Blūm Privacy Policy

Effective Date: September 16, 2026

Introduction

Blūm helps people using GLP-1 medications track and better understand their health and wellness. This Policy explains what information we collect, how we use and share it, and your privacy rights.
This Policy applies to Blūm’s apps, websites, and related services. Additional disclosures for consumer health data are provided in the Consumer Health Data Privacy Policy below.

What We Collect

Account Information

We collect information you provide to create and manage your account, such as your name, display name, phone number, email address, and account preferences.

Health and Wellness Information

If you choose to track your health in Blūm, we may collect information relating to your health, wellness, medications, treatment, nutrition, activity, symptoms, habits, goals, and progress.
This may include photos, voice recordings, documents, labels, information from integrations you authorize, and information derived from your inputs.
Blūm may use this information to provide tracking, scores, estimates, trends, reminders, insights, reports, and other features.
Some Blūm features provide estimates or other information based on information you enter and other available data. These are for informational and wellness purposes and are not clinical measurements, diagnoses, prescriptions, or medical advice.

AI Features

Some Blūm features use third-party artificial intelligence services.
We may provide our AI provider with information reasonably necessary to provide the feature you are using, including health or wellness information where relevant.
Our current AI provider does not use Blūm’s identifiable user data to train its general-purpose models. Information may be retained briefly for security and abuse-monitoring purposes before deletion.
AI-generated information may be inaccurate and is not a substitute for professional medical advice.

Community and Social Features

Blūm may offer Community feeds, groups, Pods, and other social features.
Information you choose to post or share may be visible to other users. Other users may copy, save, screenshot, or redistribute information you make available to them.
Your private health information is not automatically made public simply because you participate in Community or social features.
We may review or process Community content to operate, secure, moderate, and improve Blūm.

Apple Health

If you choose to connect Apple Health, Blūm may access information you authorize for the health and wellness features you request.
We handle information obtained through HealthKit in accordance with Apple’s requirements and do not use it for advertising or disclose or sell it except as permitted by Apple and applicable law.

Device, Usage, and Transaction Information

We may automatically collect information about your device and use of Blūm, such as device information, IP address, app activity, diagnostics, crash information, and subscription or purchase information.
Payments are generally processed by the applicable app store or payment provider, and Blūm does not receive your full payment card information.

How We Use Information

We may use information to:

  • provide, operate, personalize, maintain, and support Blūm;
  • provide features, insights, recommendations, reports, and communications;
  • analyze, research, develop, and improve our products, services, and technology;
  • maintain security and prevent fraud, abuse, or misuse;
  • provide customer support;
  • comply with legal obligations and protect Blūm, our users, and others; and
  • otherwise operate our business as permitted by law.

Where applicable law requires consent for a particular use of health or other sensitive information, we will obtain it.

How We Share Information

We may share information with service providers and other parties that help us operate, support, secure, analyze, develop, or improve Blūm.
We may also share information:

  • at your direction or with your consent;
  • as necessary to provide a feature, service, or integration you request;
  • when required or permitted by law;
  • to protect Blūm, our users, or others; or
  • in connection with a financing, merger, acquisition, reorganization, sale, or similar business transaction.

We require service providers handling information on our behalf to be subject to appropriate privacy, confidentiality, and security obligations.
Blūm does not sell identifiable consumer health data or use it for third-party targeted advertising or data brokering.

Aggregated and De-identified Information

We may create aggregated, anonymized, or de-identified information that is not reasonably capable of identifying you.
To the extent permitted by law, we may use, combine, retain, disclose, license, commercialize, and otherwise use this information for analytics, research, product development, and other lawful business purposes.
Where required by law, we maintain de-identified information in de-identified form and do not attempt to re-identify it.

Storage and Retention

We retain information for as long as reasonably necessary to provide Blūm, operate our business, comply with legal obligations, resolve disputes, protect our services, and fulfill the purposes described in this Policy.
Information removed from active systems may remain temporarily in backups or archives. Our ordinary backup systems generally operate on rolling cycles of approximately 30 to 90 days.
Aggregated, anonymized, or de-identified information may be retained for longer where permitted by law.

Your Privacy Rights

Depending on where you live and applicable law, you may have rights to access, correct, delete, or obtain a copy of your information, withdraw consent, restrict or object to certain processing, or opt out of certain uses of your information.
You may delete your Blūm account through Settings > Account > Delete Account where available.
For other privacy requests, contact info@joinblum.com. We will respond within the time required by applicable law.
Where required by law, we honor supported browser-based opt-out preference signals such as Global Privacy Control.

International Users

Blūm is based in the United States, and information may be stored or processed in the United States or other countries where we or our service providers operate.
Where European Economic Area, United Kingdom, or similar laws apply, we process personal information on applicable legal bases, which may include contract, legitimate interests, consent, explicit consent for certain health information, and legal obligations. Where required, we use appropriate safeguards for international transfers.

Security and Age

We use reasonable administrative, technical, and organizational safeguards designed to protect your information. No system or method of transmission or storage can be guaranteed to be completely secure.
Blūm is intended for adults age 18 and older.

Changes to This Policy

We may update this Policy as Blūm evolves. If required by law, we will provide notice or obtain consent before making material changes to how certain information is collected, used, or shared.

Contact

Blum app Inc
30 N Gould St Ste R
Sheridan, WY 82801
USA
Email: info@joinblum.com

Consumer Health Data Privacy Policy

This section provides additional disclosures required by certain U.S. consumer health privacy laws, including Washington’s My Health My Data Act, Nevada law, and similar laws.
“Consumer health data” generally means personal information linked or reasonably linkable to an individual that identifies or relates to their health, wellness, treatment, or healthcare.

Consumer Health Data We Collect

Depending on how you use Blūm, we may collect information relating to your health, wellness, medications, treatment, nutrition, activity, symptoms, habits, goals, progress, and related information you provide, upload, import, or generate through Blūm.
We may also derive estimates, scores, insights, trends, or similar information from this data.
We collect this information primarily from you, your use of Blūm, and devices, services, or integrations you choose to connect.

How We Use Consumer Health Data

We use consumer health data to provide, personalize, operate, secure, analyze, support, develop, and improve Blūm and its health and wellness features and services.
We may also use it to communicate with you, prevent fraud or abuse, comply with law, and protect Blūm, our users, and others.
Where applicable law requires consent for a particular collection, use, or sharing of consumer health data, we will obtain it.
We do not use identifiable consumer health data for third-party targeted advertising or data brokering.

How We Share Consumer Health Data

Depending on how you use Blūm, we may share consumer health data with:

  • service providers that process information on our behalf to operate or provide Blūm, including infrastructure and AI providers;
  • other users when you choose to make information available through Community or social features;
  • services, integrations, or recipients you direct us to use; and
  • other parties where required or permitted by law.

The consumer health data shared depends on the feature or service involved and may include health, wellness, treatment, content, or derived information reasonably necessary for that purpose.
Blūm does not sell identifiable consumer health data.

Aggregated and De-identified Information

We may create aggregated, anonymized, or de-identified information from consumer health data.
Information that has been properly de-identified so that it is no longer reasonably capable of being linked to you may be used, retained, disclosed, licensed, or commercialized as described in the Blūm Privacy Policy and as permitted by law.
Where required, we take reasonable measures to maintain this information in de-identified form, do not attempt to re-identify it, and require recipients to maintain it in de-identified form.

Your Rights

Depending on applicable law, you may have the right to access or delete consumer health data about you, obtain information about certain disclosures, withdraw consent, or appeal a decision concerning a privacy request.
Submit requests to info@joinblum.com or through privacy controls available within Blūm.
We will respond within the time required by applicable law.

Retention and Deletion

We retain consumer health data for as long as reasonably necessary for the purposes described above and as permitted by law.
When applicable law requires deletion, we will delete consumer health data and instruct applicable service providers or other recipients to do the same as required by law. Information in backups or archives may take longer to remove where permitted by law.
Aggregated, anonymized, or de-identified information that is no longer consumer health data may be retained as permitted by law.

Geofencing

Blūm does not use geofencing around healthcare facilities or similar locations for purposes prohibited by applicable consumer health privacy laws.

Contact

Blum app Inc
30 N Gould St Ste R
Sheridan, WY 82801
USA
Email: info@joinblum.com