Privacy Policy

Last Updated: October 18, 2026

Introduction

True Blossom, LLC, operating as TruBlossm (“TruBlossm,” “True Blossom,” “we,” “our,” or “us”), is committed to protecting the privacy and personal information of our members.

TruBlossm provides complimentary menstrual-care products through an advertising-supported ecosystem that includes Blossm Boxes, smart vending machines, brand-sponsored distribution programs, our website, and our mobile application.

Our mobile application may also provide menstrual-cycle tracking, Community participation, educational content, notifications, and other digital experiences.

Our complimentary menstrual-care programs are supported by brands that purchase advertising and sponsorship space. Product availability and distribution depend on active sponsorships, inventory, participating locations, and operational considerations.

This Privacy Policy explains how we collect, use, store, disclose, and protect information across trublossm.com, the TruBlossm mobile application, vending-machine experiences, and related services (collectively, the “Services”).

We do not sell personal information in exchange for money.

However, certain advertising or analytics activities may be considered “sharing,” “selling,” or targeted advertising under applicable privacy laws, even without a monetary exchange. Where required, we provide applicable notices, rights, and choices.

1. Information We Collect

Account and Profile Information

When members register or use our Services, we may collect:

  • Name and email address.

  • Shipping address and contact information.

  • Date of birth or age-related information.

  • Gender identity, household income, and other demographic information voluntarily provided.

  • Account preferences and subscription status.

  • Communication preferences and consent records.

  • Information used to verify eligibility or investigate security concerns.

Menstrual-Cycle and Health-Related Information

If you use our menstrual-cycle tracker, you may choose to provide:

  • Period start and end dates.

  • Menstrual-cycle lengths and history.

  • Symptoms and daily cycle observations.

  • Cycle-related preferences.

  • Information used to generate predicted period and ovulation dates.

Cycle records are encrypted directly on your device before being securely stored in TruBlossm's Supabase-backed cloud infrastructure. Encryption is designed to ensure that your personal menstrual-cycle information remains private and cannot be read by TruBlossm employees, advertisers, analytics providers, or other third parties. Encryption keys are stored securely on your device and are not shared with these parties.

The application uses a device-stored encryption key to protect cycle information.

This architecture is designed to help prevent readable cycle records from being exposed through ordinary database access.

We treat menstrual-cycle information as sensitive personal information.

We do not use individual menstrual-cycle records, symptoms, period dates, or fertility predictions to target advertisements.

Community Information

When members participate in the TruBlossm Community, we may process:

  • Posts and replies.

  • Content members voluntarily publish.

  • Community interactions.

  • Reports of potentially abusive or prohibited content.

  • Information necessary to investigate reports and enforce Community standards.

Community posts and replies may be visible to other members.

Members should avoid posting information they do not wish to share with the Community.

Product Distribution and Vending-Machine Information

When members participate in product-distribution programs or interact with participating vending machines, we may process:

  • Member or account identifiers used to verify eligibility.

  • Product distribution or redemption activity.

  • Participating-location or vending-machine identifiers.

  • Shipping and fulfillment information.

  • Inventory and distribution records.

  • Information used to prevent duplicate or fraudulent redemptions.

If a feature requests device location, location information will be used for disclosed purposes and subject to applicable permissions and privacy requirements.

Technical and Usage Information

We and our service providers may collect:

  • Device type and operating system.

  • Application version and technical identifiers.

  • IP address and network-related information.

  • Screens viewed and feature interactions.

  • Application performance information.

  • Crash reports and diagnostic information.

  • Information necessary to maintain security and prevent misuse.

Advertising and Engagement Information

We may collect information relating to:

  • Sponsored-content impressions.

  • Advertising interactions.

  • Campaign performance and measurement.

  • General application engagement.

  • Technical identifiers used by advertising providers where applicable and permitted.

We do not use individual menstrual-cycle information for behavioral advertising.

Communications and Support

When members contact TruBlossm, we may retain correspondence, support requests, attachments voluntarily provided, and information necessary to resolve inquiries.

2. How We Use Information

We use information to:

  • Create, authenticate, and manage member accounts.

  • Verify eligibility for complimentary menstrual-care programs.

  • Coordinate Blossm Box shipments.

  • Operate participating smart vending machines.

  • Manage product inventory and distributions

  • Maintain member preferences.

  • Operate and moderate the Community.

  • Respond to customer-service requests.

  • Send essential service and security communications.

  • Send optional promotional communications where permitted.

  • Deliver and measure advertising and sponsorship campaigns.

  • Understand app performance and improve our Services.

  • Prevent fraud and unauthorized activity.

  • Enforce our Terms and Community standards.

  • Comply with legal obligations.

We do not use cycle-tracking information to make medical diagnoses or provide individualized medical treatment.

3. How Menstrual-Cycle Information Is Protected

TruBlossm uses technical safeguards designed to protect sensitive menstrual-cycle information.

Cycle records are encrypted on a member's device before encrypted information is stored remotely.

The application uses secure device storage for the encryption key.

This design helps limit access to readable cycle records in our cloud infrastructure.

Encrypted cloud storage is not the same as storing all information exclusively on a device.

Accordingly, we disclose that encrypted menstrual-cycle records may be stored using infrastructure operated by our service providers.

No technical safeguard eliminates every possible security risk.

4. Advertising and Brand Partnerships

TruBlossm's business model is supported by brands purchasing advertising and sponsorship space to fund complimentary menstrual care.

Advertising and sponsorship opportunities may include physical packaging, vending machines, digital advertising, events, and other TruBlossm experiences.

We may measure:

  • Advertising impressions and interactions.

  • Campaign delivery and engagement.

  • Product distribution and redemption activity.

  • Sponsorship performance.

Our application uses third-party advertising technology, including Google advertising services, and is configured to request non-personalized advertisements for identified placements.

Advertising providers may process technical information necessary to deliver advertisements, measure performance, prevent fraud, and operate their services.

We do not provide brand sponsors with individual menstrual-cycle records for advertising targeting.

We may provide sponsors with aggregated or appropriately de-identified campaign reporting, subject to applicable law.

Where required, we will provide consent mechanisms or opt-out choices relating to targeted advertising and certain data sharing.

5. Analytics and Service Providers

TruBlossm uses service providers to support our operations.

These may include:

  • Supabase: Authentication, database services, and backend infrastructure.

  • PostHog: Application analytics and product-performance measurement.

  • Google advertising services: Advertisement delivery and measurement.

  • Expo and related notification infrastructure: Application functionality and push-notification delivery.

  • Google Workspace/Gmail: Customer support and authorized communications.

  • Hosting, shipping, and operational providers: Website hosting, product fulfillment, and related services.

Depending on their role, providers may process information on our behalf or under their own applicable terms and privacy policies.

We seek to limit access to information based on the services performed and applicable contractual and legal requirements.

6. How We Share Information

We may disclose information:

  • To service providers necessary to operate TruBlossm.

  • To shipping and fulfillment partners to deliver products.

  • To advertising and analytics providers as described in this Policy.

  • To authorities when legally required.

  • To investigate fraud, protect members, or address security threats.

  • In connection with a merger, acquisition, financing, or corporate restructuring, subject to applicable legal protections.

  • When a member authorizes or directs a particular disclosure.

We do not disclose individual menstrual-cycle records to brand sponsors for advertising targeting.

7. Notifications and Communications

With appropriate permissions, TruBlossm may send:

  • Menstrual-cycle reminders and predictions.

  • Product and shipment updates.

  • Community-related notifications.

  • Account and service announcements.

  • Optional promotional communications.

Members may manage supported preferences through the application, applicable unsubscribe mechanisms, or device settings.

Notification delivery may involve device push tokens and third-party notification infrastructure.

8. Administrative Access and Account Security

TruBlossm maintains administrative systems, including our web-based Command Post, to support customer service, account management, Community moderation, communications, sponsorships, and security.

Authorized personnel may access account and operational information when reasonably necessary to perform legitimate duties.

Administrative access is subject to authentication and access controls.

Account restrictions, suspensions, moderation actions, and relevant administrative activity may be recorded for security, operational accountability, and enforcement purposes.

9. Data Retention and Account Deletion

We retain personal information for as long as reasonably necessary to provide our Services, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and prevent fraud or abuse.

Members may initiate account deletion directly through the TruBlossm mobile application.

Members may also request deletion or assistance through the application's Support feature or by contacting support@trublossm.com.

Members who no longer have access to the application may request account deletion through our website's account-deletion information page or by emailing support.

We will honor valid deletion requests in accordance with applicable law, subject to reasonable identity verification and legally permitted or required retention.

Certain information may be retained when necessary for legal compliance, security, fraud prevention, or dispute resolution.

Backup records may remain temporarily until expiration or replacement under applicable retention procedures.

10. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Access personal information held about you.

  • Correct inaccurate information.

  • Request deletion of personal information.

  • Request a copy of certain information.

  • Withdraw consent where processing depends on consent.

  • Opt out of optional marketing communications.

  • Opt out of certain targeted advertising, sales, or sharing of personal information.

  • Limit certain uses of sensitive personal information.

  • Appeal privacy-request decisions where required by law.

Requests may be submitted to support@trublossm.com.

We may take reasonable steps to verify identity before responding.

We will process requests within the timeframes required by applicable law and will not unlawfully discriminate against members for exercising their rights.

11. Cookies, Tracking Technologies, and Mobile Identifiers

Our website may use cookies and similar technologies for functionality, analytics, security, and measurement.

Our mobile application may use software development kits and technical identifiers for comparable purposes.

Members may have controls available through their browser, device, application settings, or applicable privacy-choice mechanisms.

Where required, we will request permission before engaging in tracking activities that require consent.

12. Data Security

We use technical and organizational safeguards intended to protect personal information.

These safeguards include authentication controls, access restrictions, encryption of menstrual-cycle records, and administrative security measures.

No internet-connected service can guarantee absolute security.

If a security incident affects personal information, we will respond in accordance with applicable law.

13. Age Restrictions and Children's Privacy

TruBlossm's Services are intended for individuals 18 years of age or older.

We do not knowingly solicit personal information from individuals under 18 through our member Services.

If we become aware that an account belongs to an individual under 18, we may restrict or terminate the account and take appropriate steps regarding associated personal information in accordance with applicable law.

We do not knowingly collect personal information from children under 13 in violation of applicable children's privacy laws.

If you believe a minor has provided personal information to TruBlossm, please contact support@trublossm.com.

14. International Processing

Our service providers may process or store information in the United States or other locations where they operate.

Where required, we will use appropriate safeguards for international transfers of personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, legal requirements, or information practices.

The “Last Updated” date will reflect the most recent revision.

We will provide additional notice or obtain consent where required by applicable law.

16. Contact Us

True Blossom, LLC
Operating as TruBlossm

Website: https://trublossm.com
Email: support@trublossm.com