Privacy Policy

This policy explains how Voventech OÜ (“Voventech”, “we”, “us”) handles information when you use the Bloom iOS and iPadOS application (“Bloom”) or visit bloom.voventech.com.

1. Controller and contact

Voventech OÜ, registry code 17284289, is the responsible company for Bloom. Our registered address is Tartu mnt 67/1-13b, 10115 Tallinn, Estonia. Contact us at hello@voventech.com for privacy questions or to exercise a privacy right.

2. Family data stored by Bloom

Bloom can store a display name, journey stage, due or birth dates, appointments, reminders, pregnancy and baby-care logs, measurements, journals, preferences, and family memories. These records are stored on your device. If iCloud is available and enabled, Apple syncs them using Bloom’s private CloudKit container. Voventech does not operate an application server that receives or profiles this family content.

You control this data through your device, Apple account, and Bloom. The app lets you export a readable copy of Bloom records and delete Bloom data. Private iCloud synchronization may need time to propagate a deletion to your other devices and Apple backups may remain subject to Apple’s backup lifecycle.

3. Apple Health and device permissions

Bloom asks for HealthKit access only after you choose a relevant import or sync action. When you import a selected value, Bloom may save it as a private local Bloom record. HealthKit data is never included in Bloom analytics, advertising, or tracking. You can review or revoke access in Apple Health or Settings. Camera, photo-library, notification, Face ID, and Live Activity permissions are likewise requested only for the feature you choose.

4. Optional product analytics

Product analytics is off by default. If you actively enable it, Bloom uses Mixpanel’s EU data endpoint to send a device identifier and product-interaction events so we can understand which app surfaces are useful and reliable. We do not attach names, dates, notes, symptoms, movement counts, feeding details, measurements, memories, or other health or family values. We do not use analytics for advertising or cross-app tracking.

Consent is the legal basis for optional analytics. You can withdraw it at any time in Profile & Settings; this stops future collection and clears queued/profile state handled by the SDK. To request deletion of previously received analytics events linked to your device identifier, email us from the address above. Analytics records are otherwise kept only for product-quality analysis under the active project-retention settings and are deleted or aggregated when no longer needed.

5. Website data

The Bloom website has no account, advertising tracker, marketing analytics, contact form, or non-essential cookie. Its hosting and security providers may process ordinary request data such as IP address, browser information, requested path, timestamp, and security signals to deliver the site, prevent abuse, and diagnose failures. We rely on our legitimate interests in secure, reliable publishing for this limited processing. Provider logs are retained according to the shortest operational or security period applicable to the service and are not used to build a marketing profile.

Choosing an email link opens your own email provider. Messages you send are processed to answer your request, protect the service, and meet legal obligations. We retain support correspondence only as long as reasonably needed for those purposes.

6. Recipients and international processing

Depending on the feature you choose, relevant processors or independent platform providers may include Apple (App Store, iCloud/CloudKit, HealthKit, notifications), Mixpanel (consent-based EU analytics), and our website hosting/security providers. Some providers may process support or technical data outside your country under their applicable contractual safeguards. Bloom does not sell personal data.

7. Your rights

Where data-protection law applies, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent without affecting earlier lawful processing. Most family data is available directly through Bloom’s export and delete controls. You may also complain to the Estonian Data Protection Inspectorate or your local supervisory authority.

8. Children and family information

Bloom is intended for parents and adult caregivers, not for use by children. Adults should add only family information they are entitled to manage. We do not knowingly collect children’s information through a Voventech-operated account or server.

9. Security and limits

Bloom uses Apple platform protections, app sandboxing, optional biometric app lock, private CloudKit storage, and data minimization. No system can guarantee absolute security. Keep your device passcode and Apple account secure and contact us if you believe Bloom data has been exposed.

10. Changes

We may update this policy when Bloom, its providers, or legal requirements change. We will post the updated date here and provide additional notice when a material change requires it.