Privacy Policy

Last updated: April 8, 2026

Flora is a private journaling app. This policy explains how your data is handled. The short version: your journal stays yours — on your device, not ours.

What data Flora collects

Flora does not collect any personal data.

There are no accounts, no sign-ups, no servers, and no analytics. We have no way to identify you, and we never receive any information about you or your journal.

Where your data lives

All of your journal entries, settings, and attached photos are stored locally on your device as plain text files (Markdown format). You choose where they live:

  • On your iPhone/iPad — in the app's local storage or a folder you choose

  • In your iCloud — if you select an iCloud folder, Apple syncs the files across your devices using your personal iCloud account. We never have access to this data.

Device permissions

Flora requests access to certain device features to show you relevant information in your journal. This data is read-only and never leaves your device.

PermissionWhat it's used forHealthDisplays your daily steps, sleep, and activity in the journal metrics barCalendarShows today's events alongside your journal entriesPhotosLets you attach photos to journal entries; photos are saved locallyMusic LibraryShows songs you listened to todayNotificationsSends optional daily journaling reminders you configureScreen TimeShows your daily screen time in the metrics bar

All of this data is processed entirely on your device. None of it is transmitted to us or any third party.

Optional AI features

If you choose to enable the AI assistant feature, you will need to provide your own OpenAI API key. When you use the AI chat:

  • The text you send to the AI is transmitted directly to OpenAI's servers using your personal API key

  • Flora does not see, store, or transmit this data — it goes directly from your device to OpenAI

  • OpenAI's own Privacy Policy and Terms of Service apply to any data processed through their API

The AI feature is entirely opt-in and requires you to set up your own API key. It is disabled by default.

Third-party services

Flora uses one optional third-party service:

  • DuckDuckGo Favicon Service — When you add a company page with a URL, Flora fetches that company's icon from DuckDuckGo's public favicon service (icons.duckduckgo.com). Only the domain name is sent. No personal data is included.

Children's privacy

Flora does not knowingly collect data from anyone, including children under 13.

Changes to this policy

If this policy changes in a meaningful way, we will update the date at the top and note the changes in the app's release notes.

Contact

Questions about this privacy policy? Reach out at: hello@harshitbeni.com