Bloume Health Data Privacy Notice

Last Updated: 28 August 2026

Introduction

Changes To This Privacy Notice

Contact Information

Your Health Data and Where We Get It

Health Data Categories and What We Do With It

Disclosure of Health Data

Consent for the Processing of Your Health Data

Individual Privacy Rights

Introduction

Bloume*(“Bloume”,”Wellnourish”, “we, “our”) is committed to protecting the privacy and security of the personal health data we collect about end customers and users of our services (“you/your”). The Bloume Consumer Health Data Privacy Notice supplements our Privacy Notice and applies to residents of Washington and Nevada, it describes the way in which we process consumer health data which we may collect through our website, mobile application, social media and online interactions and communications.

Changes To This Privacy Notice

We may update this consumer health data privacy notice (and any supplemental notice), from time to time. Any changes will be deemed effective at the date of publication and where required to do so, we will notify you of the changes.

Last modified August 2026. You can find previous versions of this notice by contacting [email protected]

Contact Information

If you have any questions, concerns or complaints regarding the handling of your health data, your rights or any associated topic, you can contact our data protection officer on the details below:

Data Protection Officer: Sienna Chamberlain
If you have any questions, or wish to exercise any of your rights, then you can contact our data privacy team below:

• Bloume, 16-18 Barnes Wallis Road, , FAREHAM, Hampshire, PO15 5TT, GB
• Alternatively, you can email us at  [email protected]

If you are unhappy with our response to your complaint, or with our handling of your personal health data, you have the right to complain to the relevant regulatory body as set out in our main privacy notice.

Your Health Data and Where We Get It

Health data is data which is, or could, be linked to you and which shows, infers or otherwise suggests any present, past or future physical or mental health.

We collect health data directly and indirectly meaning:

• Directly from you, when you input data into our mobile application or interact with us through our services and provide such data to us.
• Indirectly from third parties such as wearables or other fitness trackers where you consent to such activity through proactive connection of such devices. This enables us to import relevant data without the need for you to log this data manually.

For more information on our data collection processes, please view our main Privacy Notice.

Health Data Categories and What We Do With It

Where health data is provided solely within the confines of our mobile application, that data remains entirely on your device, health data obtained via the mobile application is not transferred to Bloume for storage, or retention. Where health data is entered into a chat with our AI functionality, this will be transferred to our LLM provider and retained for the duration of the chat before being removed on chat termination to maintain the integrity, security and confidentiality of your health data.

Bloume personnel have no access to your health data unless it is provided directly to us through other interactions, such as through email or social media conversations. In such cases, we may use such data to comply with our legal obligations and for safety or security activities, such as to defend legal rights or claims, to investigate security incidents that may impact our service availability, integrity or confidentiality of your health data or to review complaints relating to application content or interactions, including those related to our AI functionality.

The following information is processed or inferred as part of providing services on your device, including cycle tracking, AI chat and prompts, symptoms, nutrition, activity and wellbeing tracking as requested by you when engaging our services.

Disclosure of Health Data

We do not sell your health data. Where we work with third party advertisers, we give you genuine choice in the use of your information and ensure that no data containing your identifiable personal health data is transferred. We implement safeguards as additional protections, such as removal of identifiers for life stage and randomised Click IDs to prevent such data being transferred.

We may engage other third-parties to support the delivery of services to you, including tracking and analytics for application and web usage, community engagement and awareness or to facilitate communications. These third parties are known as processors or service providers and are permitted to use your data only in accordance with our explicit instructions and applicable law. We do not permit our processors to utilise your health data for purposes beyond that which you have requested, consented or would reasonably expect, such as:

• Provision of chat prompts for AI processing
• In response to legal claims, subpoenas or court orders
• During a business acquisition, transfer or reorganisation

Consent for the Processing of Your Health Data

We process your health data in line with your consent, you will be asked to confirm you consent to the processing of your health data when signing up for our services and have the legal right to withdraw your consent at any time, for any reason.

As our services rely on the processing of your health data, we will be unable to continue service provision should you withdraw your consent. We will not penalise any individual for exercising their right to withdraw consent.

Individual Privacy Rights

We have set out the privacy rights available to our users in our main Privacy Notice. You have the following rights in relation to your health data specifically. You can:

• Request confirmation that we collect or share your health data
• Request access to:
  • Your health data that we have collected, or that we control
  • A list of all third parties with whom we have shared your health data
  • Email or other online contact methods for those third-parties
• Withdraw consent for the processing of your health data at any time
  • Please note, you can withdraw consent for Bloume to process health data provided to us via email for a complaint without terminating services obtained via our mobile application
  • If you withdraw consent for all processing, i.e. including our mobile application, we will be unable to provide you with services going forward
• Request we delete your health data
  • Please note that as Bloume does not hold records of your health data obtained via our app, we are unable to delete this for you. You can delete such data within the app or by removing the app and any associated back-ups you have stored.
• Be free from discriminatory treatment as a result of exercising any of your privacy rights.
  • Note that no individual will ever be subjected to discriminatory treatment as a result of exercising their privacy rights, regardless of their geographical location.
  • Termination of services which utilise your health data following withdrawal of consent does not constitute discriminatory treatment as we rely on consent to process your data and provide such services to you.

You may exercise any of your privacy rights by contacting [email protected].

If we deny your rights request you have the right to complain to our privacy team at [email protected] or alternatively, by contacting the relevant regulatory authority as set out in our Privacy Notice.