Last Updated: October 28, 2026
This policy explains what Florecho: Plant Identifier (the "App"), an iOS app published by TuranliApp, does with your information. It covers Florecho only; where the general TuranliApp Privacy Policy differs, this page applies.
In short: no account, no ads, no tracking, and we do not sell your data. A photo leaves your device only when you start an AI scan, and a question only when you ask one. My Garden, care settings and reminders stay on your device. We keep no server copy of your scans.
İsmail Turanlı, trading as TuranliApp in Austria, is responsible for this processing (the "controller"). Contact: ismailturanli91@gmail.com.
| Information | When and why | Who receives it | Kept for |
|---|---|---|---|
| The photo (or two photos) you choose, the scan type and the App language | Only when you start an AI scan, to identify the subject and describe what the photo shows | AIProxy, which forwards it to OpenAI | OpenAI: up to 30 days in abuse-monitoring logs. AIProxy: request metadata, and the response only when a request fails, 30 days |
| A question you type, with the result it is about (names, confidence, visible evidence, hazards, care summary). No photo is sent | Only when you ask a question about a result, to answer or decline it | AIProxy, which forwards it to OpenAI | As above |
| Random installation identifiers and a device-integrity signal | With each AI request, for device verification, security, abuse prevention and the daily limit | AIProxy and OpenAI; the device-integrity signal is checked with Apple (DeviceCheck) | AIProxy and OpenAI: as above |
| IP address and request details (App version, iOS version, device model, request size), and an error report with the same details if device verification fails | Automatically, when an AI request is sent or fails verification | AIProxy | 30 days |
| Crash reports: technical crash details, App and iOS version, device model and hardware details, random Firebase identifiers, App opens, and the type of error when saving to My Garden fails | When the App crashes, opens, or fails to save, to find and fix problems. Crash reports never include photos, notes, plant names or results | Google (Firebase Crashlytics) | 90 days |
| Purchase information: a random App User ID, your device's identifier for vendor (IDFV, a device identifier Apple shares among apps from the same developer), the products you buy, your subscription status and history, and technical details such as IP address, App version and iOS version. Never your payment-card details | In versions that offer a subscription: when the App opens, to show prices and check your access, and when you buy or restore a purchase, to confirm it | RevenueCat (Apple processes the payment itself) | As long as needed to manage your subscription, under RevenueCat's policy |
| Your emails to us | Only if you contact us, to answer you | TuranliApp | As long as needed to answer and keep support records |
Photograph only the plant, tree, insect, bird or bark you want identified. Anything visible in the photo is sent, so leave out people, faces, documents and screens. Do not type personal information, or anything about a person's or an animal's health, into a question; the App declines health questions and does not give medical advice.
Source links. If you tap a link to check a result yourself, the website opens in your browser: for Kew's plant database and Wikipedia, the plant's name is sent as the search. Those sites handle it under their own privacy policies.
Requests are encrypted in transit. The App shrinks the photo before sending it, and the full OpenAI key is not stored in the App: AIProxy checks the device and forwards only authorized requests. Florecho asks OpenAI not to store the request, and OpenAI states that API data is not used to train its models unless the customer opts in (see OpenAI API data controls and the AIProxy Privacy Policy).
The installation identifiers are one-way hashes of a random value created for this installation. They are not based on your name, email, Apple Account, photos or advertising identifier, and deleting the App discards the random value. They are pseudonymous, not anonymous: they can tell one installation's requests apart, so we treat them, and the IDFV RevenueCat receives, as personal data.
My Garden (plant photos, nicknames, notes, saved results and dates), care settings (pot, light, water need, last watering, reminder time) and App preferences are stored only on your device, protected by iOS Data Protection. They are never uploaded to us or to a provider, so we cannot restore them. Care reminders are scheduled by iOS on your device and show the plant's nickname, which may appear on your lock screen depending on your notification settings. Searching the built-in plant list sends nothing. You can delete a plant or a scan in the App; deleting the App removes everything, subject to your device backups.
Camera, to photograph a plant, and for the light meter, which reads the camera's exposure settings without taking or sending a photo. Photos, to pick a photo through Apple's photo picker. Notifications, for your care reminders. All are optional and can be changed in iOS Settings.
AIProxy, OpenAI, Google, RevenueCat and Apple may process information in the United States and other countries. They do so under their own data-protection terms and transfer safeguards, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent. Because scans are not tied to an account and we keep no server copy, we usually cannot find a particular scan, but we will help with any request about data we control. Write to ismailturanli91@gmail.com; we normally reply within 30 days. You can also complain to a data-protection authority, such as the Austrian Datenschutzbehörde or the one where you live.
Florecho is not directed at children under 13 and does not ask for a child's name, contact details or location. Children should use it with a parent or guardian and should not photograph people or type personal information. If you think a child has sent us personal information, contact us.
We will update this policy when Florecho's features, providers or the law change, revise the date at the top, and publish important changes before the affected App version is released.
Your use of Florecho is governed by the Florecho Terms of Use. This policy explains how we handle information and is not part of that agreement.