into research and data-sharing programs intended to advance reproductive, maternal, postpartum, and women's health. Participation is voluntary, requires your affirmative opt-in, and does not affect your use of Bloom. You can change your participation at any time.

If you opt in, Bloom may use and share de-identified information associated with your participation with research and commercial partners for research, analytics, and product development. Information derived from Apple HealthKit is used and shared only as permitted by Apple's HealthKit terms.

You can withdraw at any time, which stops future sharing. Withdrawal applies going forward and does not reverse uses that already occurred. Once information has been incorporated into de-identified datasets, research, publications, or models, prior uses cannot be retrieved or reversed.

6.2 Ownership of Derived Data

To the fullest extent permitted by applicable law, platform requirements, and contractual obligations, Bloom owns and may use, commercialize, license, disclose, or publish de-identified data, aggregated data, statistical information, benchmarks, derived datasets, analytical outputs, models, algorithms, insights, and other information created from or based on information collected through the Services, provided such information does not reasonably identify an individual.

Bloom will not attempt to re-identify de-identified information and will require recipients of de-identified datasets to refrain from attempting to re-identify individuals where required by applicable law or contractual obligations.

7. Data retention and deletion

We retain information for as long as necessary to provide the Services and for legitimate business and legal purposes.

7.1 Account deletion

When you delete your account:

• personal identifiers (such as name, email, and login credentials) are removed or disassociated from your account
• personal data is deleted from active systems within a reasonable operational timeframe
• backups may persist temporarily as part of routine disaster recovery systems
• limited data may be retained where required for legal, security, fraud prevention, or compliance purposes

For users who participate in Bloom research programs, account deletion does not require Bloom or its partners to retrieve, delete, reverse, or unwind prior research activities, datasets, analyses, publications, models, or other outputs created before deletion became effective.

7.2 De-identified data

De-identified, aggregated, statistical, and derived data may be retained indefinitely and used for the purposes described in this Policy, provided such data does not reasonably identify an individual.

8. Data security

We implement reasonable safeguards, including:

• encryption in transit and at rest
• access controls and least-privilege permissions
• monitoring and logging of system access
• secure authentication systems
• regular security reviews and patching

9. Your rights and choices

Depending on your location, you may have rights to:

• access personal information
• correct inaccurate information
• delete your account
• obtain a copy of your data
• opt out of certain data uses
• withdraw consent where applicable

To exercise any of these rights, email support@bloomformoms.com. We will respond within the time required by applicable law. We may need to verify your identity before processing your request. If we deny a request, you may appeal by replying to our decision.

Residents of certain U.S. states may have additional privacy rights, including rights related to sensitive data and consumer health data.

10. HealthKit and wearable data

When you connect Apple HealthKit or other wearable services:

• we use data only to provide the Services to you
• we do not use HealthKit data for advertising
• We do not sell HealthKit data or data derived from HealthKit
• you may revoke access at any time in device settings

HealthKit-specific restrictions apply only to Apple HealthKit data. Other wearable integrations may be governed by separate terms consistent with this Policy.

11. Children's privacy

The Services are not intended for individuals under 18. We do not knowingly collect data from individuals under 18. If we become aware of such data, we may delete it where required by law.

12. International use

The Services are intended for users in the United States. If you access the Services from outside the United States, you understand your information may be processed in the United States.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice through the Services and/or by email. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

14. State privacy disclosures (U.S.)

Certain information collected by Bloom may constitute "consumer health data" under applicable state laws. We process such information only for purposes described in this Privacy Policy and in accordance with applicable law. Additional rights and disclosures may apply depending on your state of residence.

15. Contact us

support@bloomformoms.com

SRG Labs LLC
971 US Highway 202 North, Suite R
Branchburg, NJ 08876