Children’s Data Leaves No Room for Improvisation: How Blooming Box Went Live in 3 Months
Every family with young children knows the scene. The pediatrician asks when the last vaccine was, whether the child has any allergies, what was prescribed at the previous appointment. The answer is on a vaccination card left at home, on a piece of paper tucked away in some drawer, in a photo lost among thousands of others on a phone.
Memories face the same problem. The ultrasound, the first steps, the first day of school: all scattered across devices, apps and cloud services that one day stop existing.
Blooming Box was created to solve both in one place. And the founder knew a product like this carried an extra requirement: families will only trust their children’s story to someone who takes good care of that data.
The challenge: speed without shortcuts
The product was defined. What it lacked was someone to lead the technology. And in this case, the pressure came from both sides: it had to reach the market fast, but without the shortcuts that tend to appear when deadlines get tight. Children’s health data, family photos and recurring payments don’t mix with improvised security.
Pura took on the role of CTO for the project, working alongside the founder, who acted as Product Owner. He kept the product and the business. Pura took the technical definition, prototyping, stack, infrastructure, integrations, hosting and support.
A whole journey, from pregnancy onward
Blooming Box follows the family over time. It starts when the pregnancy is discovered, goes through birth and continues through childhood:
- Health: appointments, vaccines, allergies and reminders, always at hand.
- Memories: a photo and video album organized by stage, from the first steps to the first day of school.
- Roots: a family tree and records of relatives.
- Letters to the future: messages and videos to be opened years later.
The platform runs in the browser and can be installed on a phone as an app (PWA). It offers subscription plans, a 7-day free trial, gift vouchers and a partner program.
The pediatrician comes in through the right door
One of the core features is pediatrician access. Instead of the family carrying papers to the appointment, the doctor checks the health history directly on the platform.
How this was built is what makes the difference. The pediatrician only gets in by invitation from the family itself, through a unique link that expires in 7 days. And every time they access a child’s health data, the access is logged. The family decides who sees it, and the platform keeps track of who did.
This access is also a business opportunity. Pediatricians can follow up to 5 children for free, and a professional plan for those who follow more patients is on the way.
Privacy from day one
Security wasn’t a layer added at the end. It was part of the decisions from the start:
- Audit log for sensitive actions: access to health data, account deletions, password changes and billing events.
- Permanent deletion: when an account is closed, the data is erased for good after 45 days, the window for the family to change its mind.
- Two-factor authentication for the admin team, rate limiting and protection against common attacks.
- Controlled process: all code versioned on GitLab, deployments only through the automated pipeline and restricted access to production servers.
Pura used artificial intelligence to speed up development, with these rules in force from the first day to the last. The speed came from the method, not from skipping steps.
Accumulated experience as a legitimate shortcut
Blooming Box runs on the same technology base and infrastructure that Pura already operates in production: Next.js on the front end, NestJS with PostgreSQL on the back end, Docker, a GitLab pipeline and monitoring with Sentry. Recurring payments go through Pagar.me, emails are sent through SendGrid and WhatsApp notifications use Meta’s official API, with Pura’s own app and n8n automations.
As a Meta Tech Provider, Pura also set up the brand’s digital ecosystem for the launch: Pixel and ad account, Facebook and Instagram profiles, WhatsApp Business, Google Analytics and Search Console.
Starting from a production-tested base, instead of from scratch, is what makes it possible to move fast without improvising. The same model brought PetMesh to life, another of Pura’s CTO as a Service cases.
The result
It took 3 months from infrastructure setup to go-live. Blooming Box launched at the end of September 2026 with the full journey, pediatrician access, subscriptions, PWA, and email and WhatsApp notifications.
Pura remains responsible for hosting, maintaining and evolving the platform. The next step, already in development, is integrating Pura’s AI Agent to assist families over WhatsApp.
Trust is built in the code
In products that handle sensitive data, user trust doesn’t come only from design or communication. It starts with the technical decisions nobody sees: who accesses what, what gets logged, what happens to the data when someone leaves.
If your company is launching a digital product and needs someone to lead these decisions from the start, discover Pura’s CTO as a Service.
