Floramis Pte Ltd
Privacy Policy
Last updated: 13 October 2026
This Privacy Policy explains how Floramis Pte Ltd ("Floramis", "we", "us", or "our") collects, uses, discloses, stores, and protects personal data across Floramis World, Floramis Walk, Floramis Focus, Floramis websites, and the Floramis Store.
Floramis uses a shared backend and account layer across parts of its app family. The common rules below explain that shared processing. Each product schedule then identifies the additional data and purposes for that product.
Shared foundation
Common account and backend data
Who this policy applies to
This policy applies when you use a Floramis app, create or use a Floramis account, visit a Floramis website, place or receive an order, contact support, join a group or event, or otherwise interact with Floramis.
Shared data we may process
- Platform and account identifiers: identifiers, authentication results, and account information provided through supported Apple or Google services, together with Floramis internal account identifiers.
- Profile and progression data: display name, selected profile image or avatar key, settings, entitlements, app progress, and product state connected to your account.
- Device and technical data: device type, operating system, app version, IP address, language, network and browser information, timestamps, diagnostic events, crash or error information, and security records.
- Communications: support requests, feedback, attachments you choose to send, and our responses.
Why we use shared data
We use shared data to authenticate users, operate accounts, connect app state to the correct user, deliver requested features, maintain progression and entitlements, provide support, secure Floramis, diagnose faults, prevent misuse, comply with law, and improve product reliability.
Where data comes from
We receive data directly from you, from your device and app use, from supported Apple or Google platform services, from physical Florami interactions, from our websites and Store, and from service providers acting for Floramis.
Service providers and disclosure
We may disclose personal data only as reasonably needed to service providers that host or operate our backend, identity and platform services, analytics and diagnostics, websites, commerce and payments, delivery, customer support, security, and professional services. We may also disclose data when required by law, to protect users or Floramis, or as part of a corporate transaction subject to appropriate safeguards.
Depending on the product or transaction, provider categories may include AWS-hosted infrastructure, Apple and Google platform services, Firebase services where enabled, Shopify and payment providers for Store transactions, delivery carriers, and support tooling.
International processing
Floramis and its service providers may process personal data in Singapore and other countries. Where personal data is transferred outside Singapore, Floramis will take steps required by applicable law to ensure a standard of protection comparable to the Singapore Personal Data Protection Act, including contractual, organisational, or other appropriate safeguards.
Retention
We retain personal data only for as long as reasonably needed for the purpose for which it was collected, to operate or secure the relevant service, to maintain transaction and account records, to resolve disputes, or to comply with legal, accounting, and regulatory obligations.
- Account and progression data is generally retained while the account remains active and for a reasonable period needed to complete deletion, restore service, prevent fraud, or meet legal obligations.
- Order and payment records may be retained for tax, accounting, consumer-protection, fraud-prevention, and dispute purposes.
- Support and security records may be retained while a request or incident is open and for a reasonable follow-up period.
- Local queued app data is retained until it is submitted, replaced, deleted, or no longer needed by the app.
Security and data breaches
We use reasonable administrative, technical, and organisational safeguards appropriate to the nature of the data and the risks involved. No method of transmission or storage is completely secure. If a personal-data breach occurs, we will assess it and notify affected individuals or regulators where required by applicable law.
Product schedule 1
Floramis World
Floramis World uses shared account data together with plant-scanning, discovery, map, garden, world-state, and progression data.
| Data | Source, purpose, and control |
|---|---|
| Plant-scan image, account ID, latitude, and longitude | Submitted from the app when you use plant matching. These inputs are processed together to identify a plant and connect the result to your account and location-dependent experience. |
| Camera, selected images, and location permission | Provided through device permissions. You can refuse or revoke access, but scanning, geotagging, discovery, and map features may not work. |
| Scan results, discoveries, gardens, maps, Florami state, and progression | Created through your use of World and stored to provide continuity, show your world state, and operate progression and entitlements. |
| Purchases and entitlements | Received from the relevant app store or purchase service to validate access and restore purchased features. |
Product schedule 2
Floramis Walk
Floramis Walk uses shared account data together with step-count and activity-permission data to operate gamified progression.
| Data | Source, purpose, and control |
|---|---|
| Step count | Read from Apple HealthKit or Android Health Connect after you grant permission. Current Walk functionality uses step count to support plant growth, rewards, and progression. |
| Health and activity permission state | Read from the device to determine whether Walk can access step data and to explain when permission is missing or revoked. |
| Walk progression and rewards | Created from app use and available step data, then connected to your shared Floramis account state. |
Floramis does not use HealthKit or Health Connect data for advertising. You can revoke access through your device settings. This policy and the relevant app-store disclosures will reflect the health permissions enabled in each released build.
Product schedule 3
Floramis Focus
Floramis Focus uses shared account data together with physical Florami identity, session, profile, social, group, and event data.
| Data | Source, purpose, and control |
|---|---|
| Apple or Google platform identity and Floramis account ID | Used to authenticate you, verify the platform account, and connect Focus to the shared Floramis backend. |
| Display name and selected profile-image key | Provided or selected by you to operate your Focus profile, connections, groups, and events. |
| Florami type, UUID, and NFC interaction | Read from or associated with a compatible physical Florami to recognise the figure, connect it to your profile or session, and prevent unauthorised state. |
| Session duration, outcome, voluntary-end state, and timestamps | Created when you run a focus session to show results, maintain history and progression, and operate individual or group sessions. Submission may be queued locally while offline. |
| Connections, group sessions, events, and related status | Created through social and event features to connect participants, coordinate group activity, and display relevant state. |
| Operational telemetry and errors | Generated by the app and backend to diagnose session, identity, NFC, connectivity, and service failures and to protect service integrity. |
Product schedule 4
Floramis Store and websites
Floramis websites and the Floramis Store use shared technical and support data together with commerce, payment, delivery, and customer-service data.
| Data | Source, purpose, and control |
|---|---|
| Name, email, phone number, billing address, and delivery address | Provided by you at checkout or through support to process an order, communicate with you, deliver products, prevent fraud, and meet tax or legal obligations. |
| Order contents, price, discounts, fulfilment, carrier, customs, refund, and support history | Created through Shopify, delivery, and support workflows to accept, fulfil, track, support, refund, or investigate an order. |
| Payment status and transaction reference | Received from the payment provider to confirm or refund payment. Full payment-card details are generally processed by the payment provider rather than Floramis unless checkout states otherwise. |
| Cookies, IP address, browser, pages viewed, and interaction data | Generated when you visit a Floramis website to deliver the site, remember necessary state, secure checkout, diagnose faults, and understand site performance. Where optional analytics or marketing cookies are used, Floramis will describe them through applicable cookie controls. |
Controls and rights
Your choices and rights
Permissions and platform controls
You can manage camera, photo, location, NFC, HealthKit, Health Connect, notification, and other app permissions through your device settings. You can manage Apple or Google account permissions through the relevant platform. Disabling a permission may disable the feature that depends on it.
Access, correction, deletion, and withdrawal
Subject to applicable law, you may request access to or correction of your personal data, withdraw consent where processing depends on consent, object to or restrict certain processing, request portability where available, or request deletion of your account and personal data.
Send an account-deletion or privacy request to support@floramis.com. We may need to verify your identity. Some information may be retained where required or permitted for legal, security, accounting, fraud-prevention, or dispute purposes.
Children's privacy
Floramis does not knowingly collect personal data from a child below 13 without the involvement of a parent or legal guardian. Where applicable law sets a higher age or requires parental consent, Floramis will apply those requirements.
Changes to this policy
We may update this Privacy Policy to reflect product, legal, or operational changes. We will update the date shown on the published policy and provide additional notice where required by law or where a change materially affects your choices.
Contact us
For privacy questions or requests, contact support@floramis.com. Singapore-specific information is provided in our PDPA Notice.