Bloomz works with a small number of service providers that process data on our behalf so we can run the Bloomz apps, Slick Sites websites and our website. This page lists each one, what we use it for, what information it receives and where that information is stored.
Every provider that handles personal information is bound by a written agreement to use it only to provide its service to Bloomz, to keep it confidential and secure, and to protect it at least as well as our Privacy Policy and our agreements with schools and districts require. Each provider receives only the information it needs. We never sell personal information, and we do not allow any provider to use student data to train artificial intelligence (AI) models.
Our own business tools, including our CRM, our Support desk and our project tracker, are built and run by Bloomz on our own cloud hosting. They are not third parties and are not listed below.
Unless a row says otherwise, data for the Bloomz service is stored in the United States. For schools on our Singapore service, accounts, messages and posts are stored in Singapore and uploaded files are stored in the United States.
We update this list when we add or change a provider. Questions about it can go to [email protected].
These providers run the servers, databases, storage and network that the Bloomz service depends on.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Oracle Cloud Infrastructure | Hosts the Bloomz apps, Slick Sites websites and our internal tools: servers, databases, file storage and server monitoring. | All data stored in the Bloomz service, including accounts, messages, posts, files and the roster information schools provide. | United States (Chicago region) |
| Cloudflare | Network security, protection against attacks, and secure (TLS) delivery for the Bloomz apps and websites. Hosts bloomz.com. | Web traffic passing to and from Bloomz, including IP addresses. | Global network; does not store application data |
| MongoDB Cloud Manager (MongoDB, Inc.) | Encrypted backups and health monitoring of our databases. | Backup copies of the Bloomz database. | United States |
| Google Cloud | Runs the Bloomz AI services listed below. | The posts, messages and behavior information those features work on. | United States (us-west1) |
| Amazon Web Services | Backup email delivery when our main email provider is unavailable, photo conversion, and links to older media files. | Email address and email content (backup delivery only); photos being converted. | United States |
These providers power the AI features in Bloomz. They process content only to deliver the feature, and they may not use student data to train their AI models.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Anthropic | Ask Bloomz, the in-app help assistant, and the tools our Support team uses to answer and route help requests. | Questions asked in Ask Bloomz; help requests, including the sender's name, email address and message. | United States |
| Google Gemini | Newsletter drafting, behavior report summaries and message suggestions. | The posts, messages, newsletter content and behavior information the feature is working on. | United States |
| Oracle Cloud AI Language and Generative AI | Translation of posts and messages into each family's language; School Answers on Slick Sites websites; the chat assistant on bloomz.com. | Text being translated; questions asked in School Answers or the website chat, and the public website content used to answer them. | United States (Chicago region) |
| Google Cloud Translation | Translation for some languages, and when our main translation service is unavailable. | Text being translated. | United States |
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Postmark (ActiveCampaign) | Sends Bloomz email: notifications, invitations, messages and receipts. | Recipient name and email address, and the email content. | United States |
| Vonage | Sends text messages and voice calls, and handles replies. | Phone numbers, and the text or voice content of the message. | United States |
| Firebase Cloud Messaging (Google) | Push notifications to Android devices and web browsers. | Device token and the notification text. | United States |
| Apple Push Notification service | Push notifications to iPhone and iPad. | Device token and the notification text. | United States |
Card and bank details are entered directly with the payment provider. Bloomz never receives or stores full card numbers.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Stripe | Processes payments made in Bloomz, such as school fees, including Apple Pay. | Payer name, email address, payment details and amount. Bloomz receives a transaction ID and payment status. | United States |
| Apple App Store | In-app purchase of Bloomz premium plans on iPhone and iPad. | Purchase receipt and account ID. Bloomz does not receive payment details. | United States |
| Google Play | In-app purchase of Bloomz premium plans on Android. | Purchase token and account ID. Bloomz does not receive payment details. | United States |
| QuickBooks Online (Intuit) | Bloomz invoicing to schools and districts, and, when a school connects its own QuickBooks, syncing that school's Bloomz payments. | Billing contact and invoice details; for a connected school, payer and payment records. | United States |
These connect only when a school or district sets them up. Most send information into Bloomz from a system the school already uses.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Clever | Rostering and single sign-on. | Student, family, staff and class rosters the district shares; sign-in. | United States |
| ClassLink | Rostering and single sign-on. | Rosters the district shares; sign-in. | United States |
| PowerSchool, Skyward, Infinite Campus and Lumen Touch | Rostering from the district's student information system. | Student, family, staff and class rosters and contact details the district shares. | United States |
| Google Classroom | Classroom announcements and coursework a teacher chooses to connect. | Read-only access to the connected courses, rosters and coursework. | United States |
| Sign in with Google, Microsoft or Apple | Lets people sign in with an account they already have. | Bloomz receives the person's name and email address. Bloomz does not send personal information back. | United States |
| YouTube and Vimeo | Plays videos a school embeds or links, such as meeting recordings. | Video viewing requests. | United States |
| U.S. Census Bureau Geocoder | Places addresses on a map for features such as household and activity-center maps. | Street address. | United States |
| National Weather Service | Weather alerts for a school's location. | The school's location. | United States |
| OpenStreetMap | Map images in map features. | IP address and the map area being viewed. | Global |
Student accounts and users under 13 are excluded from in-app analytics.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Google reCAPTCHA | Stops automated sign-ups and payment fraud. | Browser and device signals, and IP address. | United States |
| Firebase Crashlytics (Google) | Reports app crashes so we can fix them. | Crash details, device type and an anonymous ID. | United States |
| Google Analytics for Firebase | Shows which app screens and features are used. | Anonymous ID and app usage events. | United States |
| Microsoft Clarity | Shows where people have trouble using the app, through usage heatmaps and session replays. | Account ID, role and recordings of app screens. | United States |
| Sentry | Reports server errors so we can fix them. | Error details. | United States |
| PagerDuty | Alerts our on-call engineers when something goes wrong. | Alert details. No student data. | United States |
Personal information can reach these tools when someone contacts Bloomz staff, for example by email or in a meeting.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Google Workspace | Staff email, calendars, documents and meeting notes. | Emails and files people send to Bloomz staff; meeting notes. | United States |
| Anthropic (Claude) | AI assistant Bloomz staff use for their work. | Work content staff provide, which may include customer contact details or help requests. | United States |
| Advertising to school and district staff. | Work email addresses and organization names, sent in hashed (scrambled) form. | United States |
These apply only to our marketing website, not to the Bloomz apps. The Cookie Policy explains your choices.
| Provider | What we use it for | Information it receives | Where data is stored |
|---|---|---|---|
| Google Tag Manager and Google Analytics | Measures website visits and campaigns, with your cookie choice respected. | Pages viewed, IP address and cookie identifiers. | United States |
| Google Fonts | Loads the fonts the website uses. | IP address. | Global |
Bloomz, PO Box 6, Redmond, WA 98073-0006