🛡️ Bloom stores the health information you enter on our servers, so it is there when you sign in from any device. We do not sell it, we do not use it for advertising, and we do not share it with your clinician, employer or insurer unless you choose to.
Introduction
This privacy policy applies to the Bloom - Women's Health Suite ("Bloom", the "Service") provided by BRK Services PLLC ("we", "us", or "our"). It covers the Bloom web applications at bloom-womens-health.com — including the Pregnancy, Well Woman, Adolescent and Surgery modules — and the Bloom iOS application.
It explains what information Bloom collects, where that information is stored, who processes it on our behalf, and the choices you have.
Bloom provides general health education and organisational tools. It does not provide medical advice, diagnosis or treatment, and it is not a substitute for care from your own clinician. In an emergency, call your local emergency number.
Information we collect
Account information
When you create an account we collect your name and email address. If you sign in with Apple or Google, we receive the identifier and email address that provider releases to us; if you use Apple's Hide My Email, we receive only the private relay address Apple generates, not your real one. Sign-in is handled by Clerk (see Service providers below), and we do not store your password.
Health information you enter
Bloom is a health application, and most of what it stores is health information you choose to enter. Depending on which modules you use, this may include:
- Pregnancy: your due date and how it was determined, gestational age, pregnancy type (for example singleton or twins), your provider's and clinic's name and phone number, appointments, symptoms, kick counts, contraction timings, hospital bag and birth plan entries, visit preparation notes and visit summaries.
- Postpartum: delivery date and type, your baby's name, feeding method, blood pressure readings, mood logs, your responses to the Edinburgh Postnatal Depression Scale (EPDS), feeding, sleep and recovery logs, infant growth measurements, and medications.
- Well Woman: age, whether you have a cervix and the reason for any hysterectomy, immunocompromised status, DES exposure, and history of abnormal or high-grade cervical results.
- Adolescent: age range, whether the account is used in teen or shared mode, and menstrual cycle entries including dates, flow, pain level and free-text notes.
- Surgery: the information you provide when preparing for a procedure.
Some of this is sensitive health information, including information about mental health, reproductive health and cancer screening history. We treat it accordingly.
Conversations with the AI assistant
When you ask Bloom a question, we store your question and the response so your conversation history is available to you.
Payment information
If you buy a membership, payment is processed by Stripe. We store an identifier linking your account to your Stripe customer record. We do not receive or store your full card number.
Technical and usage information
We record limited operational data, including counts of AI requests (used for rate limiting and cost control) and standard server logs. Bloom does not use third-party analytics or advertising SDKs.
How we use your information
- To provide the Service, including showing content appropriate to your stage of pregnancy or your screening history.
- To answer your questions through the AI assistant.
- To maintain your account and process memberships.
- To keep the Service secure, prevent abuse, and apply rate limits.
- To meet our legal obligations.
We do not use your health information for advertising, and we do not sell it.
Where your information is stored
Your information is stored in a PostgreSQL database operated for us by Railway, and travels over encrypted HTTPS connections. It is not held only on your device — storing it on our servers is what makes it available when you sign in from another browser or from the iOS app.
Service providers
We use the following providers to operate Bloom. Each processes information on our behalf, under its own privacy terms.
| Provider | Purpose | What it receives |
|---|---|---|
| Clerk | Accounts and sign-in | Your name, email address and sign-in activity |
| Railway | Application and database hosting | All information Bloom stores |
| OpenAI | AI assistant responses | The text of your question and the context Bloom sends with it |
| Stripe | Payments | The payment details you enter, and your customer record |
Questions are sent to OpenAI through its API. Under OpenAI's API terms, content submitted through the API is not used to train its models.
Sharing
We do not sell your information and we do not share it for advertising. It is not automatically shared with your clinician, your health system, your employer or your insurer. If you want to show your visit preparation notes or visit summaries to your care team, you do that yourself.
We may disclose information where we are legally required to, or where it is necessary to protect the rights or safety of a person.
Retention and deletion
We keep your information for as long as your account is active. You can edit or remove individual entries in the app at any time.
To delete your account and the information held with it, email privacy@brk-services.com from the address on your account. We will delete your account data and remove it from routine backups in line with our backup cycle. Records we are required to keep for legal or accounting reasons, such as payment records held by Stripe, may be retained longer.
Security
Traffic between your device and Bloom is encrypted in transit using HTTPS, and access to the production database is limited to the people who operate the Service. No system can be guaranteed completely secure, and we cannot promise that unauthorised access will never occur.
Children and young people
The Adolescent module is intended for people aged 13 and over, and an account may be used in a shared mode with a parent or guardian. Bloom is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has given us information, email privacy@brk-services.com and we will delete it.
Your choices
- You can see and change the information in your profile at any time while signed in.
- You can ask for a copy of your information, or for it to be deleted, by emailing us.
- Depending on where you live you may have further rights over your personal information. Contact us and we will respond as the applicable law requires.
Changes to this policy
We may update this policy as Bloom changes. Any change will appear on this page with a new effective date. Where a change materially affects how we handle your information, we will make reasonable efforts to tell you.
Contact us
If you have any questions about this privacy policy, please contact us at:
BRK Services PLLC
Email: privacy@brk-services.com
Effective Date: September 12, 2026