# Consumer Health Data Privacy Policy **Bloom Dating, Inc.** **Effective Date:** March 19, 2026 **Last Updated:** October 6, 2026 --- This Consumer Health Data Privacy Policy is provided in accordance with the Washington My Health My Data Act (RCW 19.373) and applies to "consumer health data" as defined under that law. This policy supplements our main [Privacy Policy](https://www.bloom.date/privacy) - please read both. --- ## What Is Consumer Health Data? Under Washington law, "consumer health data" is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. For Bloom, this includes: - **Gender identity information** you provide when creating your profile - **Sexual orientation information** inherently revealed through your gender and matching preferences - **Reproductive or sexual health information**, if you voluntarily share such information in messages, profile content, or other features - **Biometric data**, only if you choose optional selfie verification: a reference image of your face and comparisons of its facial geometry with your profile photos (see Section 18 of our Privacy Policy) We do **not** intentionally collect medical records, diagnoses, prescriptions, or clinical health data. --- ## How We Collect Consumer Health Data We collect this data only from what you provide, and, if you choose to verify, from the comparisons our verification provider makes: - **During account setup:** When you select your gender and set your matching preferences - **During selfie verification:** If you choose to verify, after you give a separate written consent - **In your profile:** If you voluntarily include health-related information in your bio or lifestyle fields - **In messages:** If you share health-related information in conversations with matches or your partner We do **not** collect consumer health data from third-party sources, and we do **not** use tracking technologies to infer health information about you. --- ## Your Consent We collect and process consumer health data only with your affirmative, voluntary consent, which you provide during account setup through our sensitive data consent screen, and, for selfie verification, through a separate consent before verification starts. You may withdraw your consent at any time by contacting us at privacy@bloom.date or through **Settings > Privacy** in the app. Withdrawing your sensitive data consent may require us to deactivate your account, as this data is necessary for the core matching service to function. Withdrawing your selfie verification consent only removes your verification. --- ## How We Use Consumer Health Data We use consumer health data solely for the following purposes: - **Providing the matching service:** Using your gender and matching preferences to show you relevant profiles - **Delivering messages:** Transmitting the content of your conversations, which may contain health information you choose to share - **Verification:** Confirming that your profile photos show you, if you choose to verify - **Safety:** Automated and human review of photos and messages to enforce our Community Guidelines (Section 16.6 of our Privacy Policy) - **AI features you use:** Features such as date suggestions or Notes and Insights scans may read messages that contain health information you chose to share (Section 16 of our Privacy Policy) - **Service operation:** Maintaining and troubleshooting the features you use We do **not** use consumer health data for advertising, marketing to third parties, or any purpose unrelated to providing you with the Service. --- ## How We Share Consumer Health Data We share consumer health data only with our service providers who are contractually required to protect it: | Provider | Purpose | |---|---| | **Supabase** (on AWS, US) | Database storage and authentication | | **Google Firebase Cloud Messaging** and **Apple Push Notification service** | Push notification delivery (chat notifications include a message preview, and notifications may reference matches, which could reveal preferences) | | **Amazon Web Services - Rekognition** (US) | Selfie verification and automated review of photos | | **Amazon Web Services - Transcribe** (US) | Speech-to-text for automated safety review of voice messages | | **Microsoft PhotoDNA** (US) | Detecting known child sexual abuse material in photos | | **Anthropic** (US) | AI features and automated safety review of messages, which may contain health information you choose to share | | **Amazon Web Services - Bedrock** (US) | Backup that runs Anthropic's Claude models when Anthropic is unavailable | | **ElevenLabs** (US) | Voice transport for optional voice onboarding | Each provider may use this data only to provide its service to us, under its contract or terms with us. **We do not sell consumer health data.** We have never sold consumer health data and do not plan to do so. --- ## Your Rights You have the right to: - **Access:** Request a list of all consumer health data we have collected about you and the third parties and affiliates with whom we have shared it - **Delete:** Request deletion of your consumer health data - **Withdraw consent:** Withdraw your previously given consent for the collection and sharing of consumer health data To exercise your rights, contact us at privacy@bloom.date or use **Settings > Privacy > Manage My Data** in the app. We will respond within 30 days. --- ## Data Security We protect consumer health data using the same security measures described in our main Privacy Policy, including encryption in transit and at rest, access controls, and secure authentication. --- ## Contact Us For questions about this Consumer Health Data Privacy Policy: - **Email:** privacy@bloom.date - **Mail:** Bloom Dating, Inc., 10102 S Redwood Rd #95177, South Jordan, UT 84095 --- *© 2026 Bloom Dating, Inc. All rights reserved.*