Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — your email address and authentication details used to create and secure your account.
• Profile and preference information — your name and age; your height and weight, if you choose to enter them; and the answers you give during onboarding and in Settings about your fertility journey, cycle, lifestyle, nutrition, fitness, and wellness goals.
• Reproductive-health and cycle data — menstrual cycle dates, symptoms, fertility signals, and other health metrics you choose to log.
• Wellness data — nutrition, fitness, mood, sleep, and lifestyle entries you record, and the meals and exercises you save as favorites.
• Journal entries and other text you write — the entries you compose in response to a journal prompt, along with any mood rating or tags you add, and the optional notes you can attach to a symptom, meal, exercise, meditation, or wellness log.
• AI coach chat history — the messages you send to and receive from the in-app AI coach.
• Technical and diagnostic data — device type, operating system, app version, and crash and error reports, used to find and fix faults. These reports are deliberately designed so they do not include or reveal your health information. We do not currently collect product-usage analytics such as screen views or feature-engagement events.

How we collect it. Almost everything above comes directly from you: the answers you give during onboarding and in Settings, the logs and entries you add, and the messages you type to the AI coach. Technical and diagnostic data is collected automatically by the app. If you sign in with Apple or Google, that company confirms your identity and shares your account email address with us.

You decide what to log. Some features require certain data to work, but providing health information is always your choice.

2. How We Use Your Information

We use your information to:

• provide cycle-synced nutrition, fitness, and wellness guidance;
• generate your personalized plan and the AI coach’s replies, if you turn on AI data sharing (see Section 5);
• maintain, secure, and improve the Service, including finding and fixing crashes;
• communicate with you about your account, support requests, and important changes, including sign-up confirmation and password-reset emails.

We do not use your reproductive-health data for advertising, and we do not sell your personal information.

Analytics. We do not currently collect product-usage analytics. There are no screen-view or feature-engagement events, and no advertising or marketing identifiers. The only automated reports we receive are the crash and error reports described above, which our crash-reporting provider, Sentry, processes for us (see Section 4). If we introduce usage analytics, we will update this policy and describe the choices available to you before we begin collecting those events.

3. How Your Data Is Stored & Protected

Your data is stored in Supabase with row-level security, so each account can access only its own data. Data is encrypted in transit and at rest by our infrastructure providers. We restrict internal access to personal data to what is necessary to operate the Service. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your information.

4. How We Share Information

We do not sell your personal information and we never sell your reproductive-health data. We share information only in these limited cases:

• Service providers — the companies listed below, which run parts of the Service for us. Each receives only the information its role requires.
• Legal requirements — when required by valid legal process. Given the heightened legal scrutiny of reproductive-health data, we will, to the extent permitted by law, scrutinize and seek to limit or challenge overbroad requests, and provide only what we are legally compelled to provide.
• With your direction — when you explicitly ask us to share or export your data.

Our service providers

The only providers that receive your health and wellness information are Supabase, which stores it, and — only if you turn on AI data sharing — Anthropic. Both handle it as our processor under written data processing terms that require them to process it only to provide their services to Flora and according to our instructions, to protect it with appropriate technical and organizational security measures, and to hold their own subprocessors to comparable protections. RevenueCat and Resend handle the information they receive under data processing terms with the same requirements. We rely on these terms so that your information has the same or equal protection with these providers as it has with us.

5. AI Features and Anthropic

Flora's AI coach and personalized plans are powered by Claude, an AI model made by Anthropic, a separate company. To use these features, Flora sends some of your information to Anthropic.

It’s your choice

AI data sharing is optional. Flora asks you in the app — showing what is sent and that it goes to Anthropic — and nothing is sent unless you allow it. Flora’s server checks your choice before every AI request, so nothing reaches Anthropic from an account that has not agreed or has turned sharing off. You can turn it off anytime in Settings → AI Data Sharing. Everything else in Flora works without it; only the AI coach and AI plan updates pause.

Here is exactly what Flora sends to Anthropic, and what it never sends:

How this information is collected

Flora collects it directly from you: the answers you give during onboarding and in Settings, the meals and workouts you log, the meals and exercises you favorite, and the messages you type to the coach. The estimated cycle phase for each day is calculated by Flora from your cycle information; your period dates and symptom logs themselves are not sent.

How it is used

Only to generate your personalized plan — when it is built, when you refresh it, and in the automatic weekly refresh — and the AI coach’s replies to your messages. The results come back to Flora and are shown to you in the app.

How it is protected

• It is sent encrypted from the app to Flora’s own server, which forwards it to Anthropic. The app never connects to Anthropic directly, and the request does not include your name, email address, or account ID.
• Anthropic does not use it to train its AI models. Anthropic’s Commercial Terms of Service state that it may not train models on customer content from its services, and Anthropic states that by default it does not use inputs or outputs from its commercial products, including the Anthropic API that Flora uses, to train its models.

How long it is kept

• At Anthropic: Anthropic automatically deletes inputs and outputs from its systems within 30 days of receiving or generating them. It may keep them longer when needed to enforce its Usage Policy (for up to 2 years) or when the law requires it.
• At Flora: your conversations with the coach and your generated plans are stored in your Flora account so you can see them, and are deleted when you delete your account. Turning AI data sharing off stops new information from being sent; it does not delete what is already in your account.

Anthropic’s obligation to protect your information

Anthropic handles this information as Flora’s service provider under its Commercial Terms of Service, which include Anthropic’s Data Processing Addendum. Under those terms, Flora is the controller and Anthropic is our processor. Anthropic may process the information only to provide or maintain its services and in line with our documented instructions; it must ensure the people who process it are bound by a duty of confidentiality, protect it with reasonable and appropriate technical and organizational security measures, and require any subprocessor to meet data protection obligations substantially as protective as its own. We rely on these terms to give your information the same or equal protection with Anthropic that it has with Flora.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we are required to retain it by law. Information sent to Anthropic for AI features is kept by Anthropic as described in Section 5. Consumer health data is handled as described in our Consumer Health Data Privacy Policy: we honor deletion requests for it without exception, including in backups and archives and at our service providers.

7. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit much of your data directly in the app, and you can delete your account at any time. To exercise any of these rights, contact us at support@joinflora.app.

You can also use these controls directly in the app:

• AI Data Sharing (Settings → AI Data Sharing) — see what is sent to Anthropic, and turn sharing on or off at any time.
• Notifications (Settings, or Push Notifications on your Profile) — turn reminder notifications on or off.
• Export My Data (Settings → Your Health Data) — export a copy of your data as a file.
• Edit your information (Settings and your Profile) — update your name, age, goals, and other answers.
• Delete Account (Settings → Delete Account) — permanently delete your account and the data stored with it.

When you send us a rights request, we will acknowledge it promptly and respond within 45 days. If a request is complex, we may extend once by up to another 45 days and will tell you before the first period ends. If we deny your request, you may appeal by replying to our response, and we will answer your appeal within 45 days. We may ask you to verify your identity, but we will not ask for more information than verification requires.

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy describes additional rights for consumer health data, including how to reach your state Attorney General if an appeal is denied.

8. Children’s Privacy

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. Reproductive-Health Data & Your Safety

We recognize that reproductive-health data carries heightened regulatory and legal sensitivity. We collect the minimum needed to provide the Service, keep this data within your own account (sending it to Anthropic only if you turn on AI data sharing, as described in Section 5), do not use it for advertising, and do not sell it. You remain in control: you can review, export, or delete your data at any time.

10. International Users

Flora may process and store information in countries other than your own. Where we transfer personal data across borders, we take steps to ensure it remains protected consistent with this Privacy Policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use of the Service after an update means you accept the revised policy.

12. Contact Us

Questions about this Privacy Policy or your data? Contact us at:

DoDo LLC
10966 Ohio Ave, Los Angeles, CA 90024
Email: support@joinflora.app