Privacy Policy

Learn more about what we do, the data we collect,
and how we protect your privacy.

Updated July 29 2022

The Basics

Who We Are

Hello! We’re Bloomy, Inc. (“Bloomy”, “we”, “our”, or “us”), a Delaware corporation that is dedicated to promoting health and wellness.  We curate health and wellness services and experiences, and reward you for your spending at these partners.  You can learn more about each of these on our website, www.hibloomy.com (the “Site”). Collectively, we regard Bloomy, the App, the Site, our social media channels, and any related applications as Bloomy’s services (the “Services”).  

We (and others acting on our behalf) are committed to respecting and protecting your privacy.  We will:

  1. keep your information safe and private;
  2. never sell your personal information; and
  3. allow you to change your marketing choices at any time.

Why You Should Read This Notice

As you engage with any of our Services, you may share personal information with us.  This privacy notice (“Privacy Notice”) explains the types of information we collect and how we use it.  If you have any questions or concerns about our notice or our practices with regard to your personal information, please contact us at privacy@hibloomy.com. If you do not agree with any part of this Privacy Notice, you must not use our Services. 

Now, onto the good stuff.

Information We Collect and How We Use It

The information we collect falls into the following categories:  

  1. Information you voluntarily provide to us
  2. Information from your spending
  3. Information from others
  4. Information collected automatically from your browser or device 
  5. Cookies and other technologies
  6. Information we have aggregated and anonymized

Information you voluntarily provide to us

When you sign up for Bloomy, complete and submit any Bloomy surveys or forms, or correspond with us (including via customer support), we collect and keep the information you provide.  This may include personal information like your name, email address, and phone number, other registration information, and details regarding your customer support inquiries.  We use this information to: 

  1. provide our Services;
  2. improve our Services (e.g., making changes based on customer support inquiries);
  3. meet our legal obligations and enforce our legal rights; and 
  4. keep you updated on the development of our Services.

Information about your connected accounts and spending

Through third-party data providers like Stripe, we obtain information about the spending habits in the debit and/or credit card accounts that you connect to your Bloomy account (“Connected Accounts”).  For each of your Connected Accounts, we obtain the related financial institution and account type (e.g., “Chase Sapphire” or “American Express Platinum”).  Bloomy does NOT obtain specific account information, such as your debit and/or credit card numbers. With regard to your spending, we obtain transaction information (e.g., transaction type, amount, and date) and merchant information (e.g., merchant name, location and category).  This does not include historical spending information prior to connecting your Connected Account. We use this information to: 

  1. provide our Services;
  2. improve our Services (e.g., adapting our product recommendations in ways that might interest you or improving how you collect and redeem rewards); and 
  3. protect against fraud.

Information from other third parties

We may collect information from partners who help us provide our Services, such as wellness brands that provide you with discounts. We use this information to:

  1. provide our Services;
  2. improve our Services (e.g., adapting our product recommendations in ways that might interest you); and
  3. meet our legal obligations and enforce our legal rights.

With your express consent and only for a permissible purpose, we may obtain additional information about you from consumer reporting agencies.  This will only be done with your express consent.

Information collected automatically

When you visit or use our Services, we may collect certain information automatically, such as IP address, browser and device information, referring URLs, and information about how you are engaging with the Services (e.g., pages you explore in the App, errors you experience, etc.).  In addition, if you have enabled the required permissions, we may collect information about your location and your usage of notifications based on your interactions with them.  Information in this category does not reveal your specific identity.  We use this information to: 

  1. maintain the security and operation of our Services, including protecting against fraud;
  2. improve the Services (e.g., fixing issues that are particular to certain devices or other technical circumstances); and
  3. for analytics and reporting purposes.

Cookies and other technologies

We may utilize cookies and other technologies, such as web beacons (also known as “clear gifs” or “pixel tags”) to recognize you and analyze engagement with our Site.  Cookies are very small files placed on your computer, and they allow us to count the number of visitors to our Site and distinguish repeat visitors from new visitors.  They also allow us to track visitor trends.  If you do not want us to deploy cookies in your browser, you can opt out by setting your browser to reject cookies or to notify you when a website tries to put a cookie in your browser software.

Information we have aggregated and anonymized

We consider data to be anonymized when it is not associated with your name, email, phone, social security number, or any other piece of information that can be used to uniquely identify you.  We consider data to be aggregated when it is grouped with data of seven (7) users or more.  Information we collect that is aggregated and anonymized includes:

  1. demographic information about our user population as a whole and as subsets, including how this population has engaged with our Services and/or partners, and 
  2. usage information, such as numbers of users who have engaged with a feature or the number of transactions that users have made at a particular merchant.

We use this information to:

  1. provide our Services;
  2. improve our Services (e.g., making changes to our Services based on engagement with particular features);
  3. advertise (e.g., to identify new audiences based on their differences from our current user population);
  4. meet our legal obligations and enforce our legal rights.  

Our Legal Basis for Using Your Information

We use the information we collect, whether personal information or otherwise, based on legitimate business interests and/or consent.  More specifically, we use the information to:

  1. Send you marketing and promotional emails.  You can opt-out of receiving these at any time by clicking the unsubscribe link in the emails we send or contacting us.
  2. Send you our newsletter.  You can opt-out of this at any time, too. 
  3. Provide our Services.

Whether We Share Your Information

We may share your information with vendors and other third-party service providers who perform services on our behalf and require access to such information to do that work.  Examples include third-party service providers that facilitate email delivery, marketing efforts, and data analysis.

We may also share aggregated and anonymized data in order to describe Bloomy to current and prospective business partners (including health and wellness brands you know and love).  As noted above, this information does not identify you personally.

How Long We Keep Your Information

We keep your personal information for as long as it is necessary to fulfill the purpose(s) set out in this privacy notice, unless a longer retention period is legally required.

We Don’t Collect Information from Minors

We do not knowingly solicit data from or market to children under 18 years of age. If you are under 18, please do not give us any personal information.  If you have reason to believe that a minor under the age of 18 has provided us with personal information, please contact us, and we will endeavor to delete that information from our databases.

Controls for Do-Not-Track Features

Most web browsers and mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.  We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

Notice to California Residents

Bloomy is not currently subject to the California Consumer Privacy Act (“CCPA”) given the CCPA’s definition of “business.”  We may, however, become subject to the CCPA in the future as we grow. To that end, we strive to fulfill requests from California residents related to rights they have under the CCPA. Specifically, under the CCPA, California residents may submit a request to receive information about a business’s data collection practices with respect to their data. If you are a California resident, you may request the following regarding information we’ve collected in the preceding twelve (12) months:

  1. The categories of personal information (as defined under the CCPA) we have collected about you;
  2. The categories of sources from which the personal information was collected;
  3. The business or commercial purpose(s) for collecting the personal information;
  4. The categories of third parties with whom we share personal information (if any); and
  5. The specific pieces of personal information we have collected about you.

You may also request that we delete your personal information. We will honor all such requests, subject to certain exceptions outlined in the CCPA (e.g., information necessary to provide the Services to you or information we’re legally required to retain). 

To make a request described in this section, email privacy@hibloomy.com with the subject line “California Resident Data Subject Request.” You must provide us with enough information to identify you and the information you are requesting. Once we receive your request, we may verify it by requesting additional information from you to confirm your identity. 

We Might Change This Policy

We may update this privacy notice from time to time.  Any changes will be posted on our website, so we encourage you to check back frequently to stay informed of how we are protecting your personal information.  

How to Contact Us

If you have questions about this Privacy Notice or the personal information we’ve collected about you, please contact us at legal@hibloomy.com.