Your privacy matters.

Baby Bloom ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using Baby Bloom, you agree to the collection and use of information in accordance with this policy. We comply with the General Data Protection Regulation (GDPR) and applicable data protection laws.

We collect only the information necessary to provide and improve our service:

• Name: To personalise your experience.
• Email address: To create your account, send confirmations, and communicate with you.
• Pregnancy information: Such as due date and gestation weeks, to personalise your journal.
• Journal content: Notes, photos, and entries you create — stored securely and visible only to you.
• Basic usage data: Anonymous analytics to understand how the app is used and improve it.

Your data is used exclusively to:

• Provide and operate the Baby Bloom service
• Personalise your pregnancy journal experience
• Manage the waitlist and notify you at launch
• Send transactional emails (account confirmation, password reset)
• Improve the app based on anonymous usage patterns
• Respond to your support requests

We do not sell, trade, or rent your personal data to third parties. Ever.

We use a small number of trusted third-party services to operate Baby Bloom:

• Supabase: Secure database and authentication infrastructure.
• Resend: Transactional email delivery (confirmations, password resets).
• Vercel: Hosting and deployment of the web application.

Each of these providers is GDPR-compliant and processes data only as necessary to deliver their service.

We take the security of your data seriously. All data is encrypted in transit (HTTPS/TLS) and at rest. Access to your journal is protected by authentication and row-level security — only you can see your entries.

While we implement industry-standard safeguards, no method of transmission over the internet is 100% secure. We will notify you promptly in the event of any data breach that affects your personal information.

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your account and all associated data.
• Portability: Request your data in a portable, machine-readable format.
• Objection: Object to processing of your data in certain circumstances.

You can exercise most of these rights directly from your account Settings page. For anything else, contact us at the email below.

For any privacy-related questions, requests, or concerns, please contact us at:

We will respond to all requests within 30 days, as required by GDPR.