§ 01
Data controller
GLOBINARY DEVELOPMENT SYSTEM SRL
Registered office: Str. Lazuri nr. 18, postal code 430414, Baia Mare, Maramureș
County, Romania
Tax ID (CUI): 46825774 · Trade Register No.: J24/1890/2022 · EUID:
ROONRC.J24/1890/2022
Incorporated: 13 September 2022
Product contact: hello@bloomdue.baby
Globinary operates the BloomDue product (“BloomDue”, “we”, “us”). Globinary is the controller of personal data processed through the BloomDue website and private beta app, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national law.
§ 02
Scope
This policy applies to:
- the marketing website at bloomdue.baby;
- related BloomDue web experiences we operate (for example the due countdown tool);
- the BloomDue mobile application during private beta (Android and, when available, iOS);
- communications you send us about BloomDue (for example beta access requests).
BloomDue is a care-logging and educational product. It does not diagnose, prescribe, or replace professional medical advice.
§ 03
What data we collect
Website and contact
- Contact and beta requests: if you email us (for example at hello@bloomdue.baby) or use the website beta request form, we process your email address, optional name, platform preference, message content, and technical details needed to prevent spam (for example approximate request rate by IP). Requests are delivered to hello@bloomdue.baby so we can respond.
- Aggregated website analytics: anonymous traffic statistics via Simple Analytics. These do not identify individual visitors and are not used for advertising.
Private beta app
Depending on how you use the app, we may process:
- Account data: email address used for sign-in (magic code / OTP), optional display name, authentication tokens stored securely on your device, and account creation timestamps.
- Family and child profiles you create: family name, membership role, child name, and optional birth date.
- Care and journey data you enter: care logs such as feeds, sleep, diapers, growth measurements, notes, pregnancy-related appointments or moments, and related metadata (for example event time and which carer recorded it).
- Partner / multi-carer features: family membership links so invited carers can share the care record you choose to share.
- Device data needed for app function: platform type and, if push notifications are enabled, a device push token.
- Local device storage: some data may be stored on your device for offline use and later synchronised with our servers when online.
We do not require government ID, payment card data, or advertising identifiers for the private beta. We do not sell personal data.
§ 04
Purposes and legal bases
- Provide the website and respond to enquiries (including beta access requests) — legitimate interest and, where needed, steps prior to a contract.
- Create and secure your beta account (including sending sign-in codes) — performance of a contract / steps at your request.
- Store and sync care logs, profiles, and partner access you set up — performance of a contract.
- Operate, secure, and improve the product (including fixing bugs and understanding aggregate usage of the website) — legitimate interest.
- Comply with legal obligations — legal obligation.
Where we rely on consent for a specific optional feature, you may withdraw consent at any time without affecting processing already carried out lawfully.
§ 06
Who has access (processors and helpers)
Personal data may be processed by providers that support BloomDue operations, only on our instructions and not for their own marketing purposes. Depending on configuration, these may include:
- our hosting / infrastructure provider for the website and API;
- email delivery providers used to send sign-in codes or product emails (for example SMTP or Microsoft Graph, when configured);
- Simple Analytics for aggregate, non-identifying website statistics.
Family members or co-carers you invite may see care data shared within your family space. We do not sell your data.
§ 07
International transfers
Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate GDPR safeguards (for example the European Commission’s standard contractual clauses) or an adequacy decision, as applicable.
§ 08
Retention
- Contact emails: for as long as needed to handle your request and for a reasonable period afterwards for follow-up and legal records.
- Beta account and care data: for the life of your account, or until you ask us to delete it, subject to any short backups needed for security and continuity.
- Website analytics: retained by Simple Analytics in aggregate form according to their product settings; they are not used to profile you as an individual.
When data is no longer needed, we delete or anonymise it. During private beta, deletion workflows may be handled manually via hello@bloomdue.baby while self-serve export and deletion tools are completed.
§ 09
Children’s information
BloomDue is designed for parents and carers, not for children as end users. Parents or carers may enter information about their baby or child (for example a name, birth date, and care events). That information is provided by adults and is processed to deliver the care-logging features they requested.
We do not knowingly market BloomDue directly to children or allow children to create accounts. If you believe a child has provided personal data to us inappropriately, contact us and we will take appropriate steps.
§ 10
Your rights
Under the GDPR you have the right to:
- access your personal data;
- rectify inaccurate data;
- erase data in certain circumstances;
- restrict processing in certain circumstances;
- data portability where applicable;
- object to processing based on legitimate interests;
- withdraw consent where processing is based on consent.
To exercise these rights, email hello@bloomdue.baby. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, www.dataprotection.ro) or your local supervisory authority in the EU/EEA.
§ 11
Security
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, or disclosure, including HTTPS in production and access controls on production systems. No method of transmission or storage is perfectly secure; please use a device passcode and keep your sign-in codes private.
§ 12
Changes to this policy
We may update this policy from time to time, especially as the private beta evolves. The applicable version is the one published on this page at the moment of access. The “Last updated” date at the top will change when we make material updates.
§ 13
Contact
For any question about your personal data or this policy, contact us at hello@bloomdue.baby.
Related: Terms of Use · Globinary
