Flara

Effective: April 24, 2026 · Last updated: August 24, 2026

This Privacy Policy explains how Flara collects, uses, and protects information when you use the app. Flara handles sensitive health-adjacent data — skin reactions, product use, and lifestyle logs — and we take that responsibility seriously.

1. Information We Collect

1.1 You provide

• Account: email/password (password stored as a bcrypt hash), Apple ID identifier, or Google account identifier
• Skin profile: self-reported conditions (eczema, psoriasis, acne, rosacea, dermatitis, other) and optional skin type
• Logs: skin reaction severity (redness, itch, dryness, breakout, swelling), food entries, cosmetic products and ingredients, stress and sleep values
• Skin photos, if you choose to add them to your timeline

1.2 Automatically collected

• Weather snapshots from Apple WeatherKit — stored against your logs to help pattern analysis
• Sleep duration and resting heart rate from Apple Health, only with your explicit permission, and only if you are on Flara Pro
• Subscription state via RevenueCat
• Crash and error logs (90-day retention)

1.3 Not collected

• Your precise location (WeatherKit runs on-device and only the resulting weather snapshot is stored)
• Contacts, microphone, IDFA
• Advertising identifiers — Flara contains no advertising SDK

2. How We Use Information

3. AI Analysis and Anthropic

Flara uses Claude (Anthropic PBC, USA) to generate pattern insights. When you use these features, a summarized, pseudonymised version of your logs is sent to Anthropic via our server. Specifically:

• Data sent: your logged skin conditions; skin reaction severity summaries; food, cosmetic, weather, and wellness log summaries for the last 30 days
• Data never sent: your email, name, or account identifiers; your precise location; your contacts or device data; your skin photos
• Anthropic does not use this data to train its models (see Anthropic's API data privacy policy)
• Under Anthropic's standard commercial API terms, request inputs and outputs are deleted from Anthropic's systems within 30 days. Flara does not have a zero-data-retention agreement with Anthropic, so this 30-day window applies
• All transmission is encrypted with HTTPS/TLS
• We describe this as pseudonymised rather than anonymous: direct identifiers are removed before transmission, but the underlying logs remain associated with your account in our own systems, and the resulting output is written back to your account. It is therefore still personal data

3.1 Your explicit consent

Flara will not send any data to Anthropic until you grant consent in the app. You are asked for consent during onboarding via the “AI Data Sharing” screen, which lists the exact categories of data above, names Anthropic as the recipient, and links to Anthropic's privacy policy. Without consent, Flara remains fully usable for logging — only AI features are disabled.

3.2 Revoking consent

You can revoke your consent at any time in the app: Settings → AI Data Sharing. When revoked, Flara stops sending any data to Anthropic; AI pattern analysis becomes unavailable, while the rest of the app continues to work normally. You may re-enable consent from the same screen.

4. Skin Photos

• Photos are stored exclusively in your private Supabase Storage bucket, gated by Row Level Security so only you can read them
• Photos are never sent to Anthropic or any AI service
• Images are resized to 800px on the long edge on-device before upload to keep bandwidth reasonable
• Deleting your account removes every photo you have uploaded

5. Third-Party Services

6. Data Retention

7. Your Rights — Account & Data Deletion

7.1 Delete your account in-app

Settings → Data → Export / Delete my data. All logs, photos, AI outputs, and cloud-synced data are permanently removed immediately.

7.2 Email request

If you cannot access the in-app option, email [email protected] with your registered email. Processed within 3 business days.

7.3 Revoke Sign in with Apple

iPhone Settings → [Your Name] → Password & Security → Sign in with Apple → Flara → Stop Using Apple ID.

7.4 Revoke Sign in with Google

Visit myaccount.google.com/permissions and revoke Flara's access.

8. Security

• HTTPS/TLS for all network traffic
• Passwords hashed with bcrypt
• Supabase Row Level Security for user data isolation
• Log summaries sent to Anthropic are stripped of account identifiers before transmission
• Photos protected by Storage RLS — only the owner's auth token can request signed URLs

9. Cookies and Tracking

No cookies. No IDFA. No advertising SDK. RevenueCat may use an anonymous device identifier for subscription status only.

10. Children's Privacy

Not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children.

11. International Transfers

All third-party processors are based in the United States. Transfers are governed by each provider's data processing agreements.

12. Changes

Material changes announced via in-app notice or email at least 7 days before taking effect.

13. Contact

Email: [email protected]. We respond within 3 business days.