Privacy Policy

• We don't sell your data. Ever.
• You're signed in anonymously by default. No email required to use the app.
• Your plant photos and identifications are stored on your device and synced to our backend so you don't lose them.
• Location is only used to stamp each identification with where you found it. It's not shared.
• We use Google Gemini to identify plants. Your photo is sent to Google for that purpose and is not retained by us after the call.
• Subscriptions are handled by Apple. We never see your payment info.

Anonymous account. When you first open FloraFiles, we create an anonymous account so your data can sync. This account is identified by a random UUID — no email, name, or other identifying info is required.

Plant identifications. When you scan a plant, we store: the photo you took, the date and time, the identified species, the rarity tier, and (if you granted location permission) the latitude and longitude where you were standing. These are stored locally on your device and mirrored to our backend so you don't lose them across devices.

App usage and analytics. We may collect aggregate analytics (e.g. crash reports, feature usage counts) to improve the app. These are device-level, not personally identifying, and we use Apple's built-in analytics framework which respects your iOS-level privacy settings.

Attribution. During onboarding we ask how you heard about us (Instagram, App Store search, etc.) so we know which channels are working. This is one piece of data, optional, not personally identifying.

• Your contacts
• Your calendar
• Your microphone audio
• Your background location (we only request foreground location when you're actively scanning)
• Health data
• Browsing history outside the app

To make the app work. Specifically:

• Photos + Gemini identification. When you scan a plant, your photo is sent (encrypted in transit) to Google's Gemini API for species identification. Google does not retain this data for training under their API terms.
• Cloud sync. Your identification history is stored in our backend (Supabase) so you can recover it if you reinstall the app or switch devices.
• Rate limiting. We log identification requests per user to prevent abuse. We do not log or store the photo content server-side.
• Streak reminders. If you grant notification permission, we may schedule a local reminder if you have an active streak that's about to break. Reminders are scheduled and fired entirely on your device.

We share data only with these services, only for the purpose of running FloraFiles:

• Google (Gemini API) — receives your photo to perform species identification
• Supabase — stores your anonymous account and identification history
• RevenueCat — manages your subscription status. We share only an anonymized user ID.
• Apple — processes payments. We never see your payment details.

We do not share data with advertisers, data brokers, or any third party not listed above.

You can request a copy of your data, ask us to delete it, or close your account at any time. Email support@florafilesapp.com and we'll respond within a few business days.

Because anonymous accounts are tied to your device, deleting the app from your device and waiting 30 days will also effectively delete your account, though we recommend emailing us first for an immediate deletion.

FloraFiles is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, please contact us.

If we change this policy materially, we'll update the effective date and, where appropriate, notify you in-app. Continued use of the app after changes constitutes acceptance.

Questions? support@florafilesapp.com