01 Who we are
This website is operated by Bloomin Learning Private Limited ("BLOOM", "we", "us", "our"), the entity behind the BLOOM UPSC offerings.
02 What this policy covers
It covers personal data you give us through this website only — principally the "register interest" form. Nothing is purchasable on this site yet, so this policy does not cover payments, billing, or any in-product data from our learning tools; those will get their own notices when they go live.
03 What we collect
When you submit the interest form, we collect:
| Data | Required? | Why we need it |
|---|---|---|
| Email address | Required | The single channel we use to tell you when an offering opens. |
| Phone number | Optional | An alternate way to reach you about an offering you asked about — only if you choose to give it. |
| Offerings selected | Required | So we message you only about what you actually asked about (Visual Notes, DOJO, PRISM, the 2027 Program). |
| Technical metadata | Automatic | Your browser's user-agent string, the page URL, and the time of submission — for security, to debug failed submissions, and to prevent abuse. |
We do not ask for, or want, any sensitive personal data on this site. Please don't include any in the form fields.
04 Why we use it (purpose)
- To notify you when the specific offering you registered for opens, and nothing beyond that.
- To keep the form working — basic security, abuse-prevention, and debugging.
We do not sell or rent your data. We do not send daily nudges or unrelated marketing. We do not use your data to build advertising profiles.
05 Our legal basis — your consent
We process this data on the basis of the consent you give when you submit the form. That consent is specific (the offerings you picked) and purpose-limited (to notify you). You can withdraw your consent at any time — see "Your rights" below — and withdrawing is as easy as giving it. When you submit the form, we ask only for what the notification actually needs, in plain language.
06 Where your data is stored, and who processes it
We keep data only with reputable infrastructure providers ("data processors") who act on our instructions:
| Processor | Role | Note |
|---|---|---|
| Supabase | Database where your submission is stored. | Access is locked down so the public website can only add a signup — it cannot read the list back. Reads happen only through our protected administrative access. |
| Vercel | Hosts and serves this website. | Processes standard request data (e.g. IP address) to deliver the page, as any web host does. |
| PostHog | Privacy-focused product analytics — measures how visitors use the page. | Configured without advertising cookies. Records pages viewed, sections read, and sign-up actions to help us improve the site. Not used for advertising and not sold. |
| Google Fonts | Serves the fonts used on this page. | Loading fonts may expose your IP address to Google, as with most websites that use web fonts. |
Some of these providers may store or process data on servers outside India. We use only established providers that offer appropriate safeguards for the data they handle on our behalf, and we share the minimum necessary for them to perform their service.
07 How long we keep it
We keep your interest submission only as long as needed to send you the update you asked for, and for a reasonable period after launch in case you re-engage. If an offering you registered for is cancelled, or you ask us to delete your data, we remove it. In practice we keep an interest submission for up to 24 months from the date you give it, unless you ask us to delete it sooner.
08 Your rights
Subject to applicable law, you can ask us to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Erase your data and withdraw consent, after which we stop contacting you.
- Nominate another person to exercise these rights on your behalf in the event of death or incapacity (as provided under DPDP).
To exercise any of these, just email us (see "Contact us about your data" below). We'll respond within a reasonable time, and at no cost for a normal request.
09 Contact us about your data
For any question, correction, deletion request, or concern about your personal data, email us — we read these ourselves and will get back to you.
If you ever feel a data concern hasn't been resolved, you may also raise it with the Data Protection Board of India under the DPDP Act.
10 How we protect your data
Submissions travel over an encrypted (HTTPS) connection. In our database, the public website is allowed to insert a signup but cannot read the list — only our protected administrative access can. We limit who can access the data and apply reasonable safeguards. No method of transmission or storage is ever 100% secure, but we work to protect your data and will notify affected users and the authorities of a reportable breach as required by law.
12 Children
This website and its offerings are intended for adult UPSC aspirants and are not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, email us and we will delete it.
13 Changes to this policy
We may update this policy as our offerings evolve or to meet legal requirements. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you. The current version always lives at this page.