Bloomland Privacy Policy
1. Who this is for
Bloomland is a heritage-language learning app. An adult (18+) holds the account; learners are profiles they create — which may be the adult themselves or a child they're responsible for. A parent/guardian creates and manages any child profile. This policy explains what we collect from children and parents, why, and your rights.
2. What we collect
From the parent: email, name, payment info (processed by Stripe — we never store card numbers).
From/about the child (only after parental consent): a Profile name (a first name or nickname — we do not ask for a last or full name), birth year and month (we do not collect an exact date of birth), lesson progress and in-app rewards.
Microphone: for pronunciation practice the app records a short voice clip and sends it securely to our scoring service to score how the word is said, then discards the audio immediately — it is never stored, and never used to train any model (see §6 for the speech-to-text providers). Audio the child hears is computer-generated (synthetic).
3. How we use it
To provide the lessons, personalize content to the child's age, maintain progress, and operate/secure the service. We also keep our own anonymized in-app usage analytics — which lessons are started, completed, or left early; how long a lesson takes; and which features are used — to see where children get stuck and improve the app. These events carry only opaque codes (the account id, a random profile id that is not the child's name, and a random session id); they stay on our own servers, are not shared with anyone, and are never used for advertising. We do not sell children's data, do not use it for behavioral advertising, and do not send children's data to third-party AI/ad services. We use no third-party analytics or advertising SDKs — the usage analytics above are first-party only.
4. Parental consent (COPPA)
We obtain verifiable parental consent before collecting any child data — via the parent's paid subscription (a card transaction) or an explicit in-app affirmation by the signed-in parent. A parent can review, or refuse further collection, at any time.
5. Your rights as a parent
- Review your child's data · Delete it · Refuse further collection.
- Delete in-app (Delete account) or email privacy@bloomland.app. We complete deletion within 30 days.
6. Who we share with (subprocessors)
Service providers that process data on our behalf under contract (DPAs): Supabase, Neon, Railway, Cloudflare (auth-gated CDN + Whisper speech-to-text for English/fallback under a comparable no-retention posture pinned in our internal audio-processing note), OpenAI (kid-voice speech-to-text for SpeakIt in Hindi, Tamil, Telugu, Kannada, Mandarin — audio discarded post-inference; per OpenAI's API Data Usage Policy, API inputs and outputs are not used to train OpenAI's models by default; DPA executed with Akshana Enterprises LLC 2026-08-08), Apple/Expo, Stripe (web + iOS subscription payment), Google Play Billing (Android subscription payment — the paying Google account is by definition an adult account per Google's own terms, anyone under 18 must hold a Family Link-supervised account with its own parent approval gate; we receive only subscription lifecycle events and retain a one-way SHA-256 hash of the purchase token, never the raw token), Google Cloud TTS (name audio), Resend (auth email — your email address only), Sentry (crash/error reporting — child PII stripped on-device before transmission; DPA executed). A current subprocessor list is available on request at privacy@bloomland.app. We disclose data only as required by law.
7. Data retention, security, isolation
Kept while the account is active; deleted on request (§5). Security: encrypted in transit, row-level access controls, an audit log of access to children's data. Children's data is physically isolated from our unrelated business lines.
8. Changes & contact
We'll post changes here and update the effective date. Questions: privacy@bloomland.app.