Privacy Notice
Bloomio is operated by BLOOMIO, LLC, 1311 Roberts Street S, Green Cove Springs, Florida 32043. Questions about this notice or personal information can be sent to privacy@bloomioapp.com.
Information we collect
We collect information people provide when they create or use a Bloomio account, including account and profile details, workspace settings, support communications, and information needed to use our products.
If you join the Bloomio waitlist, we collect your email address and the time you signed up.
Coaches may enter client information, including names, contact details, bookings, purchases, course progress, consent records, notes, and other information needed to provide the coach's services. Coaches may also upload course materials, profile images, certificate artwork, and contact spreadsheets.
We also collect device, browser, IP address, log, security, and service-usage information generated through use of Bloomio.
How we use information
- Provide, maintain, and secure Bloomio;
- create and manage accounts and workspaces;
- process purchases and maintain payment records;
- send receipts, security notices, booking confirmations, access links, and platform notifications;
- support calendar connections and scheduling; and
- respond to support requests and prevent fraud, abuse, and security incidents.
If you join the waitlist, we use your address to send launch news and occasional Bloomio product updates. You can unsubscribe from these emails or ask us to remove your address at privacy@bloomioapp.com.
Payments, email, calendars, and media
Payments. Stripe processes payments. Bloomio does not store full payment-card numbers.
System email. When Bloomio sends Bloomio-managed system email, it uses Postmark. Messages may include the recipient's email address, name, and information needed to send the message, such as a booking time or access link.
Calendars. A coach may connect Google Calendar or Microsoft Outlook. Bloomio accesses calendar information only as needed for the requested scheduling feature. A coach may disconnect a calendar connection in Bloomio or through the relevant provider.
Video and embedded media. Bloomio does not host course video. A coach may link to video or other media on a service they use. When someone plays it, their browser connects directly to that service, which may receive their IP address and set its own cookies under its own privacy notice.
Brio and AI providers
AI-assisted Brio is optional. After a coach accepts the Brio privacy disclosure, Bloomio may send an external AI provider the coach's question, limited workspace information needed to answer it (such as contact names, tags, pipeline stages, source type, consent status, and counts), and a bounded recent portion of the same Brio conversation when needed for continuity.
Bloomio does not send an entire saved Brio history by default. Before a question is sent, Bloomio automatically removes detected email addresses, phone numbers, and web links. Stored notes, raw import files, internal IDs, workspace IDs, and stored contact email addresses and phone numbers are not automatically sent.
Please do not enter sensitive or confidential information that you do not want shared with an AI provider. Automatic redaction is a safeguard, not a guarantee.
When we share information
We share information only as needed to operate Bloomio: with Stripe for payments, Postmark for system email, Google or Microsoft for connected calendars, video services selected by coaches, AI providers when a coach chooses AI-assisted Brio, and hosting, infrastructure, security, and other service providers working for Bloomio. We may also share information where required by law or reasonably needed to protect Bloomio, our users, or others. Bloomio does not sell personal information.
Retention and deletion
We retain information for as long as needed for the purpose for which it was collected. Account and workspace information is generally retained while an account is active. We may retain limited information after closure for legal, accounting, fraud-prevention, security, backup, or dispute-resolution purposes.
Deleted Brio conversations remain recoverable for 30 days and are then permanently removed. Uploaded import source files are normally removed after 30 days. Payment records, security logs, and backups are retained as needed for applicable obligations, security, and recovery.
Coaches and client information
For client information a coach puts into Bloomio, the coach is generally responsible for the relationship with that client and for providing any required privacy information. Bloomio processes that information to provide the service to the coach.
Cookies and security
Bloomio uses necessary cookies and similar technology to maintain sign-in sessions, protect forms, and keep the service secure. Bloomio does not use analytics or advertising cookies. A media service selected by a coach may set its own cookies when someone plays embedded media.
We use administrative, technical, and organizational safeguards designed to protect information. No service can guarantee absolute security.
Choices and rights
Depending on where a person lives, they may have rights to request access, correction, deletion, restriction, portability, or to object to certain uses of personal information. A person may withdraw consent where consent is the basis for processing. Contact privacy@bloomioapp.com to make a request. We may need to verify identity before responding.
Changes to this notice
We may update this notice when Bloomio or applicable law changes. We will post the updated notice with a new effective date and provide additional notice when required.