Privacy Policy

In short. Flowerbook counts your steps on your iPhone and keeps your journal there. Your notes and photos never leave your phone unless you turn on the optional notes backup that comes with Plus. Your daily step totals and the flowers you collect are stored with your account on our servers, so they follow you to a new phone. We use Google Firebase to run the app and Apple to process payments. We don't sell your data, show ads, or track you across other apps and websites.

This policy covers the Flowerbook app for iPhone (previously named Walk Flower) and the website walkflower.com (together, the "Service"). Flowerbook is made by Tem Ab, an individual developer based in the United States ("we", "us"). We are responsible for the personal data described here. Questions go to gas.app.developers@gmail.com.

1. Information we collect

Steps and activity

The app reads step counts from your iPhone's motion sensor (Motion & Fitness) and, if you allow it, from Apple Health. From Apple Health we read step count. If you turn on the deeper walking statistics that come with Plus, we also read your walking distance, floors climbed, walking speed, step length, steadiness and balance from Apple Health. We never write to Apple Health. Your step history and all of your statistics are computed and stored on your device and are never uploaded.

Your account stores your daily step totals, the flowers you collected each day and your streak on our servers. This is how your flowers are kept safe when you change phones, and it is what the friends features show when they are available. We don't upload minute-by-minute data, routes or location.

Your journal

Every day you walk gets a page in your journal: its flower, the date and your steps. You can write a note on it and add photos. Notes, their styles, where you placed flowers and photos on the page, and the photos themselves are stored on your device. When you add a photo, the app uses the system photo picker, which gives it only the picture you select, or the camera, if you allow it. Cutting a subject out of a photo happens entirely on your phone.

If you have Plus and turn on Settings → Backup → Notes, your notes, their styles and the placement and frame settings of your flowers and photos are copied to our servers and kept with your account, so you can get them back on a new phone. Photos are never uploaded, even with the backup on. Turning the backup off deletes the copy from our servers. The backup is readable only by your account.

Your account

• Account identifier. When you start using the app, it creates an anonymous account with a random user ID. No name, email address or phone number is needed for it.
• Phone number. If you sign in with your phone, Firebase Authentication sends a verification code by SMS. Your verified number is stored with your private account record.
• Google account. If you sign in with Google, Google shares your name and email address with Firebase Authentication. We use your name only to suggest a display name. We don't copy your email into our database.
• Apple account. If you sign in with Apple, Apple shares your name (once, on the first sign-in) and your email address, or a private relay address if you choose to hide your email, with Firebase Authentication. We use your name only to suggest a display name. We don't copy your email into our database.

Your profile

If you set up a profile, it holds your display name, your @username, an optional profile photo, your favorite flowers and lifetime totals (steps, flowers and active days). Friends, invites and the people you mute are stored with your account.

Purchases

Payments are handled by Apple. We never see your card details or your Apple ID. Your Plus subscription is checked on your device with the App Store; the app doesn't send us your transaction record. If you earn Plus time another way, for example through a promotion, we keep a record of what was granted to your account and until when. Earlier versions of the app sold Walkflower token packs; the records of those purchases (transaction ID, product, quantity, purchase date and store environment), the token ledger and any cosmetic items owned are kept with the account as described in section 6.

Notifications

If you allow notifications, we store a push token for your device so we can send account notifications, such as a friend joining through your invite. Reminders about your flower are scheduled on your device.

Usage analytics

The release version of the app sends usage events to Google Analytics for Firebase. Examples are opening the app, finishing onboarding, collecting a flower, writing in the journal, and starting or completing a purchase. Events carry no note text and no photo. They are tied to a random install identifier stored on your device, not to your name, phone number or step counts. Google may also collect technical data such as device model, OS version, app version and approximate location derived from your IP address. The app does not ask for permission to track you, so it can't access your device's advertising identifier.

Separately, the app records with your account, for each day you use it, how many times you opened it, roughly how long it was open, and the app version. We use this to see how the app is doing overall.

Support emails

When you write to us from the app, the subject line includes the app version and your user ID so we can find your account. We keep the email and anything you choose to include.

Photos

You choose a profile photo with the system photo picker, which gives the app only the picture you select. We resize it before uploading. Journal photos are described above and stay on your device.

2. How we use information

• To run the app: count steps, bloom and collect flowers, keep your journal, and show your Home and widget screens.
• To keep your flowers, and your notes if you back them up, with your account so you can get them back on a new phone.
• To run the friends features, where available: show your profile and daily totals to friends, send and accept invites, and let people find your username.
• To provide Plus features and handle refunds through Apple.
• To send notifications you've allowed.
• To understand how the app is used, fix problems and decide what to improve, using aggregate analytics.
• To answer support requests and to prevent abuse and fraud.

We don't use your information for advertising, don't sell it, and don't share it for cross-context behavioral advertising. We don't read your notes. We don't make automated decisions that have legal or similarly significant effects on you.

If you are in the EU, the UK or a similar jurisdiction, our legal bases are: performance of our contract with you (running the app, keeping your account, Plus), legitimate interests (analytics, security and fraud prevention, support), consent (Apple Health, notifications, camera and photos, which you control in iOS Settings, and the notes backup, which you switch on in the app), and legal obligations (purchase records).

3. What other people can see

Your journal is private. Your notes and photos are never shown to anyone else, and we don't read them.

Flowerbook has friends features. They are currently switched off in the app, but the data that supports them is still stored with your account, so please assume the following can be seen by other Flowerbook users:

• Your public profile: display name, @username, profile photo, favorite flowers and lifetime totals.
• Your daily entries: daily step totals, the flowers you collected each day, and your streak.

Technically, they can be requested by any signed-in Flowerbook user who knows your user ID or username. Profile photos are served from links that work for anyone who has the link. Don't put anything in your profile you wouldn't want other people to see.

When you share an invite link, anyone who opens it in the app sees your display name and @username. The website no longer shows invite pages: an invite link opened in a browser goes to the home page.

Your phone number, email address, the people you've muted, your purchase records, your notes backup and your inbox are private to you.

4. Service providers

We use these companies to run the Service. They process data on our behalf under their own terms:

Links you choose to share through other apps, such as Messages, WhatsApp or Instagram, are handled by those apps. We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a transfer of the Service to a new owner, who would be bound by this policy.

Older versions of the app also connected to a server we operate directly, identified only by an anonymous install identifier. Current versions don't use it.

5. International transfers

We and our providers are based in the United States, and your data is processed there. Where the law requires it, transfers rely on our providers' standard contractual clauses or equivalent safeguards.

6. How long we keep data

• Step history, statistics, your journal and its photos stay on your device until you delete the app.
• Account, profile, flower and daily-entry data are kept while your account exists.
• Your notes backup is kept while the backup switch is on, and deleted from our servers when you turn it off.
• Past weeks' daily entries are kept as part of the history for the weeks you took part in.
• Plus grant records and the purchase and token records from earlier versions are kept as long as we need them for accounting, refunds, fraud prevention and legal obligations, including after you delete your profile.
• The per-day record of your app use is kept with your account.
• Google keeps analytics data for up to 14 months.
• Support emails are kept for as long as they're useful for answering you.

7. Deleting your data

In the app, go to Settings → Account Management → Delete profile. This immediately removes your public profile, profile photo, username, invite link and this week's daily entry. It also clears your name, phone number, photo and push token from your account record, and signs you out.

If you backed up your notes, turn Settings → Backup → Notes off before deleting your profile. That deletes the copy on our servers. If you forget, email us and we'll remove it.

Some data stays after that: your sign-in record with Firebase Authentication, your Plus grant and purchase records, past weeks' daily entries (which carry your user ID but not your name), the per-day record of your app use, and records of invitations and friendships other people hold. To have all of this erased, email gas.app.developers@gmail.com from the app's Support link. We'll complete the request within 30 days. We'll keep only what we must keep by law.

Deleting the app removes the data stored on your device, including your journal and photos. Without a phone, Google or Apple sign-in, an anonymous account can't be recovered after the app is deleted.

8. Your choices and rights

• Permissions. You can turn off Motion & Fitness, Apple Health, notifications and camera access in iOS Settings at any time. You can also switch Apple Health off in the app.
• Backup. The notes backup is off until you turn it on, and you can turn it off at any time.
• Profile. You can edit your name and photo at any time, and mute or remove friends.
• Access, correction, deletion, portability and objection. Depending on where you live, you may have the right to get a copy of your data, correct it, delete it, receive it in a portable format, restrict or object to its use, and withdraw consent. To use any of these rights, email us. We may ask you to confirm the request from the app so we know the account is yours. If you're in the EU or UK, you can also complain to your local data protection authority.
• California and other US states. We don't sell or share personal information as those terms are defined in US state privacy laws. You can ask what we hold and ask us to delete it. We won't treat you differently for using your rights.

9. Children

Flowerbook is not meant for children under 13, and we don't knowingly collect personal data from them. If you are under the age of digital consent where you live, sign in and use any friends features only with a parent's or guardian's permission. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

10. Security

Data is sent over encrypted connections. Our database rules limit who can read and write each record, and private records, your notes backup included, are readable only by their owner. No system is perfectly secure, and we can't guarantee absolute security.

11. walkflower.com

The website uses no cookies and no advertising. It counts visits with Vercel Web Analytics, which sets no cookies and stores no identifier on your device. It records the pages you view, where you came from (the referring site and any campaign tags in the link, such as utm_source), your browser, operating system, device type and country, and whether you tapped a link to the App Store. Visits are grouped using a hash that changes every day, so they can't be linked to you or followed across days or sites. Invite codes are removed from these statistics. Our host, Vercel, also keeps standard server logs, such as IP address, browser and pages requested, to deliver the site and keep it secure. The demo video on the home page is served from Google Cloud Storage. Invite pages store the countdown in your browser's local storage, and the campaign tags of your visit are kept in session storage until you close the tab. When you tap a link to the App Store, the campaign name (for example the ad you came from, or "web") is added to that link so Apple can tell us, in aggregate, how many installs each campaign brought.

12. Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use your data, we'll let you know in the app before it takes effect.

13. Contact

Tem Ab
gas.app.developers@gmail.com