Privacy policy

1. Who is responsible for the data

The controller of the data processed in the Flowr mobile application and in the flowrapp.io service is Flowr ("Flowr", "we"). For privacy issues, please contact us at contact@flowrapp.io.

SCOPE OF THE POLICY

The policy applies to the use of the Flowr app, our website, contact with technical support and the functions of recognizing plants, diagnosing their condition and planning care.

3. What data we can process

• account data, such as email address, user ID and credentials supported by the login provider;
• photos of plants sent for recognition or diagnosis and information added to the plant profile;
• care schedules, notification settings and preferences;
• technical and diagnostic data, e.g. device model, system and application version, IP address, installation identifiers, error logs and security incidents;
• the purchase or subscription status provided by the Apple App Store or Google Play; we do not receive full payment card details;
• email address and message content when you contact support.

Objectives and base for data processing.

We process data to provide requested features, recognize plants and analyze uploaded photos, synchronize care, handle account and purchases, respond to requests, ensure safety and improve product stability. The basis is the performance of the contract, your consent — when required — our legitimate interest in ensuring safety and quality or a legal obligation. Consent may be withdrawn in anytime.

5. AI and photos

A photo may be securely uploaded to cloud services and an AI technology provider for the sole purpose of providing a diagnosis or diagnosis result. We don't sell photos or use them for behavioral advertising. If in the future we would like to use user content to train our own models in a way that goes beyond the implementation of the service, we will ask for separate, voluntary consent in advance.

DATA RECIPIENTS

We only use providers needed for the operation of the service: hosting and cloud infrastructure, authentication, AI processing, error diagnosis, notification delivery and payment support by Apple and Google. Suppliers operate on a contractual basis and may only process data in accordance with our instructions or their own legal obligations. We may also disclose data when required by law or it isnecessary to protect users and the service.

7. International transfers

Some suppliers may process data outside the European Economic Area. In such cases, we use the mechanisms required by law, in particular adequacy decisions or standard contractual clauses.

Storage period.

We keep your account details and plant profiles for as long as you use your account. After its deletion, we delete or anonymize the data, unless the law requires its longer retention. As a rule, we store diagnostic data for no longer than 12 months, notifications for assistance — up to 24 months, and transaction documentation for the period required by tax and accounting regulations.

YOUR RIGHTS

Depending on your place of residence, you can request access, rectification, erasure, restriction of processing, data portability, withdraw consent or object. You can also lodge a complaint with the competent data protection authority. In Poland, it is the President of the Office for Personal Data Protection. To exercise your rights, please write to contact@flowrapp.io.

10. Deletion of account and data

You can start deleting your account in the app settings or through Remove Account. Deleting an app from your phone does not automatically delete your account. The purchased subscription must be cancelled separately in the Apple App Store or Google Play settings.

11. Website and Cookies

The public Flowr website does not currently use advertising cookies or its own tracking tools. The hosting provider may process basic technical logs necessary for the security and delivery of the site. The contact form opens your mail application and does not save the entered message itself.

12. Children and safety

Flowr is not directed to children under 13 years of age. We do not knowingly collect their data without the consent required by law. We use appropriate technical and organizational measures, but no transmission or storage method guarantees complete security.

Changes to this policy

We may update this policy as we develop the service or change the law. We will post a new version on this page and change the effective date; we will also notify you of material changes in the app if required.