Privacy Policy
Floral Growth Studio
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Floral Growth Studio stores the shop name, currency and reminder preferences, product names, categories, prices, stock levels, restock thresholds, selected product photos, customer names and optional phone numbers and delivery addresses, order items, dates, status and notes, expenses, and planner tasks on your iPhone. There are no user accounts. If you enable cloud backup, the app sends this shop snapshot to our backend, together with a revision number and a random mutation identifier. A random installation secret is stored in this iPhone’s Keychain and sent in the HTTPS authorization header; the server derives a hashed installation identifier and does not store the raw secret. The hosting infrastructure receives network information such as IP addresses, request times, paths and technical connection information when you use the service or visit this website. We do not add analytics, advertising, location tracking or third-party sign-in SDKs.
How we use information
Local records support inventory, order fulfilment, bookkeeping, purchase planning, local reminders and CSV reports. Optional cloud backup keeps a current copy for this installation and retries pending changes while the app can run. Revisions and mutation receipts prevent conflicting writes and duplicate or stale requests. Technical infrastructure information is used to deliver, secure and diagnose the service. We do not use customer details to send messages or marketing. Only enter customer information you are entitled to use for your shop’s work.
Service providers and sharing
When cloud backup is enabled, shop records are processed by the application backend and PostgreSQL database hosted on Railway. Railway provides the hosting and networking infrastructure and may process associated technical logs. Apple provides the iPhone operating system, Keychain, system photo picker, local notification scheduling and share sheet; device services operate under your Apple settings. A CSV report is shared only with the destination you choose in the iOS share sheet. The app does not integrate an advertising network, analytics service, email delivery service or other external business integration. We do not sell shop or customer records.
Data retention
Local records remain until you remove them or delete all shop data. The cloud service keeps the latest snapshot until it is replaced or deleted. It does not keep a browsable history of older snapshots. After cloud deletion, the server retains only the hashed installation identifier, revision and update time, and mutation identifiers, payload hashes and revision receipts to prevent stale requests from recreating deleted records. There is no scheduled expiry for this minimal anti-replay metadata. Infrastructure logs and any infrastructure-level backups follow the hosting provider’s configuration and retention; we do not assert a fixed retention period or immediate removal from those copies. The app does not create a separate archive service. Exported CSV files and copies shared to other apps are controlled by you and those destinations.
Deleting your information
Use Settings, Delete all shop data to clear local products, photos, orders, expenses, tasks and preferences. The app also sends an authorized deletion request to erase the cloud snapshot. If offline, it preserves a deletion request and retries when the app can reach the service; keep the app installed and open it online to complete this step. Disabling cloud backup stops future backup uploads but does not itself delete an existing cloud copy. Removing the app alone does not request server deletion, and Keychain persistence after removal is controlled by iOS. Cloud restoration requires the same installation secret; if that secret is lost, we cannot recover or identify your snapshot through an account. Minimal anti-replay metadata remains as described above. Deleted data may remain in infrastructure backups until their normal lifecycle removes it. Delete exported files separately from their destinations.
Permissions and your choices
The system photo picker lets you choose specific product photos without granting the app unrestricted access to your photo library. Only the chosen, resized image is stored in the product record and included in optional backup. Remove a photo in the product editor to stop retaining it in future snapshots. Notifications are local and optional; the app asks permission only when you enable reminders. You can disable reminders in app Settings or withdraw notification authorization in iPhone Settings. Existing shop records remain usable if you decline these capabilities. The app does not request contacts, camera, microphone or location access.
Your privacy rights
You can inspect and edit shop records, export orders and finances as CSV, disable backup and delete your data from the app. Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, or complain to a relevant privacy authority. For privacy questions or requests, contact cyril.ivybridge@icloud.com. This is a public privacy contact, not an in-app messaging or account system. Do not send your installation secret by email. Because there is no account directory, a request without installation authorization may not allow us to locate a particular cloud snapshot. A shop owner is responsible for handling customer information lawfully and responding to their customers’ requests.
Security
The deployed app communicates with the backend over HTTPS. A cryptographically random secret unique to the installation is held in Keychain with this-device-only accessibility. The server authorizes access using the secret’s hash and isolates snapshots by that identifier. PostgreSQL uses parameterized queries, transactional revision checks and mutation receipts. Local files are written atomically with iOS file protection. The backend limits request size and does not intentionally log authorization headers or shop payloads. These measures reduce risk but cannot guarantee absolute security. Protect access to your iPhone and any exported reports.
Children’s privacy
Floral Growth Studio is intended for adults managing a flower shop and is not directed to children. It does not offer child profiles or collect an age for account registration. Do not enter children’s information unless you have an appropriate lawful reason and any required permission. Contact the privacy email if you believe information concerning a child needs attention.
Changes to this policy
We may update this policy when the application’s processing or hosting practices change. The effective date at the top identifies the current version. The policy is available from the app’s Settings and this public website without signing in. Material changes will be reflected in the policy and, where appropriate, in the application or its release information.