"PRIVACY POLICY"

1. Who We Are

FLUO-LIME ("the App", "we") is a mental health journaling and community app. This policy explains what we collect, why, where it is stored, who can see it, and the choices you have. Contact: privacy@fluolime.com.

2. Information You Give Us

Account: email address (or the Apple relay address if you use Sign in with Apple), password (stored only by Firebase Authentication, never readable by us), first and last name (kept private, visible only to you), @username, FLUO NAME, bio, avatar and cover choices, mental-state badges, optional social links (Snapchat, X, Instagram) and your visibility settings. Content: freethinks, journals and entries, mood tracker results, mood halos, mental notes and their drafts, Image Gallery photos and journal photos (with their titles and icons), Wellbeing pages, life moments, collections, likes, reblogs, bookmarks, follows, follow requests, blocks and reports.

3. Health-Related Information

Mood results, halos, journal entries, mental notes and mental-state badges can reveal information about your mental health. This is sensitive information. You choose what to post and who can see each post (Public, Followers or Private). We use it only to run the App for you and the people you share with. We never use it for advertising and never sell it.

4. Information Collected Automatically

Device identifier: the App creates a random identifier stored on your device. A scrambled (hashed) version is sent to our server only to limit how many accounts can be created from one device (anti-spam). App verification: Apple App Attest / Firebase App Check confirm requests come from the genuine App. Push notifications: if you allow them, a notification token for your device is stored so we can notify you of follows, likes and reblogs. Purchases: when you subscribe, Apple's transaction identifiers and expiry date are linked to your account so our server can confirm your Fluo-Lime+ access. We never receive your payment card details. Security: failed sign-in attempts with an @username are counted for a short time to block password guessing. We do NOT use analytics, advertising or tracking tools, and we do NOT collect your location, contacts or advertising identifier.

5. How We Use Your Information

To create and run your account; to show your content to the people allowed to see it; to send the notifications you enabled; to verify subscriptions; to prevent spam, abuse and fake accounts; to moderate content and handle reports; to keep the App secure; and to comply with the law.

6. Automatic Moderation

Text you post is checked by an automatic filter for prohibited words. Every photo you upload is analyzed automatically by Google Cloud Vision. Photos detected as showing people or faces, animals, drawings or statues of beings, alcohol, drugs, religious symbols, or explicit, violent or medical content are deleted automatically, as are photos the analysis cannot read. Images are sent to Google only for this analysis.

7. Who Can See Your Information

Posts follow the visibility you choose: Public (all members), Followers (only followers you approved) or Private (only you). Your profile basics (FLUO NAME, @username, avatar, cover, bio, mental-state badges and follower counts) are visible to all signed-in members, even when your profile is set to Private. Social links follow the visibility you chose for them. Your email and real name are never shown to other members. People you block cannot follow you or interact with you.

8. Service Providers and Data Location

We use Google Firebase and Google Cloud (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, App Check, Cloud Vision) and Apple (Sign in with Apple, App Store payments, push notifications). Your data is stored in Montréal, Canada (northamerica-northeast1). Some processing (server functions, image analysis, push delivery) may happen in the United States or other countries where these providers operate. We do NOT sell your data and do NOT share it with advertisers. We may disclose information if required by law or to protect someone's safety.

9. Sign in with Apple

If you use Sign in with Apple, we receive only the information you choose to share. Apple's "Hide My Email" is supported. We never have access to your Apple ID password. When you delete your account, your Sign in with Apple authorization is revoked.

10. Data Retention and Deletion

We keep your data while your account is active. You can delete your account anytime in Settings > Delete my account. This permanently deletes your profile, posts, photos, journals, drafts, likes, follows, notifications and your sign-in account. Reports you filed or that concern you may be kept as long as needed for safety and legal reasons. Technical records are kept briefly: notification logs about 2 days, anti-spam device counters 30 days. Copies may remain in our providers' systems for a short period under their own policies. Data cached on your device is cleared when you log out.

11. Your Rights

You can view and edit your profile at any time, change the visibility of your posts, block members and delete your account in the App. You can also ask us for a copy of your data, a correction, or deletion by writing to privacy@fluolime.com. We answer within 30 days. If you are in Canada, you may contact the Office of the Privacy Commissioner of Canada if you are not satisfied with our answer.

12. Children

You must be at least 13 years old to use FLUO-LIME. We do not knowingly collect data from children under 13. If we learn that a child under 13 has an account, we will delete it.

13. Security

Data is encrypted in transit. Access is protected by Firebase security rules, server-side checks and App Check. No system is perfectly secure, so please use a strong password and keep your device locked.

14. Changes to This Policy

We may update this policy. The date at the top shows the latest version, and we will tell you in the App about important changes.

15. Contact

Privacy questions and data requests: privacy@fluolime.com. Other questions: support@fluolime.com.