🔐 Security & Privacy Policy

ISO 27001-Aligned | Version 1.0 | June 2026
The Wandering Lyrebird Pty Ltd (ACN 698 083 331)

My Blossom is designed with your family's privacy at its core. This policy explains what we collect, how we protect it, and your rights as a user.

1🛡️

Our Commitment

We are committed to protecting the privacy and security of all user data.
This policy is aligned with ISO/IEC 27001:2022 and the Australian Privacy Act 1988.
My Blossom is built with a privacy-first approach — your data belongs to you.

2📋

Data We Collect

Name and email address
Family member first names and roles
Scheduling and activity data
City / region selection
Usage and session data

3🚫

Data We Do NOT Collect

Government ID numbers
Payment card details — handled exclusively by PCI-DSS compliant payment processors
Clinical medical records or Protected Health Information (HIPAA does not apply to this platform)
Biometric data
Children's personal data directly

4🔒

How We Protect Your Data

TLS 1.2+ encryption in transit
Encrypted data at rest
Row Level Security — each user sees only their own data
No hardcoded credentials in any codebase
Third-party integrations use minimal-permission API keys

5🗓️

Data Retention

Active user data retained for account lifetime plus 12 months
System logs purged after 90 days
Financial records retained for 7 years (ATO requirement)
All data permanently deleted upon account closure request

6✅

Your Rights

Right of access — request a copy of your data
Right of rectification — correct inaccurate data
Right of erasure — request deletion of your data
Right to data portability
Right to object to processing
Right to withdraw consent at any time
To exercise any right, contact: hellomyblossomapp@gmail.com

7🚨

Incident Response

We follow the Australian Notifiable Data Breaches (NDB) scheme.
In the event of a confirmed data breach, affected users will be notified within 72 hours.
We maintain an internal incident response plan reviewed annually.

8📬

Contact

Email: hellomyblossomapp@gmail.com
Website: hellomyblossom.com
The Wandering Lyrebird Pty Ltd (ACN 698 083 331)

🌸

This policy is reviewed annually or following any significant change to our systems or data practices.
Last reviewed: June 2026 | Next review: June 2027

Questions? Email us at hellomyblossomapp@gmail.com

← Back to My Blossom