Privacy Policy
Your journal, vision board and notes stay on your phone. This page explains the small amount of data that does leave it, why, who handles it, and how to delete it.
In short:
- Your journal, moods, moodboard photos, voice notes, habits and plans are stored on your device. They are not uploaded to us.
- When you create a personal vision, the wish you type is sent to our server and to OpenAI to write it. If you use the narrated voice, its script goes to ElevenLabs to be read aloud.
- Sign-in uses Google Firebase. Purchases go through Apple or Google and RevenueCat.
- We measure how the app is used with PostHog in the EU. We never send what you write to analytics, and you can switch analytics off.
- We don't sell your data or use it for advertising.
- You can export everything or delete your account from inside the app.
Who we are
Aflora (“Aflora”, “we”, “us”) is run by Diverse Software, who is the data controller for the personal data described here. You can reach us at kwaska1111@gmail.com.
This policy covers the Aflora app for iPhone and Android and this website, getaflora.com.
Data that stays on your device
Most of what you put into Aflora is stored only in the app's private storage on your phone:
- Your profile details: name, pronouns, short bio, photo and date of birth (if you add it), focus areas and priorities.
- Your intentions and visions, affirmations you write or save, journal entries, reflections and moods.
- Voice notes you record in the journal, and photos you add to your vision board.
- Habits, routines, calendar plans, reminders, your flower and its Bloom, and your settings.
We can't see this data. It isn't backed up to our servers, so deleting the app removes it. Use Profile → Privacy → Export my data if you want a copy of your data first. The export doesn't include photos or recordings. Your phone's own backup, such as iCloud or Google backup, may include it according to your device settings.
Aflora asks for the microphone only when you record a voice note, and for photos only when you choose one. Reminders are scheduled on your phone.
Data that leaves your device
| What | Why | Who handles it |
|---|---|---|
| Email address, name and account ID from your sign-in method (email, Google or Apple) | Create your account and keep you signed in | Google Firebase Authentication |
| The wish you type, what it means to you, and your first name, work, focus areas and priorities | Write your personal vision | Our server, then OpenAI |
| The vision you receive | Return it to you without charging you twice if you retry | Our server |
| The script of a narrated vision, plus the audio and timing that come back | Read your vision aloud and let you replay it | Our server and ElevenLabs |
| Account ID, purchases and subscription status | Sell and restore Aflora Pro, and check access | Apple App Store or Google Play, and RevenueCat |
| App usage events (for example “journal entry saved”), device type, app version, approximate location from your IP address, and your account ID | Understand which features help and fix problems | PostHog, hosted in the EU |
Our analytics only accept short technical values. Your journal entries, intentions, notes, affirmations, reflection answers and bio are never sent to analytics. You can turn analytics off in Profile → Privacy.
When the app sends your wish to OpenAI, we ask OpenAI not to store the response. OpenAI doesn't use data sent through its API to train its models by default. OpenAI and ElevenLabs may keep requests for a limited time under their own terms, for example to prevent abuse.
Why we're allowed to use it
- To provide the app you asked for (contract): your account, personal visions, narration and purchases.
- Legitimate interests: keeping the service secure, preventing abuse, and measuring usage so we can improve Aflora. You can object at any time by switching analytics off.
- Legal obligations: keeping purchase records for tax and accounting.
Some things you tell Aflora, such as wellbeing goals, can be sensitive. You choose what to share. Anything you keep in your journal stays on your device.
How long we keep it
- Account, visions and narrations on our server: until you delete your account. They are then deleted straight away.
- Usage analytics: for up to 24 months, then deleted.
- Purchase records: as long as tax and accounting law requires. Apple and Google keep their own records under their policies.
Our service providers
We use these companies to run Aflora. Each processes data only to provide its service to us:
- Google Firebase: sign-in.
- OpenAI: writing personal visions.
- ElevenLabs: the narrated voice.
- RevenueCat: managing purchases.
- PostHog: product analytics, hosted in the EU.
- Our server hosting provider.
Some of these providers are based in the United States. Where data leaves the European Economic Area or the UK, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
We don't sell personal data, share it for advertising, or track you across other companies' apps and websites.
Your choices and rights
- Export: Profile → Privacy → Export my data gives you a copy of your data as a file. Photos and recordings aren't included.
- Delete: Profile → Privacy → Delete my data & account permanently removes your account and data. You can also ask us by email. See how to delete your account.
- Analytics: switch it off in Profile → Privacy.
- Permissions: you can change microphone, photo and notification access in your phone's settings at any time.
Depending on where you live, you also have the right to access, correct, delete or move your data, to restrict or object to how we use it, and to complain to your local data protection authority. In Poland, that is the President of the Personal Data Protection Office (UODO). To use any of these rights, email kwaska1111@gmail.com. We'll reply within one month.
Children
Aflora is not intended for anyone under 16. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.
Security
Data travels over encrypted connections. Our server only accepts verified sign-in tokens, and your sign-in credentials are handled by Firebase rather than stored by us. On your phone, Aflora's data sits in app-private storage protected by your device's lock.
Launch notifications
If you leave your email on getaflora.com to hear when Aflora launches, we store that address, the phone you picked (if any) and the date, on our own server. We use it only to send you one email when Aflora is available. We delete the list within 30 days of sending that email. Until then, you can ask us to remove your address at any time by emailing kwaska1111@gmail.com. We rely on your consent for this. Our server applies short-lived rate limits based on your IP address to stop abuse. It doesn't store the IP address with your signup.
This website
getaflora.com uses no advertising or tracking cookies and no analytics. Our web host may keep standard server logs, such as IP address and pages requested, for a short time for security.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app.