Bloomplay Privacy Policy

Effective: 13 September 2026 · Last updated: 13 September 2026

Bloomplay helps parents and guardians find, compare, save and plan classes, camps and other activities for their children. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.

Bloomplay is for adults aged 18 and over. It is not designed for or directed at children, and children cannot have Bloomplay accounts. Parents and guardians may add profiles for their children, which stay under the parent's account.

This policy covers the Bloomplay app and website, and businesses that use the Bloomplay provider portal (see section 10).

1. Who we are

Bloomplay (“Bloomplay”, “we”, “us”) is based in Singapore. We are responsible for the personal data we collect through Bloomplay under Singapore's Personal Data Protection Act 2012 (PDPA).

Our Data Protection Officer is Leonard Soon. For any question or request about your personal data, contact them using the details in section 17.

2. Information we collect about parents and guardians

When you create and use an account, we collect:

your name and email address, and the identifiers that let you sign in;
if you sign in with Google, the name, email address and profile photo from your Google account;
your phone number, if you give one;
classes you save, and plans you add to your schedule;
bookings you request: the session, which child it is for, and any notes you add;
questions you send to activity providers, and their replies;
reviews you write: your rating, whether the class suited your child's level, how your child found it, whether you would book again, and any comments;
if you suggest a provider we should list, the provider's name and area, and any name, email address, phone number and message you include.

If you browse without an account, the age you pick and the classes you shortlist are stored only on your device. They are not sent to us.

3. Information about your children

Parents and guardians can add a profile for each child. A child profile is not an account, and a child cannot sign in to or manage it. A child profile can include:

a first name or nickname;
date of birth;
gender;
interests and preferred activity categories;
energy level, preferred times and budget preference;
an avatar picture chosen from our illustrations. We do not ask for photos of children.

When you book a class, your child's name and age are included in the booking. When you write a review, your child's age at the time is shown with it.

You can edit or delete a child's profile in the app. Deleting it also removes the plans and saved classes for that child. Bookings already made for that child stay with the provider as its records, including the child's name and age.

Please add only what you need. Do not enter medical conditions, school details, identification numbers or other sensitive information about your child.

4. Location

If you allow it, Bloomplay uses your device's location, on your device, to show activities near you and to centre the map. We do not store your device location.

Map images come from OneMap, run by the Singapore Land Authority. Your device requests them directly, so OneMap receives your IP address and the area of the map you are viewing.

You can turn location access on or off at any time in your device settings.

5. Technical and performance information

We use Firebase Performance Monitoring, a Google service, to see how quickly the app starts and responds. It collects information such as your device model, operating system, app version, network type, how long screens and network requests take, and your approximate country.

Our hosting and database services also keep technical logs, such as IP addresses and request times, which help us keep Bloomplay secure and running.

We do not currently use advertising, analytics or crash-reporting services.

6. How we use your information

We use personal data to:

create and run your account and your children's profiles;
show activities and rank them by your child's age, interests and energy level, and by your location;
recommend activities, using your children's profiles, your past bookings and the answers in your reviews;
pass your bookings and questions to the activity providers concerned;
send you emails about the service, such as updates on a booking or a reply to your question;
follow up questions sent to providers who do not use Bloomplay yet;
check reviews against our guidelines;
keep Bloomplay secure, and find and fix problems;
meet our legal obligations.

We do not currently send marketing emails. If we start, we will ask for your consent where the law requires it, and every message will let you unsubscribe.

7. Recommendations

Recommendations are there to help you find activities. They are not educational, developmental, medical, psychological, childcare or other professional advice. You decide whether an activity, venue or provider suits your child.

8. Who we share your information with

Activity providers. When you book a class or send a question, the provider needs your details to reply and to run the class:

Bookings: the provider sees your name, email address, phone number if you gave one, your child's name and age, and your notes. It also receives an email about the request with your child's name and age.
Questions to a provider that uses Bloomplay: the provider sees your name and message, and can reply to your email address.
Questions to a provider that does not use Bloomplay yet: we email your message to the business without your name or email address. Our staff see your email address so they can follow up with you.
Reviews: shown to the provider and to other signed-in Bloomplay users, with your first name and your child's age at the time.

Once a provider has your details, it is responsible for how it uses them. Please read the provider's own privacy policy.

Service providers who run parts of Bloomplay for us:

Google Firebase: sign-in, database, file storage, website hosting, server functions and performance monitoring;
Google Sign-In, if you choose to sign in with Google;
Resend: delivering our emails;
OneMap (Singapore Land Authority): map images.

Some listing photos are loaded from Google-hosted links, such as Google Drive, which receive your IP address when the image loads.

We may also disclose personal data where reasonably necessary to comply with the law or a lawful request; to protect Bloomplay, our users or others; to investigate fraud, security incidents or misuse; or as part of a merger, acquisition or sale of all or part of our business.

We do not sell personal data about you or your children.

9. Children's privacy

Bloomplay helps parents find activities for children, but it is not designed for or directed at children. Accounts are for adults aged 18 and over, and children should not use Bloomplay or give us their personal data.

If we learn that a child has created an account or given us personal data without a parent or guardian, we will delete the account or the data.

10. Businesses using the provider portal

If you run or work for a business listed on Bloomplay, we collect:

account and team details: your name, email address, job title and role;
business details: legal business name, UEN, contact phone number and email address, website, description, logo and social media links;
listing details: outlets and addresses, classes, schedules and prices;
documents you upload, such as business registration, insurance and staff clearance records. Clearance records can name individual staff. Documents are not publicly accessible: only your team and Bloomplay staff can see them.

Before a business joins, we may create its listing from information the business has published, such as its website. Questions from parents are then emailed to the business's contact address.

Information on a published listing is visible to everyone who uses Bloomplay.

11. Where your information is stored

Our database and server functions are hosted by Google Cloud in Singapore. Some services we use, including Firebase Authentication and our email delivery service, may process data outside Singapore. When personal data leaves Singapore, we take the steps the PDPA requires to make sure it is protected to a comparable standard.

12. How long we keep information

We keep your account information for as long as your account is open.
When you delete your account, we delete or de-identify your personal data as described in section 13.
Bookings, questions and reviews are kept after you leave, with your details removed, because they are also the provider's records.
Copies of service emails we have sent are kept in our email records.
If data is held in backups, it stays there until those backups are overwritten.
We may keep information for longer where the law requires it.

13. Deleting your account

You can delete your account in the app or on the website: go to Profile and choose Delete my account. You can also ask us by email (see section 17).

When you delete your account:

your profile, your children's profiles, your saved classes, your plans and your sign-in account are deleted;
bookings and questions you sent stay with the provider as its records, but your name, email address, phone number, your child's name, your notes and the messages you wrote are removed;
reviews you wrote stay published, without your name.

Deleting your account cannot be undone, and you will not be able to sign in again. To remove one child's profile without closing your account, delete it from that child's profile page (see section 3).

14. Your rights and choices

Under the PDPA, and subject to its exceptions, you can:

ask for a copy of the personal data we hold about you, and how it has been used or disclosed in the past year;
ask us to correct personal data that is wrong. You can update or delete your children's profiles in the app yourself;
withdraw consent to our use of your personal data. Some features may stop working if you do;
turn location access off in your device settings;
delete your account as described in section 13.

15. Security

We use administrative, technical and organisational measures designed to protect personal data from unauthorised access, use, disclosure, alteration and loss. No online service can be completely secure, so please keep your password private.

16. Changes to this policy

We may update this policy as Bloomplay changes or as the law requires. If we make material changes, we will tell you in the app, on our website or by email. The date at the top shows when it was last updated.

17. Contact us

Bloomplay, Singapore

Data Protection Officer: Leonard Soon

Email: contact@bloomplay.com.sg

Please tell us the email address you use for Bloomplay, so we can find your account.