Bloomwell Privacy Policy

Last Updated: May 12, 2026

Bloomwell, Inc. ("Bloomwell," "we," "our," or "us") provides software that helps childcare programs run their operations and stay connected with the families they serve. This Privacy Policy describes how we collect, use, and share personal information when you visit our websites, use our mobile and web applications, or otherwise interact with us (collectively, the "Services").

By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.

1. An Important Note About How Bloomwell Handles Information

Bloomwell plays two different roles depending on whose information is involved. Understanding the difference is the most important thing in this Policy.

(a) Information Bloomwell Controls. This Policy describes the information that Bloomwell collects and uses for its own purposes — for example, account information for the childcare programs that subscribe to our Services ("Programs"), information about visitors to our marketing website, and information about prospective customers we communicate with. With respect to that information, Bloomwell acts as the "controller" or "business" under applicable privacy laws.

(b) Information Programs Put Into Bloomwell ("Program Data"). Programs use Bloomwell to manage their day-to-day operations. That includes information about children, parents, guardians, emergency contacts, staff, attendance, billing, messages, and similar records. Programs are the controllers of this information. We process Program Data on each Program's behalf and only in accordance with our agreement with that Program (including any data processing terms).

If you are a parent, guardian, family member, or staff member at a Program, the Program — not Bloomwell — decides what information goes into Bloomwell, how long it stays there, and who can see it. If you have questions or requests about your information or your child's information (for example, to access, correct, or delete it), please contact the Program directly. We will support the Program in responding to those requests but cannot act on them without the Program's instructions.

The rest of this Policy is primarily about Information Bloomwell Controls. Section 9 explains how we handle children's information specifically.

2. Information We Collect

We collect information in three ways: directly from you, automatically when you use the Services, and from third parties.

2.1 Information You Provide Directly

When you sign up for, evaluate, or otherwise use the Services, you may provide:

Account and contact information: name, email address, phone number, job title, Program name, Program address, and similar identifiers.
Authentication information: username, password, and information you use to verify your identity.
Billing and payment information: business name, billing address, tax identification numbers, and bank account or routing information used for payouts. Card payment data is collected by our payment processor, Stripe, and is not stored on Bloomwell's systems (see Section 8).
Communications: the content of messages you send to us — including support requests, survey responses, and demo requests — along with any attachments.
Marketing information: preferences you provide when subscribing to newsletters, downloading resources, or registering for events.

2.2 Information Collected Automatically

When you use the Services, we and our service providers automatically collect:

Device and connection information: IP address, device type, operating system, browser type and version, language preferences, mobile carrier, device identifiers, and similar technical data.
Usage information: pages and screens viewed, features used, links clicked, dates and times of access, referring URLs, and approximate location (derived from IP address).
Cookies and similar technologies: see Section 7 for details.
Log and diagnostic data: crash reports, performance metrics, and error logs that help us maintain and improve the Services.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

Integration partners: if a Program connects Bloomwell to a third-party service (such as an accounting, payroll, or government reporting system), we may receive information from that service as needed to operate the integration.

Payment processor: Stripe shares limited information with us about transactions, payouts, and account status so we can support the Program's use of payments.

Service providers: analytics, advertising, and marketing providers may share information with us about how you discovered Bloomwell.

Referrals: if someone refers you to Bloomwell or invites you to join a Program, we may receive your name and contact information from them.

Publicly available sources: business directories, social media, and other sources we use to inform marketing and outreach.

2.4 Program Data

As described in Section 1, Programs use Bloomwell to collect and manage information about families, children, and staff. We do not control what information Programs choose to put into the Services. Our handling of Program Data is governed by our agreement with the Program.

3. How We Use Information

We use the information we control for the following purposes:

Provide and operate the Services: create and maintain accounts, deliver features, process transactions, route payouts, send transactional notifications, and provide customer support.
Communicate with you: respond to inquiries, send service announcements, share updates about your account, and provide information about features you use.
Improve and develop the Services: understand how Programs and users interact with Bloomwell, troubleshoot problems, conduct research, test new features, and develop new products.
Marketing and promotion: send newsletters, product updates, and other marketing communications about Bloomwell. You can unsubscribe at any time using the link in any marketing email or by contacting us.
Security and fraud prevention: detect, investigate, and prevent fraudulent, unauthorized, or illegal activity; protect the rights, property, and safety of Bloomwell, our customers, and others.
Legal and compliance: comply with applicable laws, respond to legal process, enforce our agreements, and protect our legal rights.
Business operations: internal reporting, planning, audits, accounting, and similar administrative purposes.
With your consent: for any other purpose disclosed to you at the time we collect your information or for which you have provided consent.

We may aggregate or de-identify information so that it can no longer reasonably be used to identify you, and we may use that information for any purpose.

4. How We Share Information

We share information in the following circumstances:

4.1 Within the Bloomwell Platform

The Services are designed to facilitate communication between Programs and the families and staff they serve. Information flows between users within a Program based on the Program's configuration and the role-based permissions it has set. Each Program is responsible for who they invite to their account and what those users can see.

4.2 Service Providers

We share information with third-party vendors and service providers that perform services on our behalf, including:

Cloud hosting and storage
Payment processing (Stripe)
Email, SMS, and push notification delivery
Customer support tools
Analytics and product analytics
Marketing platforms and advertising networks
Security, fraud prevention, and identity verification
Professional advisors (legal, accounting, insurance)

These providers are contractually required to handle information only for the purposes we direct and consistent with this Policy.

4.3 Legal and Safety Reasons

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with a law, regulation, subpoena, court order, or other legal process; (b) enforce our terms or agreements; (c) detect, investigate, or prevent fraud, security, or technical issues; or (d) protect the rights, property, or safety of Bloomwell, our customers, users, or the public.

4.4 With Your Consent

We may share information with other third parties when you direct us to or otherwise consent to the sharing.

4.5 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

4.6 We Do Not Sell or Share Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. See Section 13 for more on the California-specific definitions of "sell" and "share."

5. Your Choices

You have choices about how we communicate with you and how your information is used:

Marketing emails: unsubscribe using the link in any marketing email, or contact us. You will continue to receive service-related communications about your account.
Text messages: if you receive an unwanted text message from us, you can opt out by replying STOP, by following the instructions in the message, or by contacting us. We do not share mobile phone numbers or SMS opt-in information with third parties or affiliates for their marketing or promotional purposes. SMS opt-in data and consent are never shared with any third party. Message and data rates may apply.
Push notifications: turn off push notifications in your device settings.
Cookies: see Section 7.
Account information: update your account information at any time through the Services, or contact us for help.

If you are a parent, guardian, or family member, contact your Program for choices about information they have collected about you or your child.

6. Bloomwell's Mobile Apps

Our mobile applications may request permission to access certain features of your device, such as the camera (to take photos), the photo library (to upload photos), notifications, and location. You can grant or revoke these permissions through your device settings. Some features may not work without the relevant permissions. App stores (Apple App Store and Google Play) may also collect information about your installation and use of our apps. Their handling of that information is governed by their own privacy policies.

7. Cookies and Similar Technologies

We and our service providers use cookies, pixels, software development kits ("SDKs"), and similar technologies to operate and improve the Services. We use:

Strictly necessary technologies to authenticate users, secure the Services, and provide core functionality.
Functional technologies to remember your preferences and personalize your experience.
Analytics technologies to understand how the Services are used.
Marketing technologies on our marketing website to measure and improve our advertising.

You can control cookies through your browser settings. Most browsers let you block or delete cookies; the Help section of your browser explains how. Blocking certain cookies may affect the functionality of the Services.

Some browsers offer "Do Not Track" signals. Because there is no industry standard for how to interpret these signals, Bloomwell does not currently respond to them. Because we do not "sell" or "share" personal information as defined under California law, Global Privacy Control ("GPC") signals do not trigger any additional opt-out action; there is nothing to opt out of.

8. Payment Information

Payments through Bloomwell are processed by Stripe, Inc. When a family makes a payment, or when Bloomwell pays out funds to a Program, payment card numbers, bank account details, and similar financial information are collected and stored by Stripe — not by Bloomwell. Stripe's handling of that information is governed by Stripe's Privacy Policy.

Bloomwell receives limited information about transactions and payouts from Stripe (such as amounts, dates, statuses, and the last four digits of cards) to operate billing features, support our customers, and meet legal and accounting requirements.

Strictly necessary technologies to authenticate users, secure the Services, and provide core functionality.
Functional technologies to remember your preferences and personalize your experience.
Analytics technologies to understand how the Services are used.
Marketing technologies on our marketing website to measure and improve our advertising.

9. Children's Information

Bloomwell's marketing website and account sign-up flows are intended for use by adults — specifically, Programs and the staff who operate them. The Services are not directed to children, and we do not knowingly collect personal information directly from children for our own purposes.

Programs use Bloomwell to maintain records about the children in their care. As described in Section 1, that information is Program Data, and the Program — not Bloomwell — is responsible for obtaining any required parental consent, providing notice to families, and otherwise complying with laws that apply to children's information. We process Program Data only on the Program's behalf and in accordance with our agreement with the Program.

If you believe that we have collected personal information from a child outside of this context, please contact us at [privacy@bloomwell.com] and we will take appropriate steps to address the issue.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, and alteration. We periodically review and update our safeguards as we deem appropriate.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at [security@bloomwell.com].

11. Data Retention

We retain information for as long as needed to provide the Services, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements.

Program Data is retained according to our agreement with the Program. Programs may export and delete Program Data through the Services or by contacting us. After a Program's account ends, we may retain Program Data for a reasonable period to allow export, resolve outstanding obligations, and comply with applicable law.

12. International Users

Bloomwell is based in the United States, and our service providers may be located elsewhere. If you are accessing the Services from outside the United States, your information will be transferred to, stored, and processed in the United States and in other countries where our service providers operate. The laws in those countries may differ from those in your country.

The Services are intended for users in the United States. If you are located elsewhere and choose to use the Services, you do so on your own initiative and at your own risk.

13. California Privacy Rights

This section supplements the rest of this Policy and applies to California residents whose personal information Bloomwell collects as a "business" under the California Consumer Privacy Act, as amended ("CCPA"). It does not apply to Program Data — for that, please contact your Program.

13.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information (as defined in the CCPA) about California residents:

13.2 Sources

We collect the information described above from the categories of sources listed in Section 2: directly from you, automatically through your use of the Services, and from third parties.

13.3 Business Purposes for Collection

We use this information for the business and commercial purposes described in Section 3.

13.4 Disclosure to Third Parties

In the past 12 months, we have disclosed each of the categories above to the categories of recipients described in Section 4 (service providers, integration partners, and legal and safety recipients).

13.5 "Sale" and "Sharing" of Personal Information

We do not "sell" personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months and do not currently have plans to do so. We do not sell or share the personal information of children we have actual knowledge are under 16.

13.6 Retention

We retain each category of personal information for as long as needed for the purposes described in Section 11.

13.7 Your California Rights

Subject to certain exceptions, California residents have the right to:

Know what personal information we have collected, used, disclosed, and shared about you.
Access a copy of the personal information we have collected about you.
Correct inaccurate personal information.
Delete personal information we have collected from you.
Opt out of the "sale" or "sharing" of personal information (note: we do not currently sell or share personal information, so this right is not currently triggered).
Limit our use of sensitive personal information (note: we do not currently use sensitive personal information for purposes that require this right to be offered).
Non-discrimination for exercising any of these rights.

To exercise these rights, email [privacy@bloomwell.com] or use the request form at [bloomwell.com/privacy-request]. We will verify your identity before responding. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your identity directly.

We will respond to verified requests within the timeframes required by the CCPA.

13.8 Shine the Light

California residents may request information about our disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not make these disclosures.

14. Other U.S. State Privacy Rights

Residents of certain other states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others with comprehensive privacy laws — may have rights similar to those described above, including the right to access, correct, delete, and obtain a copy of their personal information, and to opt out of certain processing.

To exercise these rights, contact us at [privacy@bloomwell.com]. We will verify your request and respond within the timeframes required by applicable law. If we deny a request, you may have the right to appeal; instructions for appeal will be included in our response.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top. If we make material changes to this Privacy Policy, we will do our best to alert you to changes by placing a notice on our website, by sending you an email, and/or by some other means. Please note that if we aren't able to send a notification or if you've opted not to receive legal notice emails from us (or you haven't provided us with your email address), you are still responsible for reading and understanding the changes. Your continued use of the Services after the effective date of the updated Policy means you accept the changes.

16. How to Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

Bloomwell, Inc. Email: [privacy@bloomwell.com]

If you are a parent, guardian, family member, or staff member at a Program and have questions about information the Program has collected about you or your child, please contact the Program directly.