Consumer Health Data Privacy Policy

The PMDD Lab

Effective date: 1 November 2026

This policy describes how Bloomful Planners ("Bloomful", "we", "us") handles consumer health data in connection with The PMDD Lab mobile application (the "App"), as required by the Washington My Health My Data Act, Nevada Senate Bill 370, the Connecticut Data Privacy Act and similar US state laws. It applies to consumers in those states. Our general Privacy Policy describes all other processing.

1. Who we are

Bloomful Planners (sole trader), business ID 3485996-4, Sarvijaakonkatu 16 A 9, 33540 Tampere, Finland. Email: hello@bloomfuljournals.com.

2. Health data that stays on your device

Everything you record in the App (cycle and period dates, moods, symptoms, sleep, energy, habits, notes and other entries) is stored only on your device. We do not collect it, and we cannot see it.

3. Consumer health data we collect

(a) AI reading summary. Only when you ask for an AI reading, after you have given consent: a summary of one menstrual cycle, consisting of the moods, symptoms, sleep, energy and period flow you recorded (by cycle day number and cycle phase, not calendar date); the cycle's length; the names of habits, symptoms and tags in the summary, including names you typed; your experiment question and results, and results of earlier experiments with the same habit; whether the experiment habit is a supplement; if you track medications, on how many days you marked them taken and whether a medication change was noted (never medication names); and whether you recorded very difficult days. It never includes your notes, calendar dates or medication names.

(b) Subscription status. A record, kept by our subscription service under a random identifier created by the App, that you have or had a subscription to the App. Because the App is about menstrual health, this record could indicate health information.

(d) Messages. Anything you choose to write to us by email, which may include health information.

4. Sources

You, when you ask for an AI reading or write to us; and Apple or Google (through our subscription service) when you subscribe.

5. Purposes

We use consumer health data only to provide what you asked for: to write the AI reading you requested; to apply reading limits; to verify your subscription; and to answer your messages.

6. Sharing

We do not share consumer health data with third parties, and we do not sell it. We use only processors that handle it on our behalf, under our instructions and under written contracts:

(a) Cloudflare, Inc., which operates our server;

(b) OpenRouter, Inc., which passes the AI reading summary to the AI model provider, and that AI model provider (named in our Privacy Policy before the AI reading service starts), under settings and terms that forbid logging, retaining or training on the summary;

(d) our email service provider, for messages to us.

We have no affiliates. We do not use consumer health data for advertising, and we do not collect location data or use geofencing.

7. How long we keep it

The AI reading summary is not stored by our server, OpenRouter or the AI model provider. Reading counts are deleted after twelve months without use; a mark that the free reading was used is kept while the AI reading service runs. Subscription records are kept while you have or had a subscription and as long as tax and accounting laws require. Messages are kept as long as needed to handle them, and at most two years.

8. Your rights

You have the right to:

(a) confirm whether we collect your consumer health data, and access it, including a list of the processors and third parties that received it;

(b) have it deleted, including by our processors;

To use these rights, email hello@bloomfuljournals.com, ideally from the App's Settings › About & legal › Contact us, which adds the App's random identifier so that we can find your records. We answer within 45 days (extended once by 45 days where reasonably necessary, in which case we tell you why). Requests are free, at least twice a year.

If we decline your request, you may appeal by replying to our answer with the word "appeal". We will answer your appeal within 45 days and explain our decision. If your appeal is denied, you may contact the Attorney General of your state (in Washington: www.atg.wa.gov; in Nevada: ag.nv.gov; in Connecticut: portal.ct.gov/ag).

9. Consent

We ask for your consent in the App before we collect your AI reading summary for the first time, on a screen that explains what is collected, why, who receives it, and how to withdraw. Our subscription service's record is necessary to provide the subscription you requested.

10. Changes

We will update the effective date above when this policy changes and tell you in the App before material changes take effect.