Privacy Policy

Last Updated: January 30, 2026

1. Introduction

We respect your privacy and are committed to protecting it through this Privacy Policy. This policy describes how we collect, use, store, protect, and disclose information when you use:

• Our website (the "Website")
• Our mobile application (the "App")
• Our AI-enabled toy device (the "Device")

The Website and App are intended for parents or legal guardians, and the Device is designed for use by children ages 5-10 under parental supervision and consent.

By using the Website, App, or Device, you agree to the practices described in this Privacy Policy.

2. Use by Minors and Parental Responsibility

The Website and App are not intended for children and must only be used by parents or legal guardians. Children may interact with the Device only after a parent completes onboarding and provides verifiable parental consent.

If a Device is not linked to a parent account, the Device will not respond to a child or process interactions.

3. Children Under the Age of 13 (COPPA Notice)

This section applies to children under 13 and is provided in accordance with the Children's Online Privacy Protection Act ("COPPA"). If there is any conflict between this section and another section of this policy, this section controls.

3.1 Information We Collect About Children

We collect only the minimum information reasonably necessary for the Device to function.

A. Information Provided by Parents

During onboarding, a parent may provide:

• Child nickname or preferred name
• Child age or birth year
• Family context (optional)
• Parent email address
• Account credentials

B. Voice Interactions

• The Device uses an always-on microphone with wake-word activation ("hey bloom")
• Audio is transmitted only after the wake word is detected
• Raw audio is collected temporarily to generate a response
• Audio is converted to text and promptly deleted
• Audio is not continuously recorded or stored

C. Conversation Transcripts

• Text transcripts of interactions may be stored for up to 90 days
• Parents may delete transcripts at any time via the App
• Transcripts are automatically deleted after 90 days if not manually removed

3.2 Long-Term Memory (Child Preferences)

What Long-Term Memory Is

Long-term memory consists of limited, parent-consented text summaries such as:

• Preferences
• Interests
• Conversation style indicators
• Learning progress summaries

Raw audio is never stored as long-term memory.

What It Is Used For

Long-term memory is used only to personalize conversations, such as adapting tone, topics, or interaction style to better match a child's preferences.

What It Is NOT Used For

We do not use long-term memory or child interaction data for:

• Advertising or marketing — child interaction data and Device data are never used for advertising. This is separate from the analytics and marketing cookies used on our public Website, which are described in our Cookies & Tracking Technologies section below.
• Behavioral analysis
• Cross-child inference
• Automated decision-making
• Profiling for non-conversational purposes
• Training artificial intelligence models
• Sale, rental, or sharing with third parties

Parent Control

Parents may reset or delete long-term memory at any time through App settings.

• Deletion is immediate
• There are no backups
• Deleted memory is permanently removed and no longer used

3.3 AI and Third-Party Services

We use third-party AI services (including OpenAI and Anthropic) strictly to generate real-time responses.

• Child data is used only to generate responses and summaries
• Data is not retained by AI providers
• Data is not used for model training or improvement
• AI providers act solely as data processors

3.4 Disclosure of Children's Information

We do not sell or share children's personal information.

We may disclose information only:

• To service providers supporting internal operations
• To comply with legal obligations
• To protect the safety and security of children, users, or our systems
• In the event of a merger, acquisition, or asset transfer

3.5 Parental Rights

Parents may:

• Review their child's information
• Delete transcripts or long-term memory
• Revoke consent
• Disable the Device

Requests can be made through the App or by contacting us at the email listed below.

4. Information We Collect From Parents

We may collect:

• Name
• Email address
• Account credentials
• Payment and transaction information
• Support communications
• App usage data

5. Automatic Information Collection

We may automatically collect:

• Device identifiers
• IP address
• Operating system and app version
• Bluetooth, Wi-Fi, and GPS data (used only for device connectivity and localization)

We do not use precise location data (such as GPS) for advertising. Our public Website does use cookies and similar technologies for analytics and marketing measurement, but only with your consent — see our Cookies & Tracking Technologies section below.

6. How We Use Information

We use information to:

• Provide and operate the Website, App, and Device
• Authenticate parents
• Maintain device connectivity
• Improve functionality and reliability
• Provide customer support
• Ensure child safety and compliance

7. Data Security

We use industry-standard safeguards, including:

• Encryption in transit and at rest
• Access controls
• Secure authentication
• Network and infrastructure protections

No system is completely secure, but we take reasonable measures to protect your information.

8. Data Retention

• Audio: deleted immediately after processing
• Transcripts: up to 90 days
• Long-term memory: retained until parent deletes
• Parent account data: retained until account deletion

9. Your Rights (Including GDPR Readiness)

Parents may request:

• Access to personal data
• Correction or deletion
• Data portability
• Restriction of processing

We honor these rights in accordance with applicable law.

10. Cookies & Tracking Technologies

DRAFT — pending legal review. This section is a working draft prepared to disclose the website analytics and marketing tools currently in use. It has not been reviewed or approved by counsel and should not be treated as final legal text.

This section applies to our public Website only. It does not apply to the App or the Device, and none of the technologies below have access to child interaction data or long-term memory.

On the Website we use cookies and similar technologies to understand how visitors use the site and to measure the effectiveness of our marketing. These include:

• Google Analytics 4 (GA4) — measures website traffic and how visitors navigate the site, so we can improve it.
• Google Tag Manager (GTM) — a tag-management service we use to load and manage the technologies described in this section.
• Meta Pixel — helps us measure and improve our advertising on Meta platforms (such as Facebook and Instagram) and reach people who may be interested in our products.
• PostHog — product analytics that help us understand how features (such as the voice demo and cart) are used so we can improve them.
• Microsoft Clarity — aggregated usage insights (such as heatmaps and session trends) used to improve the site experience.

These are provided by third parties (Google, Meta, PostHog, and Microsoft) who process the data under their own privacy policies. They may set cookies or collect identifiers such as your IP address and device or browser information.

Your Consent Choices

Advertising and analytics technologies are off by default. When you first visit the Website, a consent banner asks whether you accept analytics and marketing cookies. Using Google Consent Mode, Google Analytics and the Meta Pixel do not load until you select Accept. If you select Decline, they remain disabled.

You can change or withdraw your choice at any time by:

• Clearing this site's cookies and local storage in your browser (this removes your saved preference, and the consent banner will ask again on your next visit), then selecting Decline;
• Using your browser's cookie and privacy controls — including Do Not Track, which our product-analytics tools honor — to block or delete cookies; and
• Opting out directly through the providers — for example, the Google Analytics Opt-out Browser Add-on and your Meta ad preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or Website.

12. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at: