Privacy Policy

InnerBloom by Blooming Minds

Last updated: 11 May 2026

This Privacy Policy explains how InnerBloom, operated by Blooming Minds (“we”, “us”, or “our”), collects, uses, and protects personal data when you use our platform. We take your privacy seriously. This policy is written in plain language because we believe you should understand exactly what happens with your data.

InnerBloom is a social-emotional learning tool that helps parents and educators track, understand, and respond to children's emotional and behavioural patterns. Because we work with data about children, we hold ourselves to a high standard of care.

1. Who We Are

Legal nameBlooming Minds
Operated byXingNi Liu
LocationHong Kong
Governing lawPersonal Data (Privacy) Ordinance (PDPO), Hong Kong

2. What Data We Collect

We collect the minimum data necessary to provide InnerBloom's core function. We do not collect data we do not need.

Account data

Your name, phone number and email address when you create an account

Your role: parent, educator, or both

School or organisation name if you are signing up through an institution

Child profile data

A first name or nickname for the child (we do not require full legal names)

The child's age or year group

Any additional context you choose to add about the child

You control what information you enter. We recommend using a nickname rather than a full name.

Behavioural and observational data

Behaviour and emotional observations you log within the platform

Patterns and trends generated from your observations

Any notes or reflections you add

Usage data

Log-in times and session duration

Features used within the platform

Device type and browser (for technical support purposes only)

3. How We Use Your Data

We use your data for the following purposes only. We will never use your data for purposes you have not been informed of.

Core product functionTo display your observations, generate pattern insights, and support the InnerBloom experience
AI analysisWhen you submit a behaviour log, the content is sent to Claude (by Anthropic) to generate an analysis. Anthropic processes this data under their own privacy policy. We do not store raw prompts beyond what is needed to generate and display your analysis.
CommunicationTo send you essential service updates, not marketing, unless you have separately opted in
Product improvementAnonymised and aggregated usage patterns only. We never use identifiable child data to improve the product.
Legal complianceIf required by Hong Kong law or a court order

4. Who Can See Your Data

Your data is private to you. We do not sell data. We do not share data with third parties for advertising purposes. The following parties may have access in limited circumstances:

Blooming Minds staff (currently XingNi Liu only)for support and platform maintenance

Vercelour cloud hosting provider — they store data on our behalf under strict data processing terms

Anthropicprocesses behaviour log content to generate AI analyses, under their own privacy policy

Your school or institutionif you are using InnerBloom through a school account and the school's DPA permits shared access

No one elsewithout your explicit consent

5. Data About Children

We recognise that data about children requires the highest level of care.

All child profile data is entered by an adult (parent or educator) who has authority to enter that data

Child data is visible only to the account holder who entered it, and to any co-user they have explicitly invited

We do not use child data for any purpose other than providing the InnerBloom service to the account holder

Child data is never shared, sold, or used for research without the explicit written consent of the parent or guardian

If a school uses InnerBloom, the school is responsible for ensuring they have appropriate parental consent before any child's data is entered by an educator

6. How Long We Keep Your Data

Active account dataRetained for as long as your account is active
Deleted account dataDeleted within 30 days of account closure
Child profile dataDeleted immediately upon request, or within 30 days of account closure
Usage logsRetained for 12 months for security purposes, then deleted

7. Your Rights Under PDPO

Under the Personal Data (Privacy) Ordinance, you have the right to:

Access the personal data we hold about you

Request correction of any inaccurate data

Request deletion of your data (we will action this within 30 days)

Know what data we hold and how it is being used

To exercise any of these rights, contact us at info@happybloomingminds.com. We will respond within 14 days.

8. Data Security

We take the following steps to protect your data:

All data is transmitted over encrypted HTTPS connections

Data is stored using industry-standard encryption at rest

Access to the platform database is restricted to authorised personnel only

We conduct regular reviews of our security practices

If we become aware of a data breach that may affect your personal data, we will notify you within 72 hours and take immediate steps to contain and remedy the breach.

9. Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you by email at least 14 days before the changes take effect. Continued use of InnerBloom after that date constitutes acceptance of the updated policy. The “Last updated” date at the top of this page reflects when the policy was last revised.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

NameXingNi Liu, Blooming Minds

InnerBloom by Blooming Minds · Hong Kong · info@happybloomingminds.com