FlorillaIn short
- You can walk, pick flowers and build bouquets without an account. All of that stays on your iPhone.
- An account is only needed to send and receive bouquets. Then we store your username, your sign-in email and the bouquets you send or receive.
- No ads, no analytics, no tracking, no third-party SDKs. We never sell or rent your data.
- You can delete bouquets you received, sign out at any time, and ask us to delete your account and everything stored with it.
Who we are
Florilla is made by a small independent team, referred to here as "the Florilla team", "we" or "us". We are responsible for the personal data described in this policy. You can reach us at any time at hello@florilla.example.
What stays on your iPhone
Most of Florilla runs entirely on your device. The following is stored only on your iPhone, and we cannot see it:
- the flowers in your basket, bouquet drafts and finished bouquets, including the private note you write on a bouquet;
- your gallery of made and received bouquets, and the pictures and GIFs you create;
- your local profile: name, handle and the avatar symbol and color you pick;
- walking stats (distance and time) and flower stats (how many of each kind you collected and prepared);
- your settings and any changes you make in the Biome Editor.
If you sign in, your session keys are kept in the iOS Keychain on your device. Deleting Florilla removes everything above from your iPhone. Your device's own iCloud or computer backups may include this data, under Apple's terms; we do not receive a copy.
Accounts and sending bouquets
Sending and receiving bouquets needs a free account. Florilla only asks for one when you first tap Send, choose a username, or open the friends banner in your gallery. You can create it in one of two ways.
Sign in with Apple
Apple gives us a stable account identifier and the email address you choose to share, which can be a private relay address that forwards to you. We never see your Apple ID password.
Email and password
We store your email address and a password that our sign-in provider keeps only as a salted hash, so nobody can read it. We email you six-digit codes to confirm the address and to reset your password.
What the server keeps
| Data | Why | How long |
|---|---|---|
| Account identifier and sign-in email | To sign you in, also on a new iPhone, and to send codes you ask for | Until you delete your account |
| Username and display name | So a friend can find you by your exact username and see who sent a bouquet | Until you change them or delete your account |
| Account creation time and notification switches | To apply your choices and the limits for new accounts | Until you delete your account |
| Bouquets you send: the bouquet's flowers, colors, arrangement and wrapping, your sender name, the message you add (up to 500 characters), the recipient and the sent and opened times | To deliver the bouquet and show whether it has been opened | Until the recipient deletes it from their gallery, or the sender's or recipient's account is deleted |
| Time of each bouquet you send | To prevent spam (up to 30 bouquets an hour, 5 in an account's first hour) | About one day |
| Push notification token, with its environment and platform | To deliver the notifications you allowed | Until you sign out, or Apple reports the token is no longer valid |
| Technical request logs (such as IP address and time), kept by our hosting provider | To keep the service secure and running | A short period set by the provider |
A bouquet you send can be read only by you and the friend you sent it to. Players cannot browse or list other players: the only way to find someone is to type their exact username. The private note you keep with a bouquet is never sent; only the message you type on the Send screen travels with it.
Notifications
If you allow it, Florilla sends two kinds of notifications: "a friend sent you a bouquet", which includes the start of their message, and "a friend opened your bouquet". You can also send yourself a test notification. Each kind has its own switch in your profile, and you can turn all of them off in the iOS Settings app. When you sign out, your iPhone's notification token is removed from our server.
Permissions on your iPhone
- Photos, add only. When you choose Save to Photos, Florilla asks to add pictures and GIFs of your bouquets to your library. It cannot see or read your photos.
- Notifications. Optional, as described above.
- Sharing. Share uses the standard iOS share sheet. What you share goes where you choose; we do not receive it.
Florilla does not use your location, camera, microphone or contacts, and it never shows the App Tracking Transparency prompt because it does not track you.
What we never do
- We do not show ads and do not include advertising, analytics or crash-reporting SDKs.
- We do not track you across apps or websites and do not use the Advertising Identifier.
- We do not sell, rent or share your personal data for advertising.
- We do not read the messages you send for any purpose other than delivering them, or reviewing a report of abuse that you or a friend send us.
Service providers
We use a few providers to run the parts of Florilla that need a server. They process data only on our instructions and only to provide their service.
- Supabase hosts our database, account sign-in and the small server function that sends notifications.
- Apple provides Sign in with Apple, the Apple Push Notification service and App Store distribution. Apple's own privacy policy covers your Apple account.
- An email delivery service sends the six-digit verification and password-reset codes to your email address.
These providers may process data outside your country, including in the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses. We may also disclose data if the law requires it, or to protect players from fraud or abuse.
Keeping and deleting your data
We keep account data for as long as your account exists. When you delete a bouquet you received from your gallery, it is removed from our server too. Deleting a bouquet you made only removes it from your iPhone; a copy you already sent stays with your friend until they delete it or you delete your account. You can sign out from your profile at any time.
To delete your account, follow the steps on the support page. We then delete your profile and username, your sign-in record, your notification tokens and every bouquet you sent or received on the server within 30 days. Copies that a friend already downloaded may stay in their gallery on their own iPhone. Short-lived logs expire on their normal schedule.
Your rights
Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw any consent you gave. You can change your username and password in the app yourself. To use any other right, email us; we will answer within 30 days and may ask you to write from your account's email address so we know the request is yours.
If you are in the European Economic Area, the UK or Switzerland, we rely on these legal bases: performing our agreement with you (your account and delivering bouquets), our legitimate interests (keeping the service secure and free of spam) and your consent (notifications and saving to Photos, which you can withdraw in iOS Settings). You may also complain to your local data protection authority.
If you live in California or another US state with a privacy law, you have the right to know, correct and delete the personal information described here. We do not sell or share personal information and will not treat you differently for using your rights.
Children
The game can be played without an account. To create an account you must be at least 13 years old, or older where the law of your country requires it (for example 16 in some EU countries). If you believe a child has created an account, contact us and we will delete it.
Security
All traffic between the app and our server is encrypted with HTTPS. Access rules on the server let each player read only their own profile and the bouquets they sent or received, and sign-in sessions are stored in the iOS Keychain. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you, as the law requires.
This website
This site has no cookies, analytics or ads, and loads nothing from other companies. Your theme choice is remembered in your browser's local storage and never leaves your device. The site is hosted by Netlify, which, like any web host, records standard request logs such as your IP address and the page requested, to deliver the site and keep it secure.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change matters for how your data is used, we will also tell you in the app before it takes effect.
Contact
Questions about privacy, or a request about your data? Write to us and include your username if it is about your account.
hello@florilla.example