Privacy Policy

Last updated: 18 June 2026

Flourich ("we", "our", or "us") operates the Flourich mobile application (the "App"), a two-sided marketplace connecting businesses with content creators. This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and your rights over it.

1. Who This Policy Applies To

This policy applies to all users of the Flourich App and website (flourich.co.uk), including businesses ("Customers") and content creators ("Creators").

2. Information We Collect

2.1 Account & Identity Information

Name — your full name and/or display name, collected at registration and linked to your account.
Email address — used to create and authenticate your account, and for transactional communications.
Password — stored in hashed form via Supabase Auth. We never store your plaintext password.
Sign-in via Google or Apple — if you use OAuth sign-in, we receive your name and email from that provider.

2.2 Profile Information

Creators: display name, username, biography, niche/category tags, years of experience, profile photo, and cover image.
Businesses: business name, industry, job title, profile photo, and cover image.
Location: city and address as entered by you on your profile. We do not collect your precise GPS location automatically.

2.3 Booking Information

Service selected, shoot date and time, shoot location (an address you provide), project brief, and any notes shared between the parties.
Booking status history (e.g. accepted, completed) to operate the marketplace workflow.

2.4 Photos and Videos

Portfolio content: Creators may upload photos and videos to their public portfolio via the camera or photo library.
Booking deliverables: Creators upload the content they produce for a booking; this content is made available to the relevant business.
Files are stored in Supabase Storage (hosted on AWS). We do not share or sell your media to third parties.

2.5 Payment Information

Payments are processed entirely by Stripe. We do not store your card number, CVV, or full payment details. We store only Stripe's payment identifiers (Payment Intent IDs) and payment status to track booking transactions. Stripe's data handling is governed by Stripe's Privacy Policy.

2.6 Location Data

We do not access your device's GPS or precise location without your explicit action. Location data in Flourich comes only from addresses you manually type (using Google Places Autocomplete) when creating a profile or booking. We do not use background location tracking.

2.7 Device & Technical Data

We may collect standard technical information such as device type, operating system version, and session identifiers to operate and improve the App. We do not collect advertising identifiers (IDFA/GAID) and we do not use any cross-app tracking.

2.8 Usage Data

We may collect information about how you interact with the App (screens viewed, features used) in aggregate to improve the service. No dedicated analytics SDK is embedded; usage events may be logged through Supabase.

3. How We Use Your Information

Purpose	Data used
Create and manage your account	Name, email, password
Match businesses with creators	Profile info, location, niche, portfolio
Facilitate bookings and payments	Booking details, Stripe payment IDs
Deliver booked content	Photos and videos uploaded as deliverables
Communicate about your account	Email address
Resolve disputes and support requests	Booking history, account data
Comply with legal obligations	Any data required by law
Improve and secure the App	Aggregated usage and technical data

We do not sell your personal data. We do not use your data for advertising or cross-context behavioural tracking.

4. How We Share Your Information

Between users: Creator profiles (name, bio, portfolio, location) are visible to businesses on the platform. Booking details are shared between the relevant creator and business.
Supabase: Our database, authentication, and file storage provider. Data is stored on AWS infrastructure under Supabase's Privacy Policy.
Stripe: Our payment processor. Payment data is handled under Stripe's Privacy Policy.
Google (Places API): Address search uses Google Places Autocomplete. Address text you type is sent to Google's API. See Google's Privacy Policy.
Legal requirements: We may disclose data if required by applicable law, court order, or to protect the rights and safety of our users.
We do not share your data with advertisers or data brokers.

5. Data Linked to You (Apple App Store)

The following data types are collected and linked to your identity in the Flourich App:

Name
Email address
Photos and videos
Location (city / address as manually entered)
User content (booking briefs, profile information)
User identifier

None of this data is used for tracking you across other companies' apps or websites.

6. Device Permissions

The App requests the following device permissions when relevant features are used:

Camera — to capture photos and videos for your portfolio or booking deliverables.
Microphone — to record audio when capturing video content.
Photo Library (read) — to select existing photos/videos from your device to upload.
Photo Library (write) — to save delivered content to your camera roll.

You can revoke any permission at any time in your device's Settings. Some features will be unavailable if permissions are denied.

7. Data Storage and Security

Your data is stored securely using Supabase on AWS infrastructure. We use encrypted connections (HTTPS/TLS) for all data in transit, and row-level security policies to ensure each user can only access their own data. Media files are stored in private Supabase Storage buckets.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. You may request deletion of your account and all associated data at any time by contacting us (see Section 11). Upon deletion, your data is removed from our live database within 30 days. Anonymised or aggregated data not linked to you may be retained for analytical purposes.

9. International Transfers

Flourich is operated from the United Kingdom. Your data may be processed on servers located outside the UK or EEA (including the United States, where AWS and Stripe infrastructure is based). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR.

10. Your Rights

Under UK GDPR and applicable data protection law, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Erase your data ("right to be forgotten")
Restrict processing in certain circumstances
Port your data to another service
Object to processing based on legitimate interests
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@flourich.com. We will respond within 30 days.

11. Children's Privacy

The Flourich App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, via in-app notification. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Flourich
Email: privacy@flourich.com
Website: flourich.co.uk