Privacy Policy

Health information about you and your child is also covered by our Consumer Health Data Privacy Policy.

Who we are

Bloom Autism Support is a product operated by Bloom Autism Support LLC. You can reach us at BloomAutismSupport@gmail.com.

What Bloom is — and what it is not

Bloom is a parenting support tool. It provides informational guidance, emotional support, and organizational tools for caregivers of autistic individuals. Bloom is not a medical provider, therapist, or clinical service. Nothing in Bloom constitutes medical, clinical, or legal advice. Always consult a licensed professional for medical or clinical decisions.

What information we collect

Bloom collects only information you choose to provide. This includes:

• About you and your child — your name, your child's name, age, diagnosis, communication level, and parenting goals. You enter these when you first use Bloom, on your child's card, or in Settings, and you can change them at any time.
• Chat messages — conversations you have with Bloom are stored to provide context across sessions and improve the quality of responses.
• Before you have an account — Before you create an account, you can tell Bloom your child's first name and what's been hard. That message is sent to our AI provider to write an answer, the same way any message to Bloom is. If you choose to save it, it's kept in your account; if you don't, it stays only in your browser.
• Journal entries — notes and mood logs you write in the Journal section.
• Behavior tracking data — behavior logs you create in the Behavior Tracker.
• Milestones and wins — entries you log in the Milestones and Wins sections.
• Sensory profile — ratings you enter in the Sensory Profile section.
• Daily schedule — schedule items you create.
• Check-in history — your daily check-in emoji and optional notes.
• Transition planning progress — checklist items you have completed.
• Child's Key profile — the anchor, motivator, regulator, trigger, and gift information you provide.
• Account information — your email address is collected when you create an account or save your child's record, and stored to protect your data and restore your progress on any device. If you purchase a subscription, your payment status is also stored. Payments made on the web are processed by Stripe; subscriptions bought inside the iPhone or Android app are processed by Apple or Google. We never see or store your card details.
• Mailbox email & documents — each child can have their own Bloom inbox address. Mail sent to it — whether you forward it yourself or a teacher, clinic or co-parent sends it directly — is received and stored, along with any attachments or images, so Bloom can read, summarize, and organize it for you. Anyone who has the address can send to it, so share it only with people you want reaching your child's record. Email from a sender who is not on your list is held, unread, until you choose to allow it, allow it once, decline it or block the sender; a declined or blocked email is deleted without being read. Documents you upload yourself — PDFs and photos, including ones you take with your camera — are handled and retained the same way.
• Child photo — if you add a photo of your child, it is stored privately in your Bloom account, resized on your device before upload (which removes location data), and shown only in your Bloom account, on your child's Child Card if you share it, and on the cover of The Story So Far if you make one. A Story keeps the photo it was made with: deleting that Story, or your account, deletes that copy too. Display links expire after 24 hours. It is never sent to Bloom's AI. Deleting your account deletes the photo.
• Growing Up photos — if you add a photo to a step your child reaches in Growing Up, it is handled the same way as your child's photo: resized on your device before upload (which removes location data), stored privately in your Bloom account, shown through links that expire after 24 hours, and never sent to Bloom's AI. Deleting your account deletes these photos.
• Documents Bloom makes for you — a plan, a letter, a Visit Summary or The Story So Far — are saved privately in your account as a PDF, with the title and, for a Story, its opening paragraph so the Book can show it. Deleting a document deletes all of it, and deleting your account deletes them all.
• Photos and PDFs you send in chat — a photo or PDF you attach to a chat message is sent to Bloom's AI (Anthropic) so it can answer that message. Bloom does not keep the file: your chat history keeps your words and a note that a file was sent, not the file itself. It is stored only if you tap "Save to Mailbox" (for a PDF, "File this in my Mailbox"), and from then on it is handled like any other Mailbox document.
• Child Card — details you enter on your child's card (birthday, diagnosis as you wrote it, how they communicate, what calms or escalates them, medications, allergies, and the names and phone numbers of people to call). Bloom's chat reads the rest of the card so its answers fit your child; phone numbers are never sent to Bloom's AI. The card is designed to be shared, printed, or emailed by you; where it goes after that is up to you. Deleting your account deletes the card.
• Voice — if you use the microphone, your browser's or phone's speech service (Apple or Google) turns your voice into text; Bloom receives only the text you choose to send. Read-aloud uses your device's voices; some browser voices may send the reply text to Apple or Google to be spoken. Voice is meant for parents, not children.
• How you sign in — you can sign in with your email address, with Apple, or with Google. If you use email, we send a short sign-in code to that address; there is no password to store. If you use Apple or Google, Bloom receives your name and email address from them. Apple may give Bloom a private relay address instead of your real email.

How we store your data

Your data is stored in two places:

• On your device — Bloom keeps a copy of your data on your device so it loads quickly and works offline. On the web that is your browser's local storage; in the iPhone and Android apps it is the app's own storage. Either way it stays on your device.
• In the cloud — Your data is automatically synced to our secure cloud database (Supabase, hosted in the United States). This protects your progress and allows you to restore everything if you switch devices or clear your browser. Row-level security ensures you can only access your own data — no other user can see it.

You don't need an email address for your first answer from Bloom. To keep going and to save your child's record, Bloom asks for one, or for Apple or Google sign-in. Your email is used to protect your data, restore your progress on any device, and send you the emails listed below.

Bloom Autism Support sends these emails:

• The sign-in code, when you ask for one.
• One welcome email from our co-founder when you create your account.
• A weekly note about your child.
• Occasional updates about Bloom Autism Support.
• A notice if a payment for your subscription doesn't go through.
• Bloom's notes on an IEP you send to your child's Bloom mailbox, emailed back to you.
• Your child's Child Card or a Visit Summary, when you ask Bloom to email it to you.

The welcome email, the weekly note and the updates have an unsubscribe link. The others don't, because you asked for them or because they are about your account or payment. We do not share your email with third parties or use it for advertising.

How we use your data

Your data is used for one purpose: to make Bloom more helpful to you. Specifically:

• To personalize Bloom's responses with context about your child and your situation
• To remember what has worked and what hasn't across sessions
• To show you your own history — journal entries, milestones, behavior patterns, wins
• To maintain your subscription status
• To analyze usage patterns and improve Bloom's features, knowledge, and responses over time

We do not sell your data. We do not share your data with advertisers. Your conversations with Bloom are yours.

Training AI. Bloom does not collect, use or sell your data, or your child's, to train large language models or any other AI model. Anthropic, the company whose AI writes Bloom's answers, is not allowed to train its models on what you send through Bloom. Anthropic deletes it within 30 days, unless a message is flagged for a safety review, when it may keep it for up to 2 years.

AI and your conversations

Bloom's chat feature is powered by Anthropic's Claude AI. When you send a message, it is transmitted securely, with any photo or PDF you attach, to Anthropic's API to generate a response. Anthropic's own privacy policy governs how they handle API data. To generate personalized responses, Bloom sends relevant context to Anthropic's API — this may include your child's name, age, communication level, sensory profile, behavior patterns, and other information you have provided in the app. This context is what allows Bloom to give specific, personalized guidance rather than generic answers. Anthropic does not use API data to train their models. You can review Anthropic's privacy policy at anthropic.com/privacy.

Mail sent to your Bloom mailbox. If you use the Mailbox feature, mail sent to your child's Bloom address — whether you forward it yourself or someone sends it directly — and any attachments or images are received and processed on our behalf by Resend (whose email infrastructure runs on Amazon Web Services (AWS) in the United States). To summarize and analyze each email for you, Bloom sends its contents to Anthropic's Claude AI, and the resulting summaries and analysis are stored in your secure Supabase database. Because you choose what to forward, this content can include sensitive details about your child — for example, information from school, therapy, or medical emails. Anthropic does not use this data to train its models. Please avoid forwarding anything you would not want processed by an AI service — the Mailbox is optional, and you can use the rest of Bloom without it.

Third-party services we use (sub-processors)

Bloom relies on a small set of trusted service providers to operate. Each receives only the data needed for its function, and each is bound by its own privacy and security commitments:

• Anthropic — powers Bloom's AI (Claude), including chat responses and the summarization and analysis of the emails, documents, and images you forward to your Bloom mailbox. Anthropic does not use this data to train its models.
• Supabase — our cloud database and authentication, hosted in the United States. Enforces row-level security so each user can access only their own data.
• Stripe — processes payments for web subscriptions. Bloom never stores your card details.
• Apple — processes subscription purchases made inside the iPhone app.
• Google Play — processes subscription purchases made inside the Android app.
• RevenueCat — records which subscription you hold, on both stores. It receives your purchase receipt and an anonymous Bloom user id. It never receives your child's information.
• Sentry — collects technical error reports when something in the app breaks, so we can fix it. Reports carry nothing linked to you: no account id, no name, no messages and no email address. Only the live site sends them. Sentry also receives timing and error data about each request to our AI provider (how long it took, its size, which model answered, and any error code) so we can find slow or failed answers. It receives no conversation content: no messages, no names, no details about you or your child.
• Resend — delivers our outbound email and receives and processes inbound email sent to your Bloom mailbox address. Resend's email infrastructure runs on Amazon Web Services (AWS) in the United States.
• ImprovMX — forwards email sent to our staff addresses.
• Netlify — hosts the Bloom website and its secure server functions.
• Google Analytics — visitor statistics for the Garden guides, the press page and the research page only, never the app (see "Analytics" below).

Children's information

Bloom is for adults. You must be 18 or older, and the parent or legal guardian of the child whose information you enter, or otherwise authorised to act for them. Bloom is not designed for children to use directly, and we do not knowingly collect information from a child using Bloom themselves.

The information you record about your child is detailed and sensitive. It can include their name, age, diagnosis, medications, allergies, behaviour patterns, therapy and school records, and the names and phone numbers of people to call in an emergency. It is used to personalize Bloom's answers for you as their caregiver. It is never sold, never used to train AI models, and never shared with anyone you have not chosen to share it with. You can delete all of it at any time from Settings.

Analytics

Bloom uses Google Analytics only on these public pages: the Garden guides, the press page and the research page. It is not used anywhere in the Bloom app: not on the first screen, not in the guest chat, not after you sign in, and not in the iPhone or Android app. On those public pages it tells us how many people visit, which pages they read, the kind of device and browser they use, their approximate region, and the site that sent them. Google Analytics sets cookies in your browser to do this. You can block it with a browser extension such as the Google Analytics Opt-out Add-on.

Bloom also records its own usage events — which screens are opened, which features are used, and whether you are on an iPhone, on Android, or on the web. These are stored in Bloom's own database, not sent to an analytics company, and they never contain your name, your email address, your child's name, or anything you have written.

Data retention

We retain your data for as long as necessary to provide and improve Bloom. Your data helps us understand what parents need, improve our knowledge base, and make Bloom more helpful over time. If you delete the app or clear your browser data, your local data is removed immediately.

You can delete your account and everything in it from Settings. The delete is immediate and permanent — your record, your child's information, your uploaded files and photos are removed, not archived. There is no undo, and we cannot recover it afterwards. If you would rather we did it for you, email BloomAutismSupport@gmail.com.

Your rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data

To see, download, correct or delete your data, use Settings → Delete my account, or email BloomAutismSupport@gmail.com from the address on your account. We confirm it's you, answer within 45 days, and complete a deletion within 30 days of confirming it's you. Deletion also reaches the services that process your data for us, and our database backups, which are overwritten within 7 days. If we can't do what you asked, we'll tell you why, and you can appeal by replying.

California residents

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to request a copy of it. You also have the right to opt out of the sale of your personal information — but Bloom does not sell your personal information to anyone, so there is nothing to opt out of. To exercise any of these rights, contact us at the email above.

Security

We take reasonable measures to protect your data. All data transmitted between Bloom and our servers is encrypted in transit (HTTPS), and data stored in our cloud database is encrypted at rest. Our cloud database uses row-level security so each user's data is isolated. We do not store payment information — all payments are processed by Stripe.

Changes to this policy

If we make significant changes to this privacy policy, we will update the "Last updated" date at the top of this page. Continued use of Bloom after changes constitutes acceptance of the updated policy.

Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us at BloomAutismSupport@gmail.com.

← Back to Bloom