Privacy Policy — Rebloom Health

The short version

Rebloom is a place for people navigating pregnancy loss, and for the people who support them. Using it means telling us things most apps never ask for: when your loss happened, how you are feeling today, what you need from the people around you. We take that seriously. This policy explains what we collect, how we use it, who can see it, and the choices you have.

We never sell your data, and we never share it with advertisers or data brokers.
There is no advertising in Rebloom, and no advertising trackers on our site or in our app.
Your health information is used to run Rebloom for you, and for nothing else.
Your Guide conversations and check-ins are private. They cannot be shared with your network, and there is no setting that changes that.
You can download everything you have written, and you can delete your account and everything in it, at any time, from Settings.

This policy covers rebloomhealth.com, the Rebloom app at app.rebloomhealth.com, and the emails we send (together, the "Service"). It is provided by Rebloom Health LLC, based in Minneapolis, Minnesota ("Rebloom", "we", "us"). Questions go to hello@rebloomhealth.com.

What we collect

We only collect what the Service needs to work. Here is all of it, grouped by where it comes from.

What you give us

Account details: your email address, a password (which we never see in plain text), or your Google account if you choose to sign in with Google, and your first name or the name you want shown.
Your role: whether you are here for your own loss (a member), to support someone (a supporter), or as a clinician (a provider).
About your loss, if you are a member: the type of loss, roughly when it happened, the date of the loss and the due date if you choose to share them, and how many weeks along you were. We use these to place you on a week-by-week timeline. Every one of them is optional.
Where you are: a ZIP code, if you choose to give one, so we can show nearby resources. We turn it into a city and state; we do not track your precise location.
People around you: the names and email addresses of the people you invite to your network, and the names and relationships of family members you add so the Guide can speak about them accurately.
What you write: asks for help, offers to help, items on your care list, notes, the names of key dates, and your conversations with the Guide.
Check-ins: your daily mood and any wellbeing questionnaire you choose to complete.
Preferences: whether your network can see your asks, email settings, quiet hours, pauses, and whether the timeline is shown.
Payment details: when you purchase lifetime access, Stripe collects your card details. We never see or store your card number. We keep a record of the purchase (the amount, currency, date and Stripe's reference numbers) so we know your account is unlocked.
Messages you send us, for example by email.

What we collect automatically

Usage: which screens you visit and which buttons you use, so we can see what helps and what gets in the way. We configure our analytics so that it never records the words on the screen, your typing, or the contents of any page. Session recording is turned off.
Device and connection details: browser type, operating system, screen size, approximate region from your IP address, and the referring page.
Logs: standard server logs, including IP address, timestamps and the pages requested, kept for security and debugging.
Emails: whether an email we sent you was delivered.

What we get from others

If someone invites you to be their supporter, we receive your name and email address from them.
If a clinic refers you to Rebloom, we may receive the reason for the referral and whether it was marked urgent, so we can pick up where your care team left off.
If you sign in with Google, Google sends us your name and email address.

How we use it

We use your information to:

Run the Service: create and secure your account, place you on your timeline, show the right guidance for the week you are in, and let you and your network coordinate help.
Power the Guide: your messages, and the context the Guide needs (your first name, your role, where you are in your timeline and the type of loss), are used to generate its replies. See "The Guide and AI" below.
Notice when someone may be in danger and point to help: if a message to the Guide suggests a crisis, the Guide stops and responds with crisis resources, including the 988 Suicide and Crisis Lifeline. That message is not sent to an AI provider, and the event is counted in our analytics without any link to you.
Send you emails you have asked for: verification codes, invitations you send, replies to your asks, and a weekly update. You can turn the weekly update off, and set quiet hours, in Settings.
Process your purchase and keep your access unlocked.
Understand how Rebloom is used, in aggregate, so we can improve it.
Keep the Service safe: detect abuse, protect accounts, and enforce our Terms.
Meet our legal obligations and respond to lawful requests.

We do not use your information to advertise to you, build advertising profiles, or make automated decisions that have legal or similarly significant effects on you.

Your health information

Much of what you share with Rebloom is health information: the fact and timing of a pregnancy loss, your mood, your conversations with the Guide, and any questionnaire you complete. We treat all of it, and anything that could reasonably be linked to it, as consumer health data.

We commit to the following, and they do not change with any setting:

We never sell health data, and we never share it with advertisers, ad networks, data brokers, or social media platforms.
We never use health data for advertising or marketing of any kind.
We never use third-party advertising pixels, tags or SDKs anywhere in the Service.
We share health data only with the service providers listed in this policy, only to run the Service, and under contracts that prohibit them from using it for their own purposes.
Your Guide conversations and check-ins are never visible to your network, your supporters, or a clinic that referred you. There is no toggle to share them.
We collect health data only with your consent, which you give by choosing to enter it. You can delete it at any time.

Rebloom is not a healthcare provider and, for members and supporters, is not a covered entity under HIPAA. The protections that apply to the information you share with us are the ones in this policy and in the consumer privacy laws that cover you. Where we work with a clinic or health plan under a written agreement, that agreement may add further protections.

The Guide and AI

The Guide is an AI assistant, and it is always labelled as one. When you send it a message, your message, your recent messages in that conversation, and the context described above are sent to a third-party AI model provider to generate the reply. We currently use models from one or more of OpenAI, Anthropic and Google.

We only use these providers under business terms that prohibit them from using your conversations to train their models.
Alongside your messages they receive your first name, so the Guide can address you, and the timeline context above. They do not receive your email address, your account identifiers, or anything else in your account.
The Guide's replies are generated by a model and can be wrong. They are education and support, not medical advice. See our Terms of Service for more.
Your conversations are stored in your account so you can return to them, and are included in the copy you can download. They are deleted when you delete your account.

People you choose

Your network sees what you decide to show them: your name, your asks (only if you have turned on "Let your network see your asks"), and the offers they have made to you. They never see your Guide conversations, your check-ins, your notes, or anything else.
When you invite someone, they receive an email with your name and a link to join your network.
When you decline an offer, remove someone, or step back, the other person is not told why. When you delete your account, your network is simply no longer able to see you.

Service providers who work for us

We rely on a small number of companies to run Rebloom. Each only receives what it needs for its job, and is bound by contract to use it only for that.

Clerk: sign-in and account security.
Supabase: the database where your information is stored, hosted in the United States.
Vercel: hosting for the site and the app.
OpenAI, Anthropic and Google: AI models behind the Guide, as described above.
Stripe: payments. Stripe's handling of your card details is governed by its own privacy policy.
Resend: delivering the emails we send you.
PostHog: product analytics, configured without session recording and with on-screen text masked.
Profound: reporting of visits to our public pages by AI crawlers and assistants. Ordinary visitors and signed-in users are not reported.

Everyone else

We do not sell, rent or trade your information with anyone.
We may disclose information if required by law, a court order or a government request, or when we believe in good faith that it is necessary to protect someone's safety, to protect our rights, or to investigate fraud or abuse. Where we are allowed to, we will tell you first.
If Rebloom is ever acquired or merges with another company, your information may be transferred as part of that transaction. We will tell you before that happens, and this policy's commitments on health data will continue to apply unless you are told otherwise and given a choice.
We may share aggregated or de-identified information that cannot reasonably be linked to you, for example how many members reach week six.

How long we keep it

We keep your information for as long as your account exists, so that you can come back to it whenever you need to. Grief has no schedule, and we do not delete your account for inactivity.

When you delete your account, everything in it is deleted immediately: your profile, timeline, network, asks and offers, care list, notes, check-ins and Guide conversations. Your sign-in record is removed too.
Payment records are kept by Stripe and in our books for as long as tax and accounting law requires, typically seven years. They contain the purchase details only, not anything about your loss.
Server logs are kept for up to 30 days and then deleted.
Backups of our database are kept for a short period for disaster recovery and are overwritten on a rolling basis. Deleted data drops out of them as they roll over.
Emails you send us are kept for as long as needed to help you and to keep a record of the conversation.

Your choices and rights

You do not need to ask us for most of this. It is built into the app.

See and change your information: your name, dates, location and preferences are in Settings.
Download everything: Settings → Account → Download everything gives you a readable file with your asks, offers, Guide conversations and saved articles.
Delete everything: Settings → Account → Delete account. It takes effect immediately and cannot be undone.
Control sharing: the single switch in Settings → Privacy decides whether your network sees your asks. Nothing else is shareable.
Control email: turn the weekly update off, or set quiet hours, in Settings → Notifications. Verification codes and invitation emails are sent only when you ask for them.
Pause: you can pause Rebloom, or pause offers from your network, without deleting anything.

Depending on where you live, you may also have legal rights to access, correct, delete or receive a copy of your personal information, to withdraw consent, to opt out of sale, targeted advertising or profiling (we do none of these), and to appeal a decision we make about your request. You can exercise any of them by email at hello@rebloomhealth.com. We will verify that the request comes from you, usually by replying to the email address on your account, and respond within 45 days or sooner where the law requires. We will never treat you differently for exercising a right. If we deny a request, you can appeal by replying to our response, and we will reply to the appeal within 45 days; if you are still unsatisfied you can contact your state attorney general.

If you are in the European Economic Area, United Kingdom or Switzerland

Rebloom is built for people in the United States and our servers are there. If you use it from elsewhere, your information will be transferred to and processed in the United States. Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (running the Service), your explicit consent (health data, which you give by entering it and can withdraw by deleting it), our legitimate interests (security, improving the Service, and analytics that do not profile you), and legal obligation. You have the rights listed above, plus the right to object to processing based on legitimate interests, to restrict processing, and to lodge a complaint with your data protection authority.

Washington, Nevada and Connecticut consumer health data

If you live in Washington, Nevada or Connecticut, this policy, together with the "Your health information" section, is our Consumer Health Data Privacy Policy. The categories of consumer health data we collect, the sources, the purposes, and the categories of recipients are listed in the sections above. We do not sell consumer health data. You have the right to confirm whether we are collecting or sharing your consumer health data, to withdraw consent, to have it deleted, and to appeal, and you can exercise those rights as described here.

How we protect it

Everything between you and Rebloom is encrypted in transit, and our database is encrypted at rest.
Each row of your data is protected by database-level access rules so that only your account can read it. Supporters can only read the specific things you have chosen to share.
Passwords are handled by Clerk and are never stored in a form we can read. We support sign-in with Google if you prefer not to have a password at all.
Access to production systems is limited to the people who need it to run Rebloom.
Links that invite someone to your network are single-purpose and are removed from our analytics before anything is recorded.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you and any authority we are required to notify without undue delay, and we will tell you plainly what happened and what we are doing about it.

Children

Rebloom is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18, and if we learn that we have, we will delete it. If you believe a child has created an account, email hello@rebloomhealth.com.

Clinicians and partners

If you are a clinician who contacts us or uses our provider materials, we collect what you give us: your name, email address and clinic. When a clinic refers a patient to Rebloom, we keep the referral so we can pick up where the clinic left off. We do not report back to a clinic on any individual patient's use of Rebloom, their check-ins, or their conversations, unless the patient asks us to.

Changes to this policy

If we change this policy, we will post the new version here and update the effective date. If a change would loosen any commitment about health data, we will email you before it takes effect and give you a chance to delete your account first. Continuing to use Rebloom after a change takes effect means you accept it.

Contact

Rebloom Health LLC, Minneapolis, Minnesota. Email hello@rebloomhealth.com for anything about this policy or your information. A person reads every message.