Privacy Policy

This policy describes what we collect and why, in plain language. It is updated whenever something changes in how Floramy handles data, so it always matches what the app actually does. The date at the top shows when it was last changed.

Who runs Floramy

Floramy is operated by Merkenberg (C.J. Bodbijl), registered with the Dutch Chamber of Commerce (KVK) under number 82826218, based in the Netherlands. Merkenberg is a sole proprietorship (eenmanszaak); there is no separate company behind it, so Merkenberg is the "data controller" responsible for your information under GDPR. For anything about your data or this policy, reach info@floramy.app.

The short version

Floramy stores who you're connected to, what you've agreed on, and the time you log together, so it can show a fair, neutral picture of shared time. Nothing is sold. Nothing is used for advertising. Your private notes are visible only to you. You can delete your account and its data at any time from Settings.

A note on sensitive data

Floramy is built for polyamorous people, and its core data (who you're connected to) can reveal sensitive things about you, including your relationship structure and, by extension, your sexual orientation. Under European data protection law, that makes it a "special category" of data, which needs your clear, explicit, separate consent before we process it, not just an ordinary account signup. That's what the consent screen you saw (or will see) when you first opened Floramy is for.

What we collect

• Account info: your name and email, from whichever of Google or Apple you sign in with.
• Connections: who you're connected to, your agreement with them (e.g. "3 days every week"), and the logging mode on that connection.
• Logged time: dates, day-counts, and how contact happened (in person, a message, a call, and so on) that you and your connections log together, plus any caption attached to a specific entry, shared with that connection, same as the entry itself.
• Private notes: anything you write in a connection's own Notes section. Visible only to you, never shared with that connection.
• How close a check-in felt: when you log contact, you can say how much closer it made you feel, on a scale from "normal" to "much closer". It is visible only to you, never to the person you logged it with, and it doesn't change any status. It is part of Download my data, and deleting the check-in or your account removes it.
• People who aren't on Floramy yet: if you add someone by name or email, we store what you typed, plus anything you set up for them, so you can keep track. An email address is only used to send the invitation you ask for.
• Reminders and birthdays: a reminder you set on a connection is private to you, like your notes, and so is the message it sends. A birthday (month and day, no year) is the exception: the other person on the connection can see it, but only you can change or delete it.
• Signals: a short message you post to whichever connections you choose, with an optional date, plus the reply each person gives. Unlike logged time, this isn't kept for the other person once you delete your account: deleting removes every signal you posted or replied to.
• Moments: a shared memory you create: a date (and optionally a last day), a short note, and the people who were there. People you tag see it only after you tag them, and can accept, decline or step out. A person's name is shown to others on the moment only if that person accepted; everyone else shows as "Someone". If you tag someone who isn't on Floramy yet, we keep the name you typed. If you choose "count as time together", the days are also logged as normal shared time with each person, which they confirm by accepting. Deleting your account removes every moment you created and your tags on other people's moments; time already logged with a connection stays on their record, like any other logged time.
• Groups: a private, named group of your own connections (for example "Housemates"), used to light up those people on your own constellation. By default, only you can see a group. If someone has allowed group view on their connection with you (and is not in private mode), you can invite them into a group; once they accept, they can see who else in that group has also accepted (and your own shared status for each of them), and can ask to connect with a fellow accepted member they aren't already connected to. Declining, or never allowing it, means they're shown as "Someone" to everyone in the group except its owner. Deleting your account removes any groups you own; if you were a member of someone else's group, your place in it is cleared too.
• About me: an optional list of short things you write about yourself (what you like, a wishlist, things to avoid). It is private to you until you switch sharing on for a specific connection. A connection you share with can read it, and when they ask for an idea or a message draft, the text of your list is sent, together with their own private notes, to our AI provider (Anthropic) to write the idea; this only happens when they tap for an idea. You can switch sharing off, or delete items, at any time, and the other person can also leave your list out of their ideas. Please do not put sensitive information in it. Deleting your account removes your list.
• Preferences: your language, time zone, the illustration set you chose (plants, cats or dogs), and your notification settings, including a device push token if you enable push notifications. The time zone is used so reminders and birthdays arrive on your own calendar day. If you turn on the app lock, your code (stored only as a scrambled, salted hash) and your Face ID choice stay on your own device; they are never sent to Floramy or anyone else. If you forget your code, Floramy emails you a one-time code (kept only as a hash and valid for 15 minutes) to the address on your account.
• Availability: if you choose to set it, how much time you've said you have to spend across everyone in total.
• Calendar data, if you connect Google Calendar: we read event times and attendees to match them to a relationship, but we never store an event's title, description, or other details. We only store which relationship it matched, the date, and how many days it covered. Matching briefly reads the full details of every event in your chosen calendar, including other guests who've never used Floramy. That reading happens only in memory, for the length of the match, and nothing beyond the three fields above is ever written down.
• Feedback: anything you send through the Feedback form (a bug, an idea, a suggestion, or a concern about someone), together with any reply from the founder and whether you have marked that reply as seen. Only you and the founder can read it. Bugs, ideas and suggestions may be copied, without your name, into the shared testing Tracker that testers can open; reports about a specific person never are. If you delete your account, the feedback you sent is deleted from Floramy, but the copy emailed to the founder when you sent it, and any copy already pasted into the Tracker, are not removed. It is part of Download my data.
• Friends of friends: if you allow "Friends of friends can find me" on a connection (off by default, and only while private mode is off), your name can be shown to friends of that connection. Nothing else about you is shown, and switching the choice off, or switching private mode on, removes you at once.
• Blocks and hidden suggestions: the people you block and the suggestions you hide, visible only to you; a person you block is never told. We also keep a short log of the connection requests you send, to apply a daily limit; entries older than two days are cleared the next time you send a request. Deleting your account removes all of it. It is part of Download my data (blocks).
• Apple Calendar and video calls: if you connect Apple Calendar, you give your Apple ID email and an app-specific password (made in your Apple account), which we store encrypted. It then works like Google Calendar above, and you can disconnect it at any time. For both calendars we also keep one extra fact per event: whether it looked like a video call (judged from a meeting link in the event, which we don't keep), so the entry can say so.
• Free flag: if you flag yourself as free until a time you choose, connections who can open your constellation (private mode off) see a small Free tag until then. It always has an end time, and you can end it early.
• Your own birthday: if your connections have set a birthday reminder for you, Floramy can work out your own birthday (month and day) from them and ask you to confirm it, so it can remind you to review what you share before it. We store the date you confirm on your account.
• Pauses: when you pause a connection, we keep when each pause started and ended, who paused it, and any label (such as On holiday) and return date you add. The other person on the connection can see the label and the return date. Past pauses stay in the connection's history so a break is never counted against you.
• Date pickers: if you make a date picker ("Find a date"), we store the days you propose, whether the answers are visible to everyone with the link or only to you, and the names and yes/maybe/no answers people give through your link. People who answer do not need an account: we keep only the name they type and their answers, plus a private edit link (stored as a hash, so we cannot read it back). Only you see the names and answers, unless you chose to show them to everyone with the link, and the page says so before anyone answers. Answers are deleted 90 days after the picker expires, when you delete the picker, or when you delete your account, and a respondent can delete their own answer at any time with their link. To limit abuse we keep a short-lived, salted hash of a visitor's network address for at most two days. Date pickers are part of Download my data.
• Floramy Plus subscription (if you subscribe): you buy it from the App Store or Google Play, which take the payment; Floramy never sees your card or payment details, or the details of your Apple or Google account. Floramy keeps whether you have Plus and until when, which product you bought (monthly or yearly), which store it came from, and a technical fingerprint of the subscription (store, product and the date it first started), so that one subscription can never be active on two Floramy accounts at once. A subscription stays with the Floramy account that bought it. RevenueCat (see "Who we share it with") keeps the purchase records for us, under the random ID of your Floramy account; Floramy does not send your name or email address to RevenueCat. It is not used for advertising and not sold. If you delete your account, your access to Plus ends and we ask RevenueCat to delete what it holds under your account's ID. Deleting your account does not cancel your subscription: you cancel it yourself in the App Store or Google Play, and the store keeps its own purchase records under its own policy.
• Help chat questions: if you use the Help chat, what you type and the chat so far go to our AI provider (Anthropic) together with the Guide and the name of the screen you are on, so it can write the answer. Nothing else about you is sent: not your notes, connections, calendar or any other Floramy data. Floramy does not store your questions or the answers; it only counts how many you ask each day, for about a week, to apply a daily limit. The chat clears when you close it. If you tap "Send this question to the founder", that question and the answer are sent as feedback (see the Feedback entry above).

Who we share it with

Floramy is built on a small number of outside services, each of which only sees what it needs to do its specific job:

• Google and Apple: for signing in, and (if you connect it) reading your Google Calendar.
• Resend: sends the emails Floramy sends you (connection requests, confirmations, reminders).
• Anthropic (Claude): writes the suggestions behind the AI features (ideas, message drafts, catch-ups). It only happens when you tap the button. What is sent is only what the reply needs: the newest notes you wrote about that connection (up to 30), the About me list that person shared with you if there is one, a general area if you set one, and, for a message draft, the idea you were just shown. Floramy does not store your words or the reply. Location ideas may involve a web search made on Anthropic's side. The Help chat works the same way: only what you type there goes to Anthropic, together with the Guide.
• Your phone's speech recognition: when you dictate, the words are recognised by your device (Apple or Google, depending on your phone and its settings). Floramy itself never receives or stores the audio.
• Supabase: hosts Floramy's database.
• Vercel: hosts the Floramy website itself.
• Apple and Google (push notifications): if you turn on push notifications, your device's push token goes to Apple's push service or Google's Firebase Cloud Messaging, so the notification can reach your phone.
• RevenueCat: keeps track of Floramy Plus subscriptions for us. It receives the random ID of your Floramy account and the purchase information that comes with a purchase, such as the product, the dates and which store it came from, plus the technical details the app and the store send with it (for example the app version, the type of device and the network address the request comes from). It does not receive your name, email address, connections, notes or logged time.
• Apple and Google (purchases): if you subscribe, the App Store or Google Play handles the payment, renewal, cancellation and refunds under its own terms and privacy policy. Floramy only learns, through RevenueCat, whether the subscription is active.

We don't sell data to anyone, ever.

How we protect your data

• In transit: every connection between your device, the Floramy website, and its database is encrypted (TLS/HTTPS). The same standard used for online banking.
• At rest: if you connect Google Calendar, the token that lets Floramy read it (Google's refresh token) is encrypted (AES-256-GCM) before it's stored, using a key kept separate from the data itself. If you set an app lock, your code is stored only as a salted hash, on your own device, never on our servers.
• Access controls: who can see what (your notes, another connection's names, your constellation) is enforced in the database itself, not only in the app's screens, so a mistake in how a page is built can't accidentally expose someone else's data.
• Special-category data: the sensitive information described above (who you're connected to, and what that can reveal) gets the same technical protections as everything else in this section, on top of the separate consent requirement described there.

Google user data and the Limited Use policy

If you connect Google Calendar, Floramy asks for exactly one Google permission: read-only access to your calendar events (the calendar.readonly scope). We never ask for access to your Gmail, Contacts, Drive, Photos, or the ability to change your calendar.

When Floramy checks your calendar for a match, it briefly reads each event's title, description, and attendees in memory, for the moment it takes to compare them against your Floramy connections. Nothing beyond the match itself, the date, and the number of days is ever written to our database, sent to a third party, or kept once that moment is over, see "What we collect" above for the full description.

How long Google data is kept, and how to delete it: the refresh token is kept only while your Google Calendar stays connected. When you disconnect it (on the Calendar page) or delete your account, Floramy revokes its access on Google's side, so Floramy also disappears from your Google account's permissions page, and deletes the stored token and its record of which events were matched, at once. Time that a match logged on a connection stays, like any other logged time, unless you choose to delete imported entries when you disconnect. You can also remove Floramy's access yourself at any time from your Google account's permissions page.

Floramy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data from Google Calendar is never used to develop, improve, or train any generalized or foundational AI/ML model, whether Floramy's own or a third party's. This includes the AI features described under "Who we share it with" above: they never receive raw Google Calendar data, only the notes and location you provide directly.

How long we keep it

We keep your account and connection data for as long as your account stays active. Floramy is fundamentally a fairness record, so old entries aren't deleted on a timer the way they might be on a site that only cares about recent activity. If you delete your account or end a connection, see "Your rights" below for exactly what happens to each type of data at that point.

If an account goes untouched for 3 years (no sign-in, nothing logged), we'll email a warning to the address on file, and delete it the same way "Delete your account" works below if there's no response within 30 days. This is currently reviewed by hand rather than run automatically, but the same rule applies either way.

Government or legal requests

If we're ever legally required to hand over data (a valid court order or an equivalent legal demand), we'll comply with what the law actually requires, nothing more. Where we're legally allowed to, we'll tell the person whose data was requested that it happened. We haven't received such a request as of this policy's last update.

Your rights

• Delete your account: anytime, from Settings → Account → Danger zone. This disables your login and removes your name, email, and availability, and deletes your private notes (the ones only you could see), every signal you posted or replied to, the feedback you sent, and your device's push token. Logged time you shared with a connection (including its date, duration, and any note attached to that specific entry) stays on the other person's record. That's how any shared record works when one side leaves: it's their history of that connection too, not only yours.
• Private mode: on by default, under Settings → Account. While it is on, everyone you're not directly connected to sees you as "Someone": nobody can open your constellation, see your name, invite you into a group or suggest you. This is enforced in the database itself, not only in the screens. If you switch it off, a connection can open your constellation and see the time logged in your other connections, but not your private notes or reminders.
• Decide per connection: on a connection's own page you choose whether that person can show your name to people who view their constellation, whether they can invite you into shared groups, whether their friends can find you, and whether they see your availability. The first three are off by default and only count while private mode is off. Only you can change your choices, and they are kept when you switch private mode on.
• Remove an ended connection: a connection that has ended can be removed from your list at any time. Removing it hides it from you. It is only deleted for good once both of you have removed it or the other person's account is gone. Until then everything stored about it stays, including the time you logged together and your private notes and reminders for it, and the other person keeps their own view of it.
• Get a copy of your data: "Download my data" in Settings → Account gives you everything tied to your account as a file, anytime.
• Withdraw consent: deleting your account also withdraws the consent described above. There's no separate step.
• Complain to a regulator: if you think we've handled your data wrongly, you can complain directly to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or, if you're in the UK, the Information Commissioner's Office, or the data protection authority where you live. You don't need to talk to us first.

Wherever you're downloading Floramy from

This policy is written to meet European (GDPR) standards. Rather than giving people in different countries different rights depending on local law, we apply everything in this policy (the same rights, the same protections) to every Floramy user, wherever you are.

Where your data is processed

Merkenberg is based in the Netherlands, inside the EU.

• Supabase and Vercel: both run in Paris, France (EU), so Floramy's database and the server it runs on never leave the EU.
• Google and Resend: both certified under the EU-U.S. Data Privacy Framework, the mechanism the EU recognizes as providing adequate protection for data handled in the US.
• Anthropic: is a US company, so the text sent for an AI reply leaves the EU for that moment. That is why only what is needed is sent, and only when you ask for it.
• Apple: used only for signing in, so only your name and email pass through it, never your connections or logged time.
• RevenueCat: is a US company and processes purchase records in the United States, outside the EU. The transfer is covered by the European Commission's Standard Contractual Clauses, which RevenueCat includes in its data processing addendum. That is why only what is described above is sent.

Questions

Email info@floramy.app or use the in-app Feedback page (the star icon) with anything about this policy or your data.