How we protect your family's data.

1. Information We Collect

Information Provided by Parents

When a parent creates a Bloom account, we collect:

• Email address — used for account authentication, password recovery, and important account notifications.
• Password — stored securely using Supabase authentication. We never store passwords in plain text.
• Full name (optional) — if provided during signup.
• Payment information — processed entirely by Apple (via the App Store) and RevenueCat. We never receive, store, or have access to credit card numbers, bank account details, or other payment credentials.

Information Provided About Children

Parents create child profiles within their account. For each child, we store:

• First name — used to personalize the child's learning experience within the app.
• Grade level selection — used to determine which curriculum content is presented. This selection controls content rendering only and is not stored as personal information about the child.
• Avatar selection — the child's choice of mascot character (Cornelius or Cordelia).
• PIN hash — a 4-digit PIN chosen by the child is hashed using SHA-256 before storage. The actual PIN is never stored.

Information Generated Through Use

As children use Bloom, the app records:

• Learning session data — which questions were answered, whether each answer was correct, scores per session, and completion timestamps. This data powers the mastery-based advancement system and parent progress reports.
• Enrollment progress — current week, day, and version (A, B, or C) per subject.
• Streak data — the number of consecutive days a child has completed at least one session.
• Speech recordings — when a child completes a speech or language exercise, an audio recording is captured and stored so that a parent can review and grade the response. Recordings are stored in Supabase Storage and are accessible only to the parent account that created the child profile.
• Drawing submissions — handwriting or drawing responses for spelling and writing exercises, stored as images for parent review and grading.

Information We Do Not Collect

• We do not collect precise geolocation data.
• We do not collect device identifiers for advertising purposes.
• We do not use advertising SDKs or display ads of any kind.
• We do not collect contact lists, photos, or camera data.
• We do not allow children to post publicly, communicate with other users, or share personal information.

2. How We Use Information

We use the information described above for the following purposes:

• Delivering the learning experience — presenting curriculum content matched to each child's grade level and mastery progress.
• Tracking academic progress — recording session scores, advancement through the mastery system, and streak data so parents can monitor their child's growth.
• Parent dashboard — displaying progress reports, session history, and grading queues to the parent account holder.
• Account management — authenticating parent logins, processing password resets, and managing subscription status.
• Product improvement — understanding usage patterns in aggregate to improve curriculum content and app features. We do not sell or share individual user data for this purpose.

3. How We Share Information

We do not sell, rent, or trade personal information to third parties.

We share information only with the following service providers, solely to operate the app:

• Supabase (database and authentication) — stores account data, child profiles, session records, and media files. Supabase processes data in accordance with their privacy policy at supabase.com/privacy.
• RevenueCat (subscription management) — processes subscription status and entitlement verification. RevenueCat does not receive child data. Their privacy policy is at revenuecat.com/privacy.
• Apple (payment processing) — handles all in-app purchase transactions. Apple's privacy policy is at apple.com/privacy.
• Expo / EAS (build and update infrastructure) — delivers app updates. Expo's privacy policy is at expo.dev/privacy.

We may also disclose information if required by law, such as in response to a valid court order or subpoena.

4. Children's Privacy (COPPA Compliance)

Bloom is designed with children's privacy as a priority:

• Parental gate — only parents can create accounts. Children access the app through a parent-created profile using a 4-digit PIN. Children do not have independent accounts, email addresses, or authentication credentials.
• No child-directed data collection beyond learning — we collect only the information necessary to deliver the educational experience (session scores, progress, recordings for parent review).
• No advertising — Bloom contains no ads, no ad tracking, and no advertising SDKs.
• No social features — children cannot communicate with other users, post content publicly, or share personal information.
• No third-party tracking — we do not use analytics SDKs that track children across apps or websites.
• Parental access and control — parents can view all data associated with their child's profile through the parent dashboard. Parents can delete a child's profile at any time, which removes all associated session data, recordings, and progress records.

Parental Rights Under COPPA

Parents have the right to:

• Review the personal information collected about their child by logging into the parent dashboard.
• Request deletion of their child's data by deleting the child's profile within the app or by contacting us at the email address below.
• Refuse further collection of their child's data by deleting the child's profile or by deleting their Bloom account entirely.

5. Data Storage and Security

All data is stored on Supabase infrastructure with the following protections:

• Row Level Security (RLS) is enabled on all database tables, ensuring that each parent can only access data belonging to their own account and child profiles.
• Passwords are hashed by Supabase authentication (never stored in plain text).
• Child PINs are hashed using SHA-256 before storage.
• All data transmission uses HTTPS/TLS encryption.
• Speech recordings and drawing submissions are stored in private Supabase Storage buckets accessible only to the authenticated parent account.

6. Data Retention and Deletion

• Active accounts — we retain data for as long as the parent account is active.
• Deleted child profiles — when a parent deletes a child's profile, all associated data (session records, enrollment progress, recordings, drawings) is permanently deleted.
• Account deletion — parents can delete their entire Bloom account by contacting us at the email address below. Upon account deletion, all data associated with the account — including all child profiles and their data — is permanently deleted within 30 days.
• Subscription cancellation — canceling a subscription does not delete data. Data is retained so that it remains available if the parent resubscribes.

7. Your Choices

• Opt out of email — account-related emails (password resets, subscription confirmations) cannot be opted out of, as they are necessary for account security. We do not send marketing emails.
• Delete data — parents can delete individual child profiles within the app or request full account deletion by contacting us.
• Modify data — parents can update their child's name, grade level, and avatar within the app at any time.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify parents via the email address associated with their account. The "Last Updated" date at the top of this policy reflects the most recent revision.

9. Contact Us

If you have questions about this Privacy Policy, your data, or your rights under COPPA, please contact us:

Bloom: Learn & Grow is committed to protecting the privacy of families and children. Every child grows at their own pace — and their privacy grows with them.