Privacy Policy

1. Who we are

FlorAI – AI Garden Design (the “Service”) is provided by Rocket Digital Limited (“FlorAI”, “we”, “us”, “our”). Our registered address is 1603, The L Plaza, 367-375 Queens Road Central, Hong Kong. You can reach us at hello@rocketdigital.ai.

For the purposes of data protection law (including the UK GDPR, EU GDPR, and the California Consumer Privacy Act), Rocket Digital Limited is the controller of the personal data we process through the Service.

2. Summary of what we collect and why

• Photos you upload – to generate AI garden designs, identify plants, or analyze plant health.
• Account data – email address, login identifier, device identifiers, and authentication tokens, via Firebase.
• Purchase data – subscription status and transaction metadata, via RevenueCat, Apple, and Google.
• Usage data – screens viewed, actions taken, crashes, and performance, via Firebase, Google Analytics, Meta Pixel, and Vercel Analytics.
• Advertising data – device advertising identifiers and ad interactions, via Google AdMob.
• Content generation data – prompts and images sent to OpenAI, Microsoft Azure, Replicate, and Fal.ai to generate designs and answer plant questions.

3. Information you provide

Garden photos and plant photos

When you use AI Garden Design, the AI Garden Planner, Plant Identifier, Plant Scan, or Plant Health Doctor, you upload photos from your device. We use these photos only to generate the requested output (a redesign, a plant identification, or a plant health suggestion).

Account details

If you create an account, we store your email address, optional display name, and login identifiers (e.g., Sign in with Apple, Google, or email/password via Firebase Authentication).

Payment information

Payments are processed by Apple (App Store) and Google (Google Play). We never see your full card number. We receive transaction metadata through RevenueCat so we can manage your subscription entitlements.

Support messages

If you email us, we retain the content of your message and your contact details to respond and to improve the Service.

4. How we handle your images and data

Photos of your garden, patio, front yard, balcony, and plants are the most sensitive information you share with FlorAI. This section explains, in plain language, exactly what happens to them.

4.1 The journey of a photo you upload

• You pick a photo from your device gallery, or take one with the camera inside the FlorAI app.
• The photo is uploaded over an encrypted TLS 1.2+ connection to our backend on Microsoft Azure and Firebase (Google Cloud).
• We strip EXIF metadata that is not needed for the redesign – including GPS coordinates, device serial numbers, and timestamps – before we store the file.
• We forward the photo to the specific AI vendor needed for the feature you asked for (Replicate or Fal.ai for AI Garden Design and AI Landscape Design, OpenAI or Microsoft Azure for Plant Identifier, Plant Health Doctor, and the garden assistant).
• The vendor returns a result (a redesigned image, a plant name, a health tip) which we deliver back to your device.

4.2 We do not train AI models on your photos

FlorAI does not use your uploaded photos, the redesigns we generate, your chat messages, or any of your data to train, fine-tune, or improve AI models – our own or anyone else’s. Our AI vendors (Replicate, Fal.ai, OpenAI, Microsoft Azure) process your content to return a result, and our contracts with them forbid them from using your content to train their foundation models. Where a vendor offers a zero-retention or no-training configuration, we use it by default.

4.3 Where your images are stored and for how long

• In transit – photos travel over TLS 1.2 or higher.
• At rest – photos are encrypted with AES-256 on Firebase Cloud Storage and Microsoft Azure Blob Storage.
• Processing cache – the copy sent to an AI vendor is deleted from the vendor side once the job is complete (typically within minutes, and always within 24 hours).
• Your saved designs – if you tap "Save" on a design, the before photo and the generated image are kept on your account until you delete them. You can remove any saved design from inside the app at any time.
• Unsaved uploads – temporary uploads that you do not save are removed from our systems within 30 days.
• On your device – the FlorAI app may cache recent designs locally so they open quickly. Signing out or uninstalling the app clears this cache.

4.4 Plant identifier, plant scan and plant health photos

Photos you take for Plant Identifier, Plant Scan, or Plant Health Doctor are handled in the same way as AI Garden Design photos. We never link plant photos to identifiable features of people, homes, or locations. If a plant photo accidentally contains a face, a street sign, or other personal data, we ask you to retake it – but if it does reach our servers, we apply the same stripping, encryption, and deletion rules.

4.5 No facial recognition, no biometric use

FlorAI is a garden app. We do not run facial recognition on your photos, we do not build biometric templates, and we do not sell or share your images with data brokers, insurers, advertisers, or law-enforcement aggregators.

4.6 Who owns the photos and the AI results

You keep ownership of every photo you upload. By using FlorAI, you grant us a limited licence to process your photos only for the purpose of giving you the feature you asked for. To the maximum extent permitted by law, we assign to you any rights we may have in the specific AI outputs generated from your photos, so you can use them for personal and commercial garden planning.

4.7 Data minimisation

We only collect the information that is needed for the feature you are using. You can use the Plant Identifier without creating an account. You can use AI Garden Design without sharing your location. We never ask for contacts, calendars, or unrelated device data.

4.8 Accessing, exporting, or deleting your images and data

• View all saved designs in the app under Profile → My Designs.
• Export any design or plant result as an image via the share sheet on iOS or Android.
• Delete individual items from the app at any time.
• Delete everything by following the steps on our Delete Account page or by emailing hello@rocketdigital.ai. Your photos, designs, scans, and account are permanently removed within 30 days.

4.9 When we may have to share an image

We only disclose a user photo when we are legally required to (for example, a valid court order) or when it is strictly necessary to protect someone’s safety. We challenge overly broad requests, and we publish changes to this rule in the "Changes to this policy" section below if they ever apply.

5. Information we collect automatically

• Device information (model, operating system version, language, approximate region).
• App and web events (screen views, taps, download clicks such as iOS_App_Store_Click and GooglePlay_Store_Click).
• IP address (truncated where possible) and cookie or SDK identifiers.
• Crash logs and performance metrics.

6. Third-party services we use

We carefully select vendors that support our promises to you. Each vendor processes personal data only for the purposes listed below.

Some of these vendors are based in the United States or other countries. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses, the EU–US Data Privacy Framework, or equivalent mechanisms.

7. Why we use your information (legal bases)

• Contract – to provide the AI Garden Design features, subscriptions, and customer support.
• Legitimate interests – to operate, secure, and improve the Service, and to measure performance.
• Consent – for non-essential cookies, analytics, and advertising identifiers where required by law.
• Legal obligation – to comply with tax, accounting, and law enforcement obligations.

8. How long we keep information

• Account data: while the account is active and for up to 24 months after deletion.
• Uploaded photos: only as long as needed to generate outputs, and deleted from our systems within 30 days, unless you save designs to your account.
• Analytics data: up to 26 months (Google Analytics default) or as configured.
• Payment records: retained for statutory periods (typically 7 years).

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing.
• Withdraw consent where processing is based on consent.
• Request portability of your data.
• Opt out of the sale or sharing of personal data (California residents).
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email hello@rocketdigital.ai.

10. Children

FlorAI – AI Garden Design is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We use encryption in transit (HTTPS/TLS), encryption at rest for stored data, least-privilege access, and regular security reviews. No system is perfectly secure, so we also ask you to keep your account credentials private.

12. Cookies and similar technologies

The FlorAI website uses cookies and similar technologies for essential functionality (remembering consent), analytics (Google Analytics, Vercel Analytics), and marketing measurement (Meta Pixel). You can manage cookies through your browser settings. Where required, we will ask for your consent via a cookie banner before loading non-essential scripts.

13. International transfers

Personal data may be processed in the United States, the European Union, the United Kingdom, and other countries where our vendors operate. We use Standard Contractual Clauses or equivalent safeguards.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and notify you in the app or by email where appropriate.

15. Contact

Questions, requests, or complaints? Write to us at hello@rocketdigital.ai or by post to:

Rocket Digital Limited
1603, The L Plaza
367-375 Queens Road Central
Hong Kong