Privacy Policy

Blueprint Gift is operated by Care Bloom LLC ("we", "us"). Blueprint Gift writes monthly wellness plans and emails them as documents. There is no app to install and no chat: you answer drop-down menus and short fields, and a finished plan arrives by email. This policy explains what we collect, why, who it reaches, how long we keep it and what you can ask of us.

About you. Your first name, email address, city and state, preferred language, age range and gender. Your health interests, each with a status, and your hobbies, each with a priority, all chosen from fixed lists. Optionally: your pets, one upcoming trip, and how you heard about us (from a fixed list).

About people you care for. You may add up to three people ("proxies") who receive their own plan. For each: a first name, city, language, age range and their own interests from the same lists. Optionally: their phone, email and address, key contacts, personal care notes, and a care calendar of dated items with short labels and private notes.

About your household (optional). For your children: first name, age range, and care details such as allergies, medications, conditions, doctors, school, pickup permissions and routines. For your pets: vet, feeding, exercise and medication details.

Some of this can be health information. Health interests are lifestyle topics, not diagnoses. But care details, care notes and calendar items are typed by you and may mention a medication, an allergy or an appointment. They are optional, and they are used only for the purposes in Section 3.

Automatically. When you use our pages, our servers record technical information such as your IP address and browser type, for security and to keep the service running. Our marketing websites use cookies to measure traffic (see Section 11).

What we do not collect. We do not collect payment card details (Stripe handles payment). We do not collect precise location, conversations (there is no chat), or medical records, and we do not ask for diagnoses. We do not use advertising trackers on member pages.

• To write your monthly plan, your proxies' plans, and any Express plan you request.
• To email you your plan and two short reminders each month: your Action Plan on a Friday, and, if you care for someone, their reminders and coming dates on a Sunday.
• To email a care sheet (a Proxy, Pet or Child Care Appendix) to you, and only you, when you ask for one. You can ask up to five times a day for each.
• To invite the people you add to a Letters Group to write a short letter to someone you care for (Section 4).
• To run your account and subscription, answer you, and keep the service secure.
• To count, in total only, how people hear about us.

We keep a short summary of your recent plans so next month's plan does not repeat this month's. The plan document itself is not kept after it is emailed. We do not sell your information, and we do not use it to train AI models.

You may add up to five people per proxy who can write to that person: their first name, email address, relationship and language. You must have their permission, and they must be adults. A child can write through a parent's invitation.

Once a month we email each of them an invitation that shows your first name, with replies going to you. If they write, we keep their letter (up to 1,200 characters) and one optional photo until the plan that carries it is delivered, then delete them. Photos are rebuilt on arrival with embedded data removed, including location. Letters are never used to write plans. If a letter is in a different language from the reader's, it is translated. Every invitation has a link that stops all future invitations to that address, from every member; we keep only that email address, permanently, so it is never contacted again.

We share information only with the providers below, and only what each needs. Each is bound by its own terms and confidentiality obligations.

• xAI, which writes the plans: the profile details needed for a plan, letter text when it needs translating, and calendar labels when a proxy reads a different language. Never your email address.
• SendGrid, which sends our emails: email addresses, first names and the plan or care sheet attached.
• Stripe, which processes payments: your billing details, held by Stripe.
• Backblaze, which stores our encrypted backups, which it cannot read.
• Our hosting provider, which runs our servers.
• A mapping service, which helps us find real places near you: a town and a topic, never your name or email.

We may also disclose information if the law requires it, or to a buyer if the business is sold, under this policy's terms.

If an employer or organization (a "Sponsor") provides your access, you hold your own account and receive your own plans. Your Sponsor never receives your profile, interests, people you care for, letters or plan content. It sees enrolment and delivery counts. Its own message, such as reminders of its benefits, may appear at the end of your plan. We encourage you to use a personal email address, so the account stays yours if you change jobs. When a Sponsor first supplies identifiers to invite you, we process them on the Sponsor's behalf under our agreement with it.

• Subscribers: until 575 days after your last payment or last profile change, whichever is later (your year, a 30-day grace period and 180 days more). Then your account is erased automatically.
• Free trials that do not subscribe, and signups that are never finished: 30 days.
• Sponsored members: for the length of the sponsorship and a short wind-down, then erased.
• Letters and photos: deleted when the plan that carries them is delivered.
• Care calendar items: deleted a week after their date.
• Plan documents: removed from our servers within hours of being emailed.
• Backups: erased data is removed from live systems immediately and from our encrypted backups within 60 days.

We keep invoice records as required for accounting, with your personal details removed after erasure.

We use reasonable administrative, technical and physical safeguards. Sign-in links are signed, expire, and can be used only a limited number of times. Backups are encrypted. Access to the system is restricted to the operator. No system is perfectly secure, and we will tell affected members if a breach requires it.

Blueprint Gift is for adults. Members must be 18 or older, and we do not knowingly collect information directly from children under 13. Members may enter details about their own children so that a babysitter or caregiver has what they need; those details are held for that purpose only and are erased with the member's account. If you believe a child has given us information directly, write to us and we will delete it.

• Ask what we hold about you, correct it, or ask us to erase it, by replying to any of our emails or writing to [email protected]. You can change most details yourself on your profile page.
• Remove a proxy, a pet, a child or a Letters Group contact at any time; their details go with them.
• Letters Group contacts can stop invitations with the link in any invitation.
• If you live in California or another state with consumer privacy laws, you have the rights those laws give you, including to know, correct and delete. We do not sell or share personal information for advertising.

If you add someone as a proxy or Letters Group contact, you are responsible for having their permission. They may also write to us directly.

The Blueprint Gift app uses cookies only to keep you signed in and to protect forms. Our marketing websites use cookies to measure traffic, which you can accept or decline in the banner.

We will post any change here with a new date. If a change materially affects how we use information we already hold, we will email members before it takes effect.

Care Bloom LLC · [email protected]