FloraFinds Privacy Policy & Terms

Last Updated: August 23, 2025

Who We Are

"FloraFinds", "we", "our", or "us" means Trilogy Labs LLC, United States.

Age Notice

FloraFinds is intended for users aged 13 and older. We do not knowingly collect data from children under 13.

What We Collect & Why

Category	Examples	Purpose	Legal Basis*	Retention
Account / Identity	Email (if signing in with Google/Apple), display name (optional), Firebase UID (may be anonymous)	Authentication, sync across devices, user support	Contract; Legitimate interest	Until account deletion + 180 days in backups
Plant Photos	Uploaded images; metadata (timestamp, orientation)	Identify plants via AI processing and return results	Consent; Contract	User-controlled (deletable in-app); transient copies for AI processing only
App Usage / Analytics	Crash logs, performance metrics, feature usage	Improve reliability and features	Legitimate interest	30–90 days (per Firebase defaults)
Device / Log	Device model, OS version, approximate region (IP), push notification tokens	Security, notifications, fraud prevention	Legitimate interest	Up to 90 days (tokens rotate)
Advertising (AdMob)	Advertising identifiers, device info, ad performance	Serve ads, measure effectiveness, limit frequency	Consent (where required); Legitimate interest	Per Google AdMob policy

*GDPR art. 6 legal bases; CCPA/CPRA = “business purpose”, not selling/sharing.

How We Use Data

Identify plants using GPT-4o Vision AI.
Show relevant ads through AdMob (with personalization options).
Improve stability and performance through analytics and crash logs.
Deliver notifications (if enabled).

Third-Party Services

OpenAI: Used for plant image recognition (images not stored permanently).
Firebase: Authentication, Firestore, Analytics, Crashlytics, Storage.
Google AdMob: Advertising and performance metrics.

Data Security

We apply security measures including encrypted transmission, authentication controls, and minimal data storage. Photos are deleted when you request or remove them in-app.

Your Rights

You may:

Request access to your data
Delete photos or your account at any time
Opt-out of analytics (device settings)
Control ad personalization via system settings

International Transfers

Data may be processed in the United States or other regions where Firebase and OpenAI operate. Transfers rely on EU Standard Contractual Clauses and provider safeguards.

Children’s Privacy

We do not knowingly collect information from children under 13. If you believe we have, contact us to request deletion.

Changes

We may update this policy. Significant changes will be notified in-app or by email 30 days in advance.

Contact

Email: team@trilogy-labs.com

END OF POLICY