Bloom Health & Metabolic Care
Bloom Health App Privacy Policy
Effective September 11, 2026
The short version: the Bloom Health app exists so you can see the care plan your clinic team built for you. Your health information is entered by your care team, protected under HIPAA, and used only to provide your care. The app contains no advertising, no analytics trackers, and no data selling, ever.
1. Who we are
The Bloom Health app is operated by Bloom Health & Metabolic Care ("the clinic," "we"), a physician-led metabolic health clinic. The app is a companion to the in-person care our patients receive: it displays the personalized nutrition and activity plan, recipes, body-composition measurements, and lab results that your care team manages for you.
As a healthcare provider, the clinic is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Our use and disclosure of your protected health information is governed by our Notice of Privacy Practices, which you receive as a patient of the clinic. This policy explains, additionally, how the app itself handles information.
2. Accounts are created by your care team
There is no self-registration. An app account is created only when clinic staff invite an enrolled patient, using the email address you share with us. Your care team can also disable an account at any time, for example, if you tell us your device was lost.
3. Information you see in the app
Almost everything the app shows is information your care team entered or collected during your care, delivered securely from the clinic's systems:
- Your personalized nutrition plan, recipes, and printable plan booklet
- Body-composition measurements taken on the clinic's medical scale during visits
- Laboratory results reviewed by your care team
- Your prescribed activity and strength program
The app does not collect health data from your device. It does not read HealthKit, your location, your contacts, your photos, your microphone, or any device sensors.
4. Information the app collects
- Sign-in details. Your email address and password are used solely to authenticate you. Passwords are handled by our identity service and are never visible to clinic staff. A secure sign-in token is stored in your device's protected keychain.
- Recipe favorites. Recipes you star are saved to your account so they follow you across devices.
- App preferences. Your language choice, measurement units, and lock settings are stored only on your device.
- Face ID / Touch ID. If you enable the app lock, biometric authentication is performed entirely by your device's operating system. The app never receives or stores your biometric data.
The app contains no third-party advertising or analytics software and does not track you across other companies' apps or websites.
5. How information is used
Information in the app is used for one purpose: providing your care and the app's features. We do not sell your information, share it for advertising, or use it for marketing without your separate consent.
6. When information is shared
Your information is shared only with:
- Service providers that host our systems under contracts that require them to safeguard your information (our infrastructure provider operates under a HIPAA business associate agreement), and Apple, which distributes the app;
- Your care team within the clinic, as part of providing your care;
- Authorities, when required by law, consistent with HIPAA and our Notice of Privacy Practices.
7. How information is protected
All communication between the app and our systems is encrypted in transit. Health records are stored on encrypted infrastructure located in the United States, with additional application-level encryption applied to clinical documents. Access is limited to your care team, accounts are invite-only, sessions expire automatically, and you can add a biometric lock on your device.
8. Retention and your choices
Your medical records are retained by the clinic according to medical record-keeping laws, whether or not you use the app. You may:
- Ask us to correct information you believe is inaccurate;
- Request a copy of your records, as described in our Notice of Privacy Practices;
- Ask us to disable your app account at any time. This does not affect your care;
- Delete the app from your device, which removes locally stored preferences and your sign-in token.
9. Children
The app is intended for patients of the clinic and is not directed to children under 13. We do not knowingly collect information from children under 13 through the app.
10. Changes to this policy
If we change this policy, we will post the updated version at this address with a new effective date, and note significant changes in the app or by email.
11. Contact us
Questions about this policy or your information:
Bloom Health & Metabolic Care
1801 W. Knapp St. Suite #5, Rice Lake, WI 54868
[email protected]
bloommetabolic.com