Privacy Policy

1. Information We Collect

Account Information

We collect your name, email address, phone number, and a securely hashed password when you register. If you sign in via Google or Apple, we receive your name, email, and profile photo from those providers. You may also set your preferred language and notification preferences.

For Consumers

We store only the first 6 digits (BIN) and last 4 digits of your linked card — never the full card number. We also store the card brand and a custom label you choose. We collect your cashback earnings, transaction history, payout records, saved businesses, and referral activity.

For Businesses

We collect your business name, address, category, contact information, business hours, description, website URL, photos, offer details, and transaction summaries.

For Community Managers

We collect your community name, type, geographic information, application details, and business approval records.

Automatically Collected

We collect device and browser information, IP addresses, access logs, push notification subscription data, and session cookies for authentication.

2. How We Use Your Information

We use your information to provide and maintain the Bloom platform, process cashback transactions and payouts, send important notifications and updates, improve our services and user experience, prevent fraud and ensure platform security, comply with legal obligations, and provide customer support.

3. How We Share Your Information

We do not sell your personal information. We may share data with service providers who help us operate Bloom, including PayPal for processing payouts, email providers for transactional messages, cloud storage for hosting photos, and geocoding services for address validation.

We share limited information with other users: consumers can see public business profiles and offers; business owners see aggregated, anonymized transaction data; community managers see business contact information within their community.

We may disclose information if required by law, court order, or government request.

4. Cookies & Tracking Technologies

Bloom uses essential cookies for authentication and session management. These include access tokens (valid for 4 hours) and refresh tokens (valid for 7 days, HTTP-only). We also store language preferences and push notification settings.

We do not use third-party advertising cookies, behavioral tracking, or analytics scripts that follow you across the web.

5. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), secure password hashing, access controls, and regular security reviews. While we take reasonable precautions, no system is completely secure. You are responsible for maintaining the confidentiality of your password.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, your personal information is anonymized: your email is replaced with a deletion marker, your name is changed to 'Deleted User,' and your linked cards are anonymized. Transaction records are retained in anonymized form for financial and legal compliance. Some data may be retained longer if required by law.

7. Your Rights & Choices

Depending on your location, you may have the right to access the personal information we hold about you, correct inaccurate information, delete your account and personal data, opt out of marketing communications, export your data, or lodge a complaint with a data protection authority.

To exercise these rights, contact us at support@bloom.local.

8. Children's Privacy

Bloom is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Users

Bloom is based in the United States. By using our services, you consent to the transfer and processing of your information in the United States and other jurisdictions where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the platform. Your continued use of Bloom after changes constitutes acceptance of the updated policy.