Privacy Policy

About Fleuret. Fleuret is a peer-to-peer plant community where users list plants from their personal collection, browse nearby listings, and propose trades with other users. No money changes hands on Fleuret; plants only. Optional paid subscriptions unlock higher listing limits and other features.

Fleuret LLC ("Fleuret," "we," "us," or "our") respects your privacy. This Privacy Policy ("Policy") explains what information we collect when you use the Fleuret mobile application and related websites and services (the "App"), how we use and share it, how long we keep it, and the rights and choices you have. Capitalized terms not defined here have the meanings given in our Terms of Use.

By creating an account or using the App, you acknowledge this Policy and agree to our Terms of Use. If you do not agree, do not use the App.

1. Information We Collect

We collect information you provide, information generated when you use the App, and information we receive from the companies that help us run it. We collect only what we need to operate, secure, and improve the App.

The App does not use cookies, and we do not use third-party advertising or tracking tools.

2. Location

Fleuret is built around trading with people nearby, so the App needs your approximate location to work.

• We never ask for your exact location. The App does not request your phone’s precise GPS position. It asks only for a lower-accuracy reading, typically accurate to about 100 meters (roughly a city block).
• We never store your exact location. As soon as that reading reaches our servers, we reduce it to an area roughly half a mile across, and store only that area. The reading itself is never saved, so there is no record of exactly where you were, ever.
• You can make it even less precise. In your iPhone’s Settings, under Fleuret → Location, you can turn off Precise Location. The App will still work using the approximate location your iPhone provides, though distances to nearby plants will be less exact.
• Other users never see your location. They may see an approximate distance to your listings, but never your coordinates.
• We keep only your most recent approximate area. It is updated when you use the App and replaced, not added to a history.
• You can revoke location permission at any time in your device’s settings. Without it, the App cannot show you nearby plants, and your listings will not appear to other users. Revoking permission stops future updates. The last approximate area we stored stays on your account until you grant permission again or delete your account.

3. How We Use Information

We use the information described above to:

• provide, operate, and maintain the App and its features, including showing you plants and people near you, enabling trades, and delivering messages and notifications;
• create and secure your account, and authenticate you;
• process subscriptions and enforce the features of each tier;
• communicate with you about your account, trades, subscriptions, and changes to the App or our policies;
• improve the App, including through aggregated analysis of how it is used and by training our plant-identification model (Section 4);
• detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Use; and
• comply with the law, enforce our agreements, and protect the rights, property, and safety of Fleuret, our users, and others.

We do not use your information for purposes materially different from these without telling you first.

4. Plant Identification and Machine Learning

Identification runs on your device. The App identifies plants from photos using a machine-learning model that runs on your phone. Your photos are not sent to us to identify a plant.

Plant ID contributions (on by default). When you list a plant, we record a reference to its cover photo, the model’s suggestion, and the species you confirm or correct. We use these records to train and improve our plant-identification model. You can turn this off at any time in Settings. When you do, we delete your previous contributions and stop recording new ones.

Plant sightings (on by default). When you list a plant, we may record its species and the same approximate area described in Section 2, to understand which plants are found where. Sightings are never shown to other users with your identity. You can turn this off at any time in Settings.

4.1 Training Data vs. Model Weights

Training data. "Training data" means the user-contributed inputs we use to train or fine-tune a model. For Fleuret, this is the photo reference and species label recorded through Plant ID contributions. Training data is associated with your account in our systems and is deletable.

Model weights. "Model weights" are the mathematical parameters of a trained model that result from the training process. Model weights are derivative artifacts; they are not, in themselves, copies of any individual user's training data. Once a model has been trained, the weights do not contain identifiable images, embeddings, or labels that can be retrieved as such. They are, in effect, anonymized and do not contain any personally identifiable information.

What this means for deletion. If you turn off Plant ID contributions, or if you delete your account, we will delete your training data from our training pipeline and our active datasets. Because model weights are derivative and do not contain a retrievable copy of your training data, we are not able to "un-train" or remove individual contributions from weights of models that have already been trained. We retain previously trained model weights and may continue to use them. Any future re-training will not include your contributed data unless you turn the feature back on.

This distinction is consistent with how data deletion is generally understood under U.S. privacy laws including the CCPA: an obligation to delete personal information from records and active datasets does not extend to derived statistical artifacts that do not themselves contain that personal information.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5.1 With Other Users

Fleuret is a community, so some information is visible to other users by design: your username, profile photo, bio, and any other profile details you choose to add; your listings and their photos; your badges and trade history statistics; and your event RSVPs. Trade chat messages are visible to the other person in that trade.

5.2 With Service Providers

We share information with companies that provide services to us, only as needed for them to provide those services. These include providers of:

• cloud hosting, database, and file storage;
• sign-in (Sign in with Apple and Sign in with Google);
• subscription management and purchase validation;
• app delivery, app updates, and push notifications; and
• website hosting, domain, and email services.

Our service providers may use your information only to provide their services to us, not for their own purposes, and must protect it to the same standard described in this Policy. Payments are processed by Apple; neither we nor our service providers receive your payment card details.

5.3 For Legal and Safety Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with a subpoena, court order, or other legal process; (b) enforce our Terms of Use or this Policy; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Fleuret, our users, or the public.

5.4 Business Transfers

If Fleuret is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction, subject to the protections of this Policy or with your consent.

6. Your Choices

• Profile. You can review and update your profile information at any time in the App.
• Location. You can grant or revoke location permission in your device’s settings (see Section 2).
• Notifications. You can turn push notifications off in your device’s settings or in the App’s notification settings.
• Optional features. You can turn Plant ID contributions and plant sightings off, or back on, in the App’s Settings (see Section 4).
• Account deletion. You can delete your account at any time by tapping Delete Account in the App’s Settings. This deletes your account, profile, listings and photos, trades and messages, follows, badges, event RSVPs, referrals, and Plant ID contributions, subject to Section 7.

7. How Long We Keep Information

We keep information only as long as we need it for the purposes in this Policy, unless the law requires or permits us to keep it longer.

We may keep information longer where the law requires it, or where it is needed to resolve disputes, prevent fraud or abuse, or enforce our agreements. Deleted information may remain for a short period in our service providers’ systems, such as logs, before it is removed.

8. Data Security

We use commercially reasonable administrative, technical, and physical measures designed to protect your information from loss and from unauthorized access, use, alteration, or disclosure. These include encryption in transit, access controls on our systems, and authentication managed by Apple, Google, and our hosting provider.

No system is completely secure, and we cannot guarantee the security of information transmitted to or through the App. Messages and content you send through the App can be read by the users you share them with, so think carefully about what you choose to share.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

• request a copy of the personal information we hold about you;
• request that we correct inaccurate personal information;
• request that we delete your personal information;
• object to or request that we restrict certain processing; and
• receive your information in a portable format.

To make a request, email privacy@fleuret.app from the email address associated with your account, or use Delete Account in the App’s Settings. We will verify your identity by matching the email address associated with your account, and respond within 45 days. You may designate an authorized agent to make a request on your behalf, subject to verification. We will not discriminate against you for exercising any of these rights.

10. Age Requirement and Minors

Fleuret is for adults only. You must be at least 18 years old to create an account or use the App. We ask you to confirm your age at signup. We do not knowingly collect, use, or disclose personal information from anyone under the age of 18.

If we learn that a user is under 18, we will delete that account and the personal information associated with it. If you believe a person under 18 has provided us with personal information, please contact us at privacy@fleuret.app so we can investigate and delete the information.

Children under 13. Although Fleuret is not directed to anyone under 18, we comply with the Children’s Online Privacy Protection Act ("COPPA"), 15 U.S.C. §§ 6501–6506. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete that information immediately and terminate the associated account.

State protections for minors. Some states (including California and Florida) provide additional privacy protections for users under 18. Because Fleuret restricts use to users 18 and older, those protections should not apply to our active user base. If we become aware that a user is under 18, we will treat that account in accordance with applicable state law before terminating it.

11. California Residents — Your CCPA Rights

This section applies to you if you are a California resident. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), you have the following rights with respect to your personal information:

• Right to Know. You can request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete. You can request that we delete personal information we have collected from you.
• Right to Correct. You can request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing. Fleuret does not sell your personal information and does not share it for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes that would give rise to this right. We do not store precise geolocation (see Section 2).
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.

You can exercise these rights as described in Section 9. Deletion requests made through Delete Account in the App are verified by your signed-in account.

Categories of personal information we collect. In the past 12 months, we have collected the following CCPA categories, from the sources and for the purposes described in Sections 1 and 3: identifiers (such as username, user ID, email address, IP address, and push token); commercial information (subscription and purchase status); internet or other electronic network activity (App activity and diagnostic logs); geolocation data (approximate area only); audio, electronic, or visual information (photos you upload); and inferences (such as badges). We disclose these categories to the categories of service providers described in Section 5.2 for the business purposes described in Section 3. We keep each category for the periods in Section 7.

12. Other State Privacy Rights

Residents of other states may have similar rights under their state’s laws, and can exercise them as described in Section 9.

Some browsers and browser extensions support the Global Privacy Control ("GPC"). The App itself does not currently process GPC signals because it is a mobile-only product; we will respect a GPC signal sent through any future web interface to the extent required by applicable law.

13. U.S.-Only Service

Fleuret is operated from the United States and is intended only for users located in the United States. Our service providers are located in or operate from the United States. If you are located outside the United States, please do not use the App.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last Updated" date at the top of this Policy. If we make a material change, we will notify you in the App before the change takes effect, and may ask you to review and accept the updated Policy. Your continued use of the App after the effective date of an updated Policy constitutes your acceptance of the updated Policy.

15. Governing Law and Contact

Governing law. This Policy and any dispute arising out of or relating to it are governed by the laws of the Commonwealth of Massachusetts, without regard to its conflict of laws principles. You and Fleuret agree to submit to the exclusive jurisdiction of the state and federal courts located in Massachusetts for any matter not otherwise subject to arbitration under our Terms of Use.

Contact us. If you have any questions about this Policy or our privacy practices, or if you want to exercise your rights, please contact us: