Consumer Health Data Privacy Policy

1. Categories of consumer health data we collect, the purposes, and how we use it

We collect the following, directly from you, to provide the features you request:

We use consumer health data only to provide the features you request. We do not use it for advertising or to train artificial-intelligence models.

2. Sources of consumer health data

We collect consumer health data from one source: directly from you, through the app. We do not obtain it from data brokers, health care providers, connected devices, or other third parties.

3. Consumer health data we share, and with whom

We do not share your consumer health data with third parties or affiliates. We use service providers (processors) that handle it only on our behalf, only to operate Flora, under contracts that prohibit them from using it for their own purposes:

• Cloud hosting and database (Supabase) — to store your data securely.
• AI model provider(OpenAI) — to generate the assistant’s responses; it processes your content only to return a response and does not use it to train its models.

We have no affiliates with whom we share consumer health data, and we do not disclose it to advertisers or data brokers.

Third-party tracking: We do not permit third parties to collect consumer health data through Flora over time or across different websites or online services.

4. Consent, and our commitments on sharing and selling

• We collect and use your consumer health data to provide the features you request; this is necessary to deliver the service you asked for. You choose what to enter and can delete it at any time.
• If we ever want to collect, use, or share your consumer health data for a purpose beyond providing a feature you requested, we will first obtain your clear, opt-in consent, presented separately and describing the specific data, purpose, recipients, and how to withdraw. Any consent to share will be separate and distinct from any consent to collect.
• We do not sell your consumer health data and will not do so.

5. Your rights

You have the right to:

• Confirm and access the consumer health data we have about you, including a list of any third parties and affiliates with whom we have shared or sold it (for us: none — we use only the service providers listed above).
• Withdraw consent to our collection or sharing of your consumer health data.
• Delete your consumer health data. We honor deletion requests without exception for consumer health data, and we delete the data from backups and archives and direct our service providers to delete it.

To exercise these rights, email support@joinflora.appor use the controls in the app’s Settings. We may ask you to verify your identity, and may ask you to sign in to your existing account to do so, but we will not require you to create a new account. Washington and Nevada law do not permit an authorized agent to make these requests on your behalf, so please submit them yourself.

We will respond within 45 days. If we need more time for a complex or high-volume request, we may extend by up to another 45 days and will notify you before the first 45 days end. If we deny your request, you may appeal by replying to our response; we will inform you of our decision in writing within 45 days. If your appeal is denied, you may submit a complaint to the Washington State Attorney General (www.atg.wa.gov/file-complaint) or, for Nevada residents, the Nevada Attorney General (ag.nv.gov).

6. Withdrawing consent

Where we rely on your consent, you may withdraw it at any time in Settings or by emailing support@joinflora.app. Withdrawal stops the affected processing going forward and may limit related features; to also remove data already collected, submit a deletion request.

7. Changes to this policy

If we make a material change to this policy, we will update the effective date above and notify affected consumers as required.

Contact

DoDo LLC
Email: support@joinflora.app