Privacy Policy

🏢1. Who we are

Tiny Bloom Ltd ("Tiny Bloom", "we", "us", "our") is a family planning and parenting app operated from Dublin, Ireland. We are the data controller for personal information processed through the Tiny Bloom website and application.

Our registered office is in Dublin, Ireland. For all data protection matters, our Data Protection Officer can be reached at privacy@tinybloom.app.

We are subject to the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

📋2. What information we collect

Information you give us directly:

• · Account information — your name and email address when you register
• · Family profile — children's first names, ages (not dates of birth), and dietary/allergy preferences you choose to add
• · Content you create — memory journal entries, notes, photos, and task lists you add within the app
• · Payment information — processed securely by our payment provider; we do not store card details on our servers
• · Communications — when you contact our support team

Information collected automatically:

• · Device type and operating system (for compatibility purposes only)
• · App usage data — which features you use, to improve the product
• · Error logs — anonymous crash reports to fix bugs

We do not collect: precise location data, government ID numbers, financial account details, or any biometric information.

⚙️3. How we use your information

We use the information we collect to:

• · Provide, maintain and improve the Tiny Bloom service
• · Personalise your dashboard — meal suggestions, milestone prompts, and activity plans based on your children's ages and preferences
• · Send you essential service communications (e.g. password resets, account notices)
• · Respond to support requests
• · Process subscription payments
• · Comply with our legal obligations

We will only send you marketing emails if you have explicitly opted in. You can unsubscribe at any time using the link in any email we send.

Our legal basis for processing is: contract performance (to provide the service you signed up for), legitimate interests (to improve the app and prevent fraud), and consent (for marketing communications).

👶4. Children's privacy

Information about children (names, ages, dietary needs, milestones) is entered by the parent or guardian account holder. This information is:

• · Stored encrypted at rest and in transit
• · Never used for advertising or profiling
• · Never sold or shared with third parties for commercial purposes
• · Deleted immediately upon account deletion
• · Never used to train AI models without explicit written consent

We take our obligations under the GDPR, the Children's Online Privacy Protection Act (COPPA), and the UK Children's Code very seriously. If you believe a child has submitted data directly to us, please contact privacy@tinybloom.app immediately and we will delete it.

🤝5. Who we share data with

We never sell your data. Full stop.

We share data with a small number of trusted service providers who help us operate the platform, all under strict data processing agreements:

• · Cloud hosting: Encrypted servers within the EU/EEA
• · Payment processing: Stripe Inc. — PCI-DSS compliant; they never share card data with us
• · Email delivery: For account and support emails only
• · Error tracking: Anonymous crash reports — no personal data included

We may disclose information if required by law, or to protect the rights, safety, or property of Tiny Bloom, our users, or the public. We will notify you if legally permitted to do so.

If Tiny Bloom is acquired or merged, user data may be transferred to the new entity. We will notify you in advance and give you the option to delete your account.

🔐6. How we protect your data

• · AES-256 encryption at rest for all stored data
• · TLS 1.3 encryption in transit for all data transferred over the network
• · Access controls: only essential staff can access production data, with full audit logs
• · Regular independent security audits
• · Automated alerts for any unusual account activity

No method of electronic storage is 100% secure. In the unlikely event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

🗓️7. How long we keep your data

• · Active accounts: We retain your data for as long as your account is active
• · After deletion: Your personal data is permanently deleted within 30 days of account deletion; backups are purged within 90 days
• · Financial records: Kept for 7 years as required by Irish tax law, but this contains only transaction amounts — not personal app data
• · Support emails: Retained for 2 years then deleted

⚖️8. Your rights (GDPR)

Under the GDPR, you have the following rights:

• · Right of access — Request a copy of the personal data we hold about you
• · Right to rectification — Ask us to correct inaccurate or incomplete data
• · Right to erasure — Ask us to delete your personal data ("right to be forgotten"). See our Delete account page for step-by-step instructions.
• · Right to restriction — Ask us to limit how we use your data
• · Right to data portability — Receive your data in a machine-readable format
• · Right to object — Object to processing based on legitimate interests or for direct marketing
• · Rights related to automated decision-making — We do not make solely automated decisions that significantly affect you

To exercise any of these rights, email privacy@tinybloom.app. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission Ireland (dataprotection.ie).

🍪9. Cookies

We use a minimal set of cookies:

• · Essential cookies: Required for login sessions and security — cannot be disabled
• · Preference cookies: Remember your app settings and language preference
• · Analytics cookies: Anonymous usage data to understand how the app is used — only set with your consent

We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings at any time.

📝10. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and display a notice in the app at least 14 days before the changes take effect.

The "last updated" date at the top of this page will always reflect the most recent revision. Continued use of Tiny Bloom after changes take effect constitutes acceptance of the updated policy.

✉️11. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: