Privacy Policy

Last Updated: May 22, 2026

1. Introduction

This Privacy Policy explains how FlowerSandbox ("we", "our", or "the App") collects, uses, and protects your information when you use our mobile application and related services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Your email address when creating an account or logging in.
  • Payment Information: Processed securely through our third-party provider, Stripe. We do not store your credit card details on our servers.
  • User Preferences: Settings and layouts related to your virtual garden configurations.

2.2 Automatically Collected Information

  • Device Details: Device model, operating system version, and general diagnostic information.
  • Usage Statistics: Interactivity logs showing layout edits and subscription updates.
  • Error Tracking: Crash reports to help us maintain a bug-free service.

3. How We Use Your Information

  • To provide, operate, and maintain our application features.
  • To process payments and verify active subscriptions.
  • To optimize performance and correct software errors.
  • To contact you with administrative notifications and app support updates.

4. Data Storage and Security

Your database transactions and user account profiles are stored securely using Supabase. Payments are routed through Stripe. We enforce industry-standard TLS encryption protocols on all data transmission lines.

5. Third-Party Services

We work with the following secure sub-processors to power the App's capabilities:

  • Stripe: Payment transaction processing.
  • Supabase: Backend database management and authentication.
  • Expo: Over-the-air binary updates.

6. Your Rights

You have full access control over your data. In particular, you have the right to request access to your records, correction of inaccuracies, deletion of your account, and cancellation of automatic renewals.

7. Data Retention

  • Account Profiles: Retained until you request account deletion.
  • Payment Records: Retained for financial auditing as required by applicable laws.
  • Diagnostics & Logs: Deleted automatically after 90 days.

8. Children's Privacy

Our app does not knowingly collect or solicit personal information from children under the age of 13. If you believe a child has submitted data, contact us for prompt removal.

9. Changes to Privacy Policy

We may update this policy occasionally. We will notify you of major revisions by updating the date listed at the top of this policy and providing in-app banners.

10. Contact Information

For questions or privacy concerns, please contact the developer:

Scott Beilfuss
beilsco@gmail.com

11. California Privacy Rights

California residents are granted specific data protection rights under the CCPA, including information disclosure and non-discriminatory service access.

12. International Users

Your database records are processed and securely stored within servers hosted in the United States.

13. Data Protection

We employ encryption at rest, secure API tokens, and continuous firewall monitoring to shield your account from unauthorized intrusions.