Last updated: 16 July 2026 Ā· https://bloomtrack.org
Bloom helps parents and carers of children with bowel conditions track daily treatments, toilet activity, accidents, medicines, and food, and share that information with the health professionals treating their child. Because this involves a child's health data, we treat privacy as a core feature of the app. This policy explains what we collect, why, and your rights.
Account data: your name and email address, used to sign you in and contact you about your account. Child profile data: the child's first name (or nickname), date of birth, avatar, school name and hours, and any condition notes you choose to add. Health log data: the events you record ā treatments, stool details (Bristol type, amount), toilet attempts, bowel and urine accidents, medicine doses, food entries, and related notes. Technical data: push-notification subscriptions if you enable reminders. We do not collect location data, advertising identifiers, or analytics beyond what is needed to run the service.
We process this data solely to provide the service you signed up for: showing you your child's history and trends, generating clinician reports, and sending the reminders you enable. For health data our legal basis under UK GDPR is your explicit consent, which you give by creating an account and entering the data. You can withdraw consent at any time by deleting your data or account.
Only you, and any health professional you connect using a connect code. Doctors get a read-only view of the child's logs and can leave plan notes; they cannot edit or delete your data. You can disconnect a doctor at any time in Settings, which immediately removes their access. Every access by a health professional is recorded in an audit log. Bloom administrators can see account details for support and approval purposes but do not routinely view health logs. We never sell data, never share it with advertisers, and never use it for advertising or marketing.
Data is stored with Supabase (our database and authentication provider) and the app is hosted on Vercel. Transactional emails are sent via Resend. These providers act as data processors under our instructions and hold data in encrypted form in transit and at rest.
For as long as you keep your account, so your child's long-term trends remain available to you and your clinical team. If you delete your account, your data and your children's data are permanently deleted. You can also delete individual log entries at any time in the app.
Under UK GDPR you can access, correct, export, or delete your data, and withdraw consent at any time. Most of this you can do directly in the app; for anything else, contact us and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Bloom accounts are created and controlled by parents, carers, or guardians. The child view is a supervised feature within the parent's account; children do not have their own accounts and we do not knowingly collect data directly from children without parental control.
Bloom is a tracking and communication tool, not a medical device. It does not diagnose, treat, or replace advice from your child's clinical team. Always follow the guidance of your health professionals.
If we make material changes to this policy we will notify you in the app or by email. Questions or requests: support@bloomtrack.org.