Privacy Policy

1. Information We Collect

Information you provide

• Account information: email address, display name, profile photo
• Growth data: goals, seeds, reflections, journal entries, Life Focuses
• Social data: Accountability Pal connections, shared Flourish IDs, Accountability Pal relationships
• Communication data: contact form submissions, feedback, and support requests

Information collected automatically

• Essential cookies for authentication and session management
• Error reports when something goes wrong, to help us fix bugs
• Server logs for operational monitoring and security
• Anonymous usage analytics (page views, feature usage) via a privacy-focused analytics service hosted in the US, with no cross-site tracking or advertising

Information we do not collect

• We do not use advertising pixels, ad-network analytics, or cross-site tracking
• We do not collect location data, device fingerprints, or browsing history
• Our analytics are privacy-focused and self-hosted. We do not use Google Analytics or Meta Pixel

2. How We Use Your Information

• To provide and maintain the Flourish Paths service
• To send you reminders you have opted into (seed reminders, weekly reflections)
• To support the Accountability Pal connections and features you initiate
• To respond to your support requests and feedback
• To detect, prevent, and address technical issues and security threats

We do not use your personal growth data for advertising, profiling, or any purpose other than providing you the service you signed up for.

3. How We Store and Protect Your Data

Your data is protected with industry-standard practices:

• Database: Hosted on secure cloud infrastructure with row-level access controls ensuring users can only access their own data
• Hosting: Served over HTTPS with encryption for all connections
• Email: Transactional emails (reminders, notifications) are sent through a dedicated email delivery service
• Error monitoring: We use an error tracking service to detect and fix application issues quickly
• Logging: Operational logs are kept for security auditing and monitoring, automatically purged on a rolling basis

All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. We follow industry-standard security practices to keep your information safe.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with a small number of trusted service providers (cloud hosting, email delivery, error monitoring, and logging) solely for the purpose of operating the service.

Within Flourish Paths, certain data is shared only when you explicitly choose to share it, for example, when you invite an Accountability Pal or share a garden view link. You control what is shared and with whom.

We may disclose information if required by law or to protect the safety of our users.

5. Cookies

Flourish Paths uses only essential cookies required for the application to function:

• Authentication cookies: Managed by our authentication service to keep you signed in securely. These are HttpOnly, Secure, and SameSite cookies.

We also use localStorage to store an anonymous analytics identifier so we can understand general usage patterns without linking activity to your identity. This identifier is not shared with advertisers or other third parties.

We do not use advertising cookies, tracking cookies, or any non-essential cookies. No cookie consent choice is required because we only use cookies that are strictly necessary for the service to operate.

6. Your Rights

Regardless of where you live, we believe you should have control over your data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for specific purposes

To exercise any of these rights, contact us at support@flourishpaths.com. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all associated personal data within 30 days, except where retention is required by law.

Server logs and error reports are automatically purged on a rolling basis (typically within 90 days).

8. Children's Privacy

Flourish Paths is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will promptly delete it.

9. International Users

Flourish Paths is hosted in the United States. If you access the service from outside the United States, your data will be transferred to and processed in the United States. By using the service, you consent to this transfer. We apply the same privacy protections to all users regardless of location.

10. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you via the email address associated with your account. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact

If you have questions about this privacy policy or how we handle your data, please reach out:

• Email: support@flourishpaths.com
• Contact form: flourishpaths.com/contact