1. Who is responsible
BulanBloom Pte. Ltd. operates BulanBloom in Singapore and Malaysia. We are responsible for personal data processed through the platform. Contact our Data Protection contact at privacy@bulanbloom.com.
2. Data we collect
- Account and contact details, language and communication records.
- Family care needs, dates, household context and preferences.
- Nanny identity, experience, availability, rates, profile photo and reference details.
- Introductions, agreements, confirmations, reviews, complaints and audit records.
- Booking-payment status and Stripe identifiers. BulanBloom does not receive full card numbers.
- Security information such as IP-derived hashes, browser data and request logs.
Please do not submit medical records, identity documents or other sensitive data unless a specific secure process asks for them.
3. Why we use it
We process data to operate accounts, review nanny applications, publish approved profiles, facilitate introductions and direct agreements, collect platform booking fees, prevent fraud, support users, resolve complaints, comply with law and improve service reliability. We use consent where required and otherwise rely on performing requested services, legitimate operational needs or legal obligations.
4. Sharing and international transfers
We share only what is necessary with the family or nanny involved in an introduction and with service providers supporting hosting, database and storage, email, payments and optional AI-assisted summaries. Current providers may include Vercel, Supabase, Resend, Stripe and OpenRouter. They may process data outside your country under contractual and security safeguards. We do not sell personal data.
5. AI-assisted features
When enabled, AI may help summarise reviews or care records. We minimise the submitted data, label generated content and keep human review for material decisions. AI does not decide whether a nanny is approved or whether parties must contract.
6. Retention
- Rejected or withdrawn nanny applications and reference data: normally 12 months.
- Inactive unmatched family requests: normally 24 months.
- Agreements, payment, dispute and audit records: normally 7 years where needed for legal, tax or claims purposes.
- Security logs: normally up to 24 months.
We may retain data longer for an active dispute, legal hold or statutory duty, and delete or anonymise it when no longer needed.
7. Your choices and rights
You may ask for access, correction, withdrawal of consent or deletion, subject to legal exceptions. You may also raise a complaint. See our data rights request process. Withdrawing consent does not affect earlier lawful processing and may prevent us from providing a service.
8. Protection and incidents
We use access controls, private storage, encryption in transit, audit records and restricted administrative access. No system is risk-free. We assess suspected incidents, contain them, preserve evidence and notify affected people and regulators when required.
9. Updates
Material changes receive a new version and effective date. Where the change affects an ongoing service, we may ask you to accept the updated notice.