Legal

Privacy at FindFlower

We built FindFlower to run on your device, so privacy isn’t an afterthought — it’s the architecture. This page explains, in plain language, exactly what happens to your data.

Last updated 8 July 2026 · Applies to the FindFlower Beta

The short version

  • Identification runs in your browser. Your photos are not uploaded to a server to be recognised.

  • Feedback is only ever sent when you choose to send it.

  • We don’t sell your data, and we don’t use it for advertising.

What we collect

FindFlower is designed to collect as little as possible. During the Beta, the core identification experience requires no account and no personal information.

We collect three narrow categories of data, and only in specific circumstances: account details if you sign in for developer access (handled by Auth0, such as your name and email), feedback you deliberately submit, and basic, anonymous usage information a browser naturally exposes when loading a page. We do not build advertising profiles.

How uploaded images are handled

This is the heart of our design. When you capture, upload, or link an image, the recognition model runs locally in your browser. The image is processed on your own device to produce a prediction and is not transmitted to us for that purpose.

Because the work happens on your side, your photos stay with you. When you close the tab, the image is gone from the page — we hold no copy. The one exception is if you deliberately attach a photo to a feedback submission, described next.

Whether feedback is saved, and why

Feedback is optional and always initiated by you. During the Beta, the feedback you provide is stored locally on your device so the experience keeps working offline and privately.

When the improvement pipeline launches, submitted corrections — and any photo you choose to attach — will be used for a single purpose: making future model versions more accurate. This is the human-in-the-loop that helps FindFlower recognise more species over time. We will never repurpose that data for advertising or sell it.

Sharing with third parties

We do not sell your personal data. We rely on a small number of trusted services strictly to operate the product: Auth0 for secure sign-in, and Wikipedia to fetch the reference summaries shown alongside a result. When context is loaded, a request for the species name is made to Wikipedia, subject to their own privacy terms.

Beyond these operational providers, your data is not shared. We may disclose information only where genuinely required by law.

Your privacy, in your control

You decide what to share. Nothing leaves your device quietly in the background. You can clear locally stored feedback at any time from your browser, and if you hold a developer account you can request its deletion.

If anything here is unclear, we’d rather you ask than wonder. Reach us through the contact page and a person will respond.