InnerBloom by Blooming Minds
Last updated: 22 May 2026
This Privacy Policy explains how InnerBloom, operated by Blooming Minds (“we”, “us”, or “our”), collects, uses, and protects personal data when you use our platform. We take your privacy seriously. This policy is written in plain language because we believe you should understand exactly what happens with your data.
InnerBloom is a social-emotional learning tool that helps parents and educators track, understand, and respond to children's emotional and behavioural patterns. Because we work with data about children, we hold ourselves to a high standard of care.
We collect the minimum data necessary to provide InnerBloom's core function. We do not collect data we do not need.
Account data
Your name, phone number and email address when you create an account
Your role: parent, educator, or both
School or organisation name if you are signing up through an institution
Child profile data
A first name or nickname for the child (we do not require full legal names)
The child's age or year group
Any additional context you choose to add about the child
You control what information you enter. We recommend using a nickname rather than a full name.
Behavioural and observational data
Behaviour and emotional observations you log within the platform
Patterns and trends generated from your observations
Any notes or reflections you add
Usage data
Log-in times and session duration
Features used within the platform
Device type and browser (for technical support purposes only)
We use your data for the following purposes only. We will never use your data for purposes you have not been informed of.
Your data is private to you. We do not sell data. We do not share data with third parties for advertising purposes. The following parties may have access in limited circumstances:
Blooming Minds staff (currently XingNi Liu only) — for support and platform maintenance
Supabase — our database provider — data is stored on Supabase infrastructure located in the United States (North Virginia, US East). Supabase processes data on our behalf under strict data processing terms.
Vercel — our application hosting provider — serves the InnerBloom platform under strict data processing terms
Anthropic — processes behaviour log content to generate AI analyses under their own privacy policy. Anthropic does not use your data to train AI models.
Resend — our email delivery provider — used solely to send transactional emails such as password resets and invitations
Your school or institution — if you are using InnerBloom through a school account and the school's DPA permits shared access
No one else — without your explicit consent
InnerBloom's database is hosted in the United States (North Virginia). By using InnerBloom and agreeing to this Privacy Policy, you consent to your data being transferred to and processed in the United States. We have taken steps to ensure this transfer is protected through contractual safeguards with our service providers. If you have questions about cross-border data handling, please contact us at info@happybloomingminds.com.
We recognise that data about children requires the highest level of care.
Child profiles in InnerBloom are pseudonymised by design — we collect only a nickname and birth year, not a full name or date of birth. This means direct identifiers are removed, but behaviour descriptions entered by users may contain contextual details. Schools and educators are responsible for not entering information that could directly identify a child beyond what is necessary.
All child profile data is entered by an adult (parent or educator) who has authority to enter that data
Child profiles require only a first name or nickname and a birth year — we do not collect full names, dates of birth, or other directly identifying information
Child data is visible only to the account holder who entered it, and to any co-user they have explicitly invited
We do not use child data for any purpose other than providing the InnerBloom service to the account holder
Identifiable child data is never shared, sold, or used for research. Blooming Minds may use anonymised and aggregated data — data from which no individual child can be identified — for research and product improvement purposes
Data entered into InnerBloom belongs to the user who submitted it. Blooming Minds does not claim ownership of any personal data submitted through the platform
If a school uses InnerBloom, the school is responsible for ensuring they have appropriate parental consent before any child's data is entered by an educator
Under the Personal Data (Privacy) Ordinance, you have the right to:
Access the personal data we hold about you
Request correction of any inaccurate data
Request deletion of your data (we will action this within 30 days)
Know what data we hold and how it is being used
To exercise any of these rights, contact us at info@happybloomingminds.com. We will respond within 14 days.
We take the following steps to protect your data:
All data is transmitted over encrypted HTTPS/TLS connections
Data is stored with AES-256 encryption at rest via Supabase
Access to the platform database is restricted to authorised personnel only
We conduct regular reviews of our security practices
If we become aware of a data breach that may affect your personal data, we will notify you within 72 hours and take immediate steps to contain and remedy the breach.
If we make material changes to this Privacy Policy, we will notify you by email at least 14 days before the changes take effect. Continued use of InnerBloom after that date constitutes acceptance of the updated policy. The “Last updated” date at the top of this page reflects when the policy was last revised.
If you have any questions about this Privacy Policy or how we handle your data, please contact:
InnerBloom by Blooming Minds · Hong Kong · info@happybloomingminds.com