Privacy policy

Last updated: 2026-08-30

1. Data controller

Flor Planner is an independent project run by a private individual, not by a company. That individual is the data controller and can be reached at contact@florplanner.app. For any question about your personal data, or to exercise any of the rights described in section 7, write to that address; we answer data protection requests within one month.

If you need the controller's full identifying details — for example to bring a complaint before a supervisory authority — we will provide them on request to that address.

2. What data we collect

The app collects the following data:

• Email address — required for registration and login
• Username and profile photo — optional, visible on your public profile
• Social login data (Google, Facebook) — when you sign in with a social account, we receive your email address and basic profile information (name and profile picture) solely for account creation and login. The exact data received depends on the provider and your privacy settings. We do not access friends lists, posts, or any other data from your social accounts.
• Balcony and flower data — configurations, assignments, and calendar entries created by the user
• Photos — balcony photos, flower cover photos, and community gallery photos uploaded by the user
• Social links — optional website, Instagram, and Facebook URLs added to the user profile
• Approximate location — city name and coordinates, collected only when the user explicitly taps a locate button, used for weather alerts and to determine the climate zone your planting calendars are based on
• Device time zone — read from the device to set planting and care calendars to your region
• Device push tokens — platform-specific notification tokens (Android or web push keys) stored when the user enables notifications
• Subscription data — purchase status, product identifier, billing dates, and entitlements processed through the platform stores (Google Play, Stripe)
• Reports — when a user reports a photo, a flower, or another user, we store a reference to the reported item and the reporter context for moderation

3. Purpose of processing

We process data for the following purposes:

• Providing the service — maintaining the account, storing balcony and flower data, displaying community photos
• Authentication — login via email or social account (Google, Facebook)
• Notifications — sending plant care reminders, weather alerts, and news notifications via push
• Weather alerts — querying weather forecasts based on the city coordinates you provide to warn about frost, heat, rain, wind, and storms
• Subscription management — processing purchases, managing entitlements, and syncing subscription status across devices
• Content moderation — reviewing reported content and accounts to maintain community standards
• Regional calendars — determining your climate zone so planting and care calendars match your region

Each purpose rests on one of the following legal bases under Article 6(1) of the GDPR:

• Performance of a contract (Art. 6(1)(b)) — providing the service, authentication, and subscription management. Without this data there is no account and the app cannot work.
• Consent (Art. 6(1)(a)) — approximate location, and push or email notifications. You give consent by granting the permission or switching the category on, and you can withdraw it at any time in the app. Withdrawal does not affect processing carried out before it.
• Legitimate interests (Art. 6(1)(f)) — content moderation, abuse prevention, and crash and error diagnostics, so that the service stays safe and usable.
• Legal obligation (Art. 6(1)(c)) — retaining subscription records for financial reporting.

4. Data sharing

We do not sell personal data. Data may be shared with the following categories of service providers, solely to operate the app, and only to the extent each service needs:

• Cloud hosting provider — servers, database, encrypted file storage, and content delivery
• Authentication provider — user account management, password handling, and social login federation
• Payment processor — subscription and in-app purchase management (receives your user identifier and purchase data)
• Push notification provider — delivery of notifications to your device
• App update provider — over-the-air application updates (may receive device metadata)
• Error monitoring provider — crash and error diagnostics (may receive device metadata and IP address; no account identifier is attached)
• Weather data provider — forecasts for the coordinates you provide
• Plant identification provider — only if you use photo-based plant identification, and only the photo you submit

5. Data storage and transfers

Your data is stored on encrypted servers in the European Union (France). Encrypted backups are retained for 7 days. Photos are stored in encrypted storage and served globally via a content delivery network.

Certain infrastructure components (global routing, identity management) and some service providers (payment processing, app updates) operate in the United States. Data transferred outside the EU is limited to what is strictly necessary for the function of each service.

6. Data retention

We retain data as long as the user's account is active. After account deletion, all personal data and content are permanently removed within 30 days. Push notification tokens are deleted immediately upon account deletion. Subscription records are anonymised after account deletion but may be retained for financial reporting obligations.

7. User rights

Users have the right to:

• Access their data
• Correct their data
• Delete their account and all associated data
• Data portability
• Withdraw consent for optional data processing (location, notifications)
• Object to, or ask us to restrict, processing based on legitimate interests
• Lodge a complaint with a data protection supervisory authority

To exercise these rights, contact us at contact@florplanner.app.

If you believe we have handled your data unlawfully, you may complain to the data protection supervisory authority in your country of residence. The European Data Protection Board publishes a list of national authorities.

8. Data deletion

Users can request data deletion on the data deletion page or by contacting us directly.

9. Cookies and consent

Our website uses only essential cookies required for it to function. We do not run analytics or third-party trackers without your consent. A consent banner asks you to choose between Essential only and Accept all; we remember your choice in your browser's local storage. You can change your choice at any time by clearing your browser storage for this site.

10. Age requirement

Flor Planner is intended for adults and is not directed at children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us at contact@florplanner.app and we will delete it.