Privacy Policy

Bloma LLC (“Bloma”, “we”, “our”) operates a software platform that provides website hosting, AI-powered front-desk services (“Jasmine”), and patient communication tools (including SMS and voice) for independent acupuncture and wellness clinics (“Clinics”). This Privacy Policy describes what information we collect, how we use it, and the choices you have.

When you interact with a Clinic that uses Bloma — for example, by submitting a booking form, chatting with the clinic's AI front desk, calling the clinic, or receiving SMS — Bloma processes that information on the Clinic's behalf as a service provider. The Clinic remains the entity responsible for your patient relationship and any clinical record.

1. Information we collect

• Contact information you provide:name, phone number, email address, and any message or appointment-request content you submit through a Clinic's website form, web chat, or SMS reply.
• Communication content:the contents of SMS messages, voice calls, and chat conversations between you and the Clinic (or Jasmine acting on the Clinic's behalf).
• Booking and appointment data: appointment date/time, service type, practitioner, and any notes you choose to include.
• Technical data: IP address, browser type, device type, pages visited, referral source, and timestamps. Used for analytics, security, and abuse prevention.
• Cookies: Bloma uses essential cookies for session management and analytics cookies to understand traffic. You can disable non-essential cookies in your browser.

2. How we use information

• To deliver appointment confirmations, reminders, and replies to your inquiries via SMS, email, voice, or web chat.
• To enable the Clinic to respond to your booking requests and questions.
• To operate, maintain, and improve the Bloma platform and the Clinic's website.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes. Phone numbers collected for SMS opt-in are used only for the messaging program you opted into and are not shared with third parties or affiliates for marketing.

3. SMS and phone communication

SMS messaging is optional. Providing your phone number does not opt you in. You receive SMS from a Clinic only when you choose to opt in — by checking the optional, unchecked-by-default SMS consent checkbox on the Clinic's form or web chat, or by texting the Clinic's published number first. SMS consent is never required to submit a form, book an appointment, or receive service. Once opted in, you may receive SMS relating to appointments, replies, and service updates. Message frequency varies. Message and data rates may apply.

Reply STOP at any time to unsubscribe from SMS. Reply HELP for assistance, or contact hello@bloma.ai.

Bloma uses Twilio Inc. as its SMS and voice carrier. SMS opt-in data and message content are not shared with third parties for marketing purposes and are not sold.

4. Service providers

We share information with vendors who process data on our behalf under written agreements that require confidentiality and restrict use to providing services to Bloma:

• Twilio — SMS and voice carrier
• Vapi — voice AI infrastructure
• Anthropic — AI language model used by Jasmine to generate responses
• Supabase — database and authentication
• Vercel — application hosting
• Stripe — payment processing for Clinic subscriptions (no patient payment data)
• Resend — transactional email

5. Health information and HIPAA

For Clinics that are HIPAA covered entities and have signed a Business Associate Agreement with Bloma, Bloma operates as a Business Associate. The Clinic remains responsible for issuing its own Notice of Privacy Practices. Patient health information collected through Bloma is handled in accordance with the Business Associate Agreement and applicable law.

6. Data retention

We retain communication records (SMS, voice, chat) and booking data for as long as the Clinic maintains an active subscription, plus a reasonable period afterward for legal, audit, and dispute resolution purposes. You may request deletion at any time by contacting the Clinic or hello@bloma.ai.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion
• Opt out of SMS at any time (reply STOP)
• Withdraw consent
• Lodge a complaint with a data protection authority

To exercise these rights, email hello@bloma.ai.

8. Children

Bloma is not directed at children under 13. We do not knowingly collect personal information from children under 13. If a parent or guardian books on behalf of a minor patient, the booking is treated as the parent or guardian's booking.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated through the Bloma website or by email to active Clinics.

10. Contact

Bloma LLC
Email: hello@bloma.ai
Website: https://www.bloma.ai