Privacy policy

Fiorellino is a plant organizer for iPhone and Android, and this website at fiorellino.app. This policy covers the website and the app. For privacy questions, email support@fiorellino.app.

Launch wishlist

When you join the wishlist on this website, we store your email address, which sign-up form you used, the time you signed up, and an unsubscribe token. We send one confirmation email right away, and one email when Fiorellino launches. We use your email for nothing else. We don't sell it or share it for marketing.

The list is stored in our Supabase database in the European Union (Frankfurt, Germany). Only we can read it. Emails are sent through Cloudflare, which processes your address on our behalf only to deliver them. We keep your address until you unsubscribe, or until the app launches and we've sent the launch email, whichever comes first.

The confirmation email includes a link that deletes your row from the list. You can also reply to that email, or write to support@fiorellino.app. The legal basis is your consent, which you can withdraw at any time.

The app account

If you create an account, we store your email address with Supabase. Your password is stored only as a hash by Supabase, not by us in plain text. A name is optional.

You can also use the app as a guest, without a real email address. A guest garden is deleted after 90 days without use. It is also removed if you discard that guest session to sign in to a different account.

What you add

The app stores what you choose to put in it: locations and areas, plants, notes, care logs, tasks, and photos you take or pick from your library. We use that information to show your garden and to keep your care list.

Photos are stored in Cloudflare R2 in the European Union. The rest of your garden data is stored in Supabase Postgres in Frankfurt. The app servers run in the same region.

If you search for an address while adding a place, the text you type is sent to Geoapify so we can suggest matches. We keep the label you pick. We do not keep the coordinates Geoapify returns.

What we don't do

We don't sell your data. We don't run advertising, and the app has no analytics or crash-reporting SDK and no stored push-notification token. Your IP address is used only as a short-lived key to limit abusive requests. It is not saved in our database.

How long we keep it

Wishlist rows stay until you unsubscribe or until we have sent the launch email. Guest data is removed after 90 days of inactivity. A registered account, and the garden stored with it, stays until you email support@fiorellino.app and ask us to delete it. The app settings screen can log you out. It does not yet delete an account by itself.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. You can also complain to the data-protection authority in your country. Email support@fiorellino.app. There is no export button in the app yet, so we handle these requests by email.