OhaBloom Privacy Notice
This is a translation. If it differs from the French notice, the French notice prevails.
1. Who is responsible for your information
OhaBloom is operated by Souvenirs OhaBloom, in Quebec (Canada).
Person in charge of the protection of personal information: Souvenirs OhaBloom, contact@ohabloom.com. Postal address: 4035 rue Saint-Ambroise, Suite 216, Montréal, Québec H4C 2E1. This person receives your privacy questions, requests and complaints.
2. What we collect and why
OhaBloom helps adults keep private family memories and prepare a hardcover book. To do so, we collect:
- your account information (name, email, authentication, family space, access);
- the content you add: texts, photos, audio or video recordings, dates, people and relationships, including information about your children (this content can be sensitive), as well as the approximate location (to about 100 metres) read from your photos and videos, kept private to group your memories by place, which you can turn off in your settings;
- payment, billing, printing and delivery information (full card data is processed by our payment provider and is not kept by OhaBloom);
- your exchanges with us (emails, text messages, support) and technical information (IP address, device, error logs).
We use it to provide, secure and improve the service; create and personalize your space, your suggestions, your questions and your books, including with automated tools; process payments; print and deliver; write to you about your account and your orders; answer your requests; measure the service; and meet our legal obligations. Marketing by email or text message, advertising and improving our tools with your content each require a separate choice, which you can withdraw at any time.
We do not sell or rent your family content and we do not use it for advertising.
3. Artificial intelligence
Depending on the feature, OhaBloom may use artificial intelligence services from outside providers, for example to transcribe a voice into text, understand photos or videos so they can be found and titled, read a memory to draw facts from it, suggest questions or shorten a memory that is too long for its page. A feature may then send a copy of your text, your voice or your photos to an artificial intelligence provider that may be located outside Quebec, for example in the United States. We send only what the feature needs, and we choose terms under which the provider does not train its models with your information. It generally keeps it only as long as the feature needs. You can withdraw your consent at any time (section 9).
When a memory is too long for its page, the AI shortens it automatically with your own words, once you have left the page. Only the text of that memory is sent. The AI adds no fact, name, date or number. Your full text is always kept: « See the original » shows it and brings it back in one tap, and the scan code on that page reads the whole memory. Before printing, the shortened pages are listed so you can reread them. You can turn this feature off at any time in Personalization (« Shorten automatically »).
An AI proposal can be wrong. Except for this shortening, which you can undo or turn off, nothing goes into your book without your confirmation, and the AI does not decide for you. You can ask us how a proposal was produced.
4. Children
Children do not have an account. A parent or the holder of parental authority entrusts us with the information about them and gives the related consents. A child gets no access simply because they appear in OhaBloom.
5. Who has access and with whom we share it
Our internal access depends on role and need, and access to content is limited to what is needed. The other adults of your family space have only the powers you give them. A montage you choose to share is reachable through a secret link that you can stop at any time.
To provide the service, we share the minimum needed with providers acting for us, depending on the features used: hosting and database, authentication, payment and taxes, email and text messages, printing and delivery, backup copy, and artificial intelligence. We may also share information when the law requires it, to prevent serious harm, or in a restructuring of the business under confidentiality obligations.
6. Outside Quebec
Some of these providers, or their subcontractors, process information or make it accessible outside Quebec, notably in the United States, where other laws may apply. We carry out the assessments and agreements the law requires before such transfers.
7. Retention and security
We keep your information as long as needed for the purposes described here and for our legal obligations, then we delete it. You can export your memories at any time or ask for their deletion.
The messages you send us (text message, voicemail or email) are read by our team to answer you and are kept for that purpose. You can ask for their deletion at any time.
If you do not renew your subscription, the memories placed in your book remain viewable as long as OhaBloom exists, and the other memories are deleted 12 months after read-only access begins, after an email reminder 90 days before. You can ask for everything to be erased, including the memories in your book, at any time.
If you do not pay, we keep only what is needed. For an unfinished purchase or an unpaid gift, the technical record of the payment started, as well as the first name, email and message of the gift recipient, are erased no later than 7 days after. If you already created your space without paying, the memories you added are deleted no later than one year after it was created, after an email reminder 90 days before. You can ask for their erasure at any time.
If you pay before creating your account, we keep your payment email, the payment status, your child's first name and all the memories already added (texts, transcriptions, voices, photos and videos). When your account is created, everything is attached to your account and stays there. If the account is never created, this data is erased no later than one year after the payment. Only the accounting record of the payment remains (amount, taxes, date, payment reference, without email), kept six years. If your account is not created 30 days after the payment, automatic renewal is stopped; the paid year stays yours.
Purchase records (invoice, payment, taxes) are kept as long as the law requires, without your family's content. Backup copies are erased according to their cycle. We apply security measures proportionate to the sensitivity of the information, but no system is absolutely secure. In case of an incident presenting a risk of serious harm, we notify the persons and authorities concerned as the law requires.
8. Cookies and measurement
Our site uses cookies needed for it to work and for security (sign-in, preferences). We place a cookie or a tool that measures advertising or tracks your browsing only with your agreement, which you can refuse or withdraw at any time, and it is off by default.
9. Your rights
You can ask for access to your information, its correction, its deletion where the law allows, a portable copy of your data, and withdraw a consent. Write to the person in charge (section 1); we verify your identity before answering. You can also contact the Commission d'accès à l'information du Québec.
10. Facebook, Messenger and Instagram
When you write to our Facebook or Instagram pages, through Messenger or in a comment under our posts and our ads, we receive, through our Meta app:
- your messages and your comments;
- your public name and the Messenger identifier specific to our page (PSID);
- the statistics and content of our ads.
We use them only to answer you, moderate unwanted comments and measure the performance of our ads. A reply may be prepared by an artificial intelligence assistant; a person reads and approves it before it is sent. We send you no promotional or unsolicited message, and we do not sell this data.
Our processors for this data: Supabase (database hosted in Canada), Netlify and Vercel (hosting), GitHub (automated processing), Anthropic (artificial intelligence analysis of our ads) and xAI (Grok, the artificial intelligence assistant that prepares replies). Some are located outside Quebec, notably in the United States (section 6).
We keep this data for 24 months at most, then we delete it. To have it deleted sooner, see section 11.
11. Deleting your data
To have your data deleted, write to contact@ohabloom.com with the email of your account or, if you wrote to us on a social network, the name shown there. After verifying your identity, we delete your data no later than 30 days after your request and we confirm it to you. You can also delete your account or your family space yourself in the app. We keep only what the law requires us to keep, such as purchase records, and backup copies are erased according to their cycle.
12. Changes
We show the version and effective date of this notice and inform you appropriately of an important change, before it applies where the law requires it.