Privacy Policy

At Pregnancy Bloom, protecting your personal data is an absolute priority. This privacy policy explains what data we collect, why we collect it, and how we protect it, in compliance with the General Data Protection Regulation (GDPR).

1. Identity of the data controller

The data controller is Pregnancy Bloom, publisher of the Pregnancy Bloom application.

Contact: privacy@pregnancybloom.com

2. Data collected

When using the Pregnancy Bloom application, we collect the following data:

• Email address
• Expected due date
• Pregnancy tracking data: weight, contractions, baby movements
• Saved first names
• Journal entries
• Maternity checklist data

3. Authentication

To create an account and access the application, we offer the following authentication methods:

• Email and password
• Sign in with Google OAuth
• Sign in with Apple

Passwords are never stored in plain text. Sign-in via Google and Apple uses secure OAuth 2.0 protocols and does not give us access to your passwords for those services.

4. Purpose of data processing

Your data is used exclusively to provide you with a personalized pregnancy tracker within the Pregnancy Bloom application. No data is used for advertising, commercial profiling, or marketing purposes.

5. Legal basis for processing

The processing of your data is based on your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time by deleting your account or by contacting us.

6. Health data — Sensitive data

Certain data collected by Pregnancy Bloom (weight, contractions, baby movements) is considered health data within the meaning of Article 9 of the GDPR. This data benefits from enhanced protection:

• Its collection is based on your explicit consent (Article 9(2)(a) of the GDPR)
• It is encrypted at rest and in transit
• Access is strictly limited to your personal account

7. Hosting and data storage

Your data is hosted by Supabase on servers located in the European Union. It is protected by:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Strict access policies (Row Level Security)

8. Data sharing

We do not share, sell, or transfer any of your personal data to third parties. No data is used for advertising purposes. No third-party tracking tools are integrated into the application.

9. Data retention period

Your data is retained as long as your account is active. If you delete your account, all your personal data will be removed from our servers within 30 days. Waitlist data (email) is retained until the application launches, then deleted if no account is created.

10. Your rights

In accordance with Articles 15 to 21 of the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to the processing of your data
• Right to restriction: request the restriction of processing

To exercise these rights, contact us at privacy@pregnancybloom.com. We will respond within 30 days.

11. Cookies

The Pregnancy Bloom website (homepage and waitlist) does not use tracking cookies or advertising cookies. Only cookies strictly necessary for the operation of the site may be used.

12. Push notifications

The Pregnancy Bloom application may send push notifications (appointment reminders, weekly updates). These notifications operate on an opt-in basis: you must give your explicit consent to receive them, and you can disable them at any time from the application settings or your device settings.

13. Changes to this policy

We reserve the right to modify this privacy policy. In the event of a substantial change, you will be notified via an in-app notification or by email. The date of the last update is indicated at the top of this page.

14. Contact

For any questions regarding this privacy policy or the processing of your personal data, contact us:

Email: privacy@pregnancybloom.com