Privacy

What we store

Your account: All we keep is an email address and a user ID. Auth0 handle authentication and sign-in, so Flora systems never see your password. Flora doesn’t store your name, and we don’t record your IP address.

What you’re learning: The text from the documents you’re learning, the questions generated or written from that text, and your answers over time. Your daily scheduled cards are based on your review history.

How to reach you: If you turn on reminders, we keep track of your timezone and a push notification token which is unique to your device. Flora works out the best time of day to send you a reminder notification based on your review history.

What you pay for: Which plan you’re on, whether you bought it on the web or in the iOS app, when it renews or ends, and the reference numbers or IDs that Apple or Stripe know your account by. We email the address you sign in with before your first 28 days end, when you subscribe on the web, and before a yearly renewal bought in the app. When you pay, your name, card and billing address go to Stripe or Apple, and Flora doesn’t keep them.

What we don’t do

We don’t keep your files: When you add a PDF, a photo or an audio file, Flora will read it and then immediately delete it. The derived text, the name of the original file, and a checksum of it are the only things that we keep.

No cookies for analytics or advertising: Flora won’t show you ads, and none of your data will be sold or shared with an advertiser. What we use for web analytics is stored in your browser’s local storage instead, which is why this site has no cookie banner. We don’t record your screen, or run session replays.

One cookie of our own: The app sets one cookie for this site, to keep track of whether this browser is signed in to Flora, and whether it last used Apple, Google or email to sign in. It holds nothing that identifies you, and it lasts a year.

What we track

The science shows that people learn most effectively when they come back to review the same material again and again, and we’re really keen to keep people returning to the app for that reason. We want to understand what drives people to use the app or away from it, so we keep an eye on how people use Flora.

From your account: We count how many people signed up on a given day, and how many are still reviewing a week and a month later.

From the app: PostHog (running on servers in the EU) records which pages you read on the site and what you do in the app: adding decks, swiping cards, completing daily sessions, etc. From this data, we should be able to discern where the app is confusing or broken. Posthog stores an ID in your device’s local storage rather than a cookie and we associate those IDs with your account, so we can determine that you’re the same person if you use the app on multiple devices. PostHog keeps that record for a year.

When something goes wrong

The app and the API keep logs of what’s going on under the hood: which requests were made, how long they took, and whether they succeeded or failed. It’s how we find out whether something is broken quickly, rather than waiting for a user to tell us. Those logs are stored by Pydantic Logfire, on servers in the EU, and are deleted after 30 days. A hashed version of your account ID is attached to account-specific logs.

These logs include the text from the documents sent to LLMs when generating flashcards, and the text they send back in response. Those logs are deleted after 30 days, like everything else.

What leaves Flora

When writing flashcards, the text from the relevant document is sent to an LLM model via OpenRouter. Every request tells OpenRouter to route it only to providers which don’t train on what we send (ie your documents). You can read more about the relevant principles and constraints in our AI policy.

When fetching source documents from the internet, Flora reads them from our servers rather than your browser, so the relevant site will see a request from us, not from you. YouTube links are the exception - the address goes to Google, which fetches the video itself.

When sending you daily reminders, the notifications are sent via Expo, and Apple.

When you connect an assistant, like ChatGPT or Claude, Flora sends it your decks, cards and sources only when it asks, with the access you allowed, until you disconnect it on the Account page. You chose it, and what you tell it is between you and whoever runs it. We record which of Flora’s tools it used and how many cards it added, but never what it sent or what went back.

Who handles the data

Here are the names and privacy policies of the companies we work with, and how we work with each of them.

• Auth0 is responsible for signing you in to Flora. They store the email address attached to your account, and your name if you sign in with Apple or Google and they pass it on
• Railway is responsible for hosting for the Flora API and database, both of which run in Amsterdam
• Cloudflare serve this site and the web version of the app, and carry what PostHog counts on its way there; they see each request and your IP address.
• OpenRouter are responsible for routing your documents to an LLM for flashcard generation. You can read more about this in how we use AI
• Expo is responsible for sending notifications
• Apple delivers notifications to Apple devices, signs you in to Flora if you choose to Sign in with Apple, and sells a subscription bought in the iOS app
• Pydantic Logfire keeps logs of Flora’s internal workings, and any errors across our systems
• PostHog tracks which pages and screens are being used, described under what we track
• Stripe sells a subscription bought on the web, as Sold through Link, LLC, a Stripe company. They hold your name, billing address, card and the order in the US
• RevenueCat keeps track of a subscription bought in the iOS app, from that random id and Apple’s record of the purchase, never your email
• Resend sends the emails about your plan. They store your address and the message in the US

How long we keep your data

We’ll keep your material (document text, flashcards, history, etc) until you delete it, or until you delete your account. Deleting a document will delete its flashcards and their review history.

One thing outlives a deletion: a row recording that a generation happened, with the model used, how many tokens it took and when. There’s nothing of yours in it, and it’s what we count our running costs from. Again, these logs are deleted after 30 days.

Exporting your data

You can export everything (decks, sources, cards, and your complete review history) from your account page.

Deleting your account

To delete your account, use Delete account on the Account screen, on the web or in the iOS app. It deletes everything attached to your account straight away, including your sign-in at Auth0. If you paid for a subscription through Stripe, they’ll keep a record of what you paid for for six years, for tax purposes. Apple keeps its own purchase history.

You can also delete individual decks, documents, and flashcards yourself in the app, at any time.

Who’s responsible for all this

Flora is built and run by Harrison Pim, working as a sole trader in the UK.

You can email me at hello@flora.day - I’ll respond to every message. If you think I’ve handled your data badly and I haven’t put it right, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator.