Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — your email address and authentication details used to create and secure your account.
• Reproductive-health and cycle data — menstrual cycle dates, symptoms, fertility signals, and other health metrics you choose to log.
• Wellness data — nutrition, fitness, mood, sleep, and lifestyle entries you record.
• AI assistant chat history — the messages you send to and receive from the in-app AI assistant.
• Technical and usage data — device type, app version, and basic diagnostic and usage information needed to operate and improve the Service. These analytics events are generic (for example, app opens, screen views, crashes, and performance) and are deliberately designed so they do not include or reveal your health information.

You decide what to log. Some features require certain data to work, but providing health information is always your choice.

2. How We Use Your Information

We use your information to:

• provide cycle-synced nutrition, fitness, and wellness guidance;
• power the AI assistant’s personalized responses;
• maintain, secure, and improve the Service;
• communicate with you about your account, support requests, and important changes.

We do not use your reproductive-health data for advertising, and we do not sell your personal information.

Analytics.We collect a small amount of generic usage analytics (such as app opens, screen views, crashes, and performance data) to understand how the Service performs and to improve it. These events are designed to never include or reveal health information, and any analytics provider we use processes them only on our behalf, under a contract that prohibits using them for its own purposes. You can turn analytics off at any time in the app’s Settings.

3. How Your Data Is Stored & Protected

Your data is stored in Supabase with row-level security, so each account can access only its own data. Data is encrypted in transit and at rest by our infrastructure providers. We restrict internal access to personal data to what is necessary to operate the Service. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your information.

4. How We Share Information

We do not sell your personal information and we never sell your reproductive-health data. We share information only in these limited cases:

• Service providers — infrastructure and processing partners (such as our hosting and AI providers) who handle data on our behalf, under contractual obligations to protect it and use it only to provide their service to us.
• Legal requirements — when required by valid legal process. Given the heightened legal scrutiny of reproductive-health data, we will, to the extent permitted by law, scrutinize and seek to limit or challenge overbroad requests, and provide only what we are legally compelled to provide.
• With your direction — when you explicitly ask us to share or export your data.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we are required to retain it by law. Consumer health data is handled as described in our Consumer Health Data Privacy Policy: we honor deletion requests for it without exception, including in backups and archives and at our service providers.

6. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit much of your data directly in the app, and you can delete your account at any time. To exercise any of these rights, contact us at support@joinflora.app.

You can also control the following directly in Settings:

• Analytics — turn usage analytics off (or back on) at any time.
• Promotional notifications — turn marketing notifications on or off. You will still receive non-promotional messages needed to operate your account.
• Withdraw consent, delete data, delete account — withdraw any consent you have given, delete your data, or delete your account entirely.

When you send us a rights request, we will acknowledge it promptly and respond within 45 days. If a request is complex, we may extend once by up to another 45 days and will tell you before the first period ends. If we deny your request, you may appeal by replying to our response, and we will answer your appeal within 45 days. We may ask you to verify your identity, but we will not ask for more information than verification requires.

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy describes additional rights for consumer health data, including how to reach your state Attorney General if an appeal is denied.

7. Children’s Privacy

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

8. Reproductive-Health Data & Your Safety

We recognize that reproductive-health data carries heightened regulatory and legal sensitivity. We collect the minimum needed to provide the Service, keep this data within your own account, do not use it for advertising, and do not sell it. You remain in control: you can review, export, or delete your data at any time.

9. International Users

Flora may process and store information in countries other than your own. Where we transfer personal data across borders, we take steps to ensure it remains protected consistent with this Privacy Policy and applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use of the Service after an update means you accept the revised policy.

11. Contact Us

Questions about this Privacy Policy or your data? Contact us at:

DoDo LLC
10966 Ohio Ave, Los Angeles, CA 90024
Email: support@joinflora.app