Privacy Policy — Flara

Effective: April 24, 2026 · Last updated: April 24, 2026

This Privacy Policy explains how Flara collects, uses, and protects information when you use the app. Flara handles sensitive health-adjacent data — skin reactions, product use, and lifestyle logs — and we take that responsibility seriously.

1. Information We Collect

1.1 You provide

Account: email/password (password stored as a bcrypt hash), Apple ID identifier, or Google account identifier
Skin profile: self-reported conditions (eczema, psoriasis, acne, rosacea, dermatitis, other) and optional skin type
Logs: skin reaction severity (redness, itch, dryness, breakout, swelling), food entries, cosmetic products and ingredients, stress and sleep values
Skin photos, if you choose to add them to your timeline

1.2 Automatically collected

Weather snapshots from Apple WeatherKit — stored against your logs to help pattern analysis
Sleep duration and resting heart rate from Apple Health, only with your explicit permission, and only if you are on Flara Pro
Subscription state via RevenueCat
Crash and error logs (90-day retention)

1.3 Not collected

Your precise location (WeatherKit runs on-device and only the resulting weather snapshot is stored)
Contacts, microphone, IDFA
Advertising identifiers — Flara contains no advertising SDK

2. How We Use Information

Purpose	Data used
Authentication	Email, Apple identifier, or Google identifier
Log storage and sync	All logs via Supabase
Photo timeline	Skin photos stored in your private Supabase Storage space
AI pattern analysis	Anonymized log summaries (see Section 3)
In-app purchases	RevenueCat transaction IDs
Bug diagnosis	Crash and error logs

3. AI Analysis and Anthropic

Flara uses Claude (Anthropic PBC, USA) to generate pattern insights. When you use these features, a summarized, anonymized version of your logs is sent to Anthropic via our server. Specifically:

Data sent: your logged skin conditions; skin reaction severity summaries; food, cosmetic, weather, and wellness log summaries for the last 30 days
Data never sent: your email, name, or account identifiers; your precise location; your contacts or device data; your skin photos
Anthropic does not use this data to train its models (see Anthropic's API data privacy policy)
Each request is processed and discarded; Anthropic does not retain your data beyond the request
All transmission is encrypted with HTTPS/TLS

3.1 Your explicit consent

Flara will not send any data to Anthropic until you grant consent in the app. You are asked for consent during onboarding via the “AI Data Sharing” screen, which lists the exact categories of data above, names Anthropic as the recipient, and links to Anthropic's privacy policy. Without consent, Flara remains fully usable for logging — only AI features are disabled.

3.2 Revoking consent

You can revoke your consent at any time in the app: Settings → AI Data Sharing. When revoked, Flara stops sending any data to Anthropic; AI pattern analysis becomes unavailable, while the rest of the app continues to work normally. You may re-enable consent from the same screen.

4. Skin Photos

Photos are stored exclusively in your private Supabase Storage bucket, gated by Row Level Security so only you can read them
Photos are never sent to Anthropic or any AI service
Images are resized to 800px on the long edge on-device before upload to keep bandwidth reasonable
Deleting your account removes every photo you have uploaded

5. Third-Party Services

Recipient	Data shared	Retention
Supabase Inc. (USA)	Email, identifier, logs, photos	Deleted on account deletion
RevenueCat Inc. (USA)	App user ID, transaction IDs	5 years from transaction
Anthropic PBC (USA)	Anonymized log summaries (with consent)	Deleted after each request
Apple Inc. — WeatherKit	Coarse location to return weather	Per Apple's policy
Apple Inc. — Sign in with Apple	Apple identifier	Per Apple's policy
Google LLC — Sign in with Google	Google identifier	Per Google's policy
Open Beauty Facts	Barcode queries only — no user-identifying data	Not applicable

6. Data Retention

Data	Period
Account, logs, and photos	Deleted immediately on account deletion
Subscription records	5 years (anonymized) for legal compliance
Error logs	90 days

7. Your Rights — Account & Data Deletion

7.1 Delete your account in-app

Settings → Data → Export / Delete my data. All logs, photos, AI outputs, and cloud-synced data are permanently removed immediately.

7.2 Email request

If you cannot access the in-app option, email [email protected] with your registered email. Processed within 3 business days.

7.3 Revoke Sign in with Apple

iPhone Settings → [Your Name] → Password & Security → Sign in with Apple → Flara → Stop Using Apple ID.

7.4 Revoke Sign in with Google

Visit myaccount.google.com/permissions and revoke Flara's access.

8. Security

HTTPS/TLS for all network traffic
Passwords hashed with bcrypt
Supabase Row Level Security for user data isolation
Log summaries sent to Anthropic are stripped of account identifiers before transmission
Photos protected by Storage RLS — only the owner's auth token can request signed URLs

9. Cookies and Tracking

No cookies. No IDFA. No advertising SDK. RevenueCat may use an anonymous device identifier for subscription status only.

10. Children's Privacy

Not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children.

11. International Transfers

All third-party processors are based in the United States. Transfers are governed by each provider's data processing agreements.

12. Changes

Material changes announced via in-app notice or email at least 7 days before taking effect.

13. Contact

Email: [email protected]. We respond within 3 business days.