FloraFang · Privacy
Privacy policy
Last updated 18 September 2026
FloraFang makes no network requests. Your photos, notes, and saved entries stay on your iPhone. There is no account, no server, and no analytics.
All of it lives in the app's own storage on your iPhone. That storage is set to iOS's strongest file protection class, meaning it's inaccessible whenever your phone is locked, not just encrypted at rest in the abstract, and it's explicitly excluded from iCloud and iTunes/Finder backups. A backup of your phone won't carry a copy of your field log or exposure records with it.
On your iPhone, using Apple's Vision framework, Core ML, and Apple Intelligence Foundation Models bundled with the app. No photograph is uploaded for analysis. The app contains a seam for a future remote identification tier; it is switched off, and while it is off FloraFang makes zero network calls.
The exposure intake checklist collects key details (such as patient or pet type, weight, timing, ingested part, and symptoms) into a structured summary so you can read them aloud or copy them while speaking with poison control. If you choose to save the incident, it is stored locally on your device in your private Exposure Log (using SwiftData) so you or medical personnel can review the timeline and specimen photos later. Exposure incident records are never transmitted across the network. If you export your data, your saved exposure reports are included in your private ZIP archive. You can delete any incident from the log at any time.
Tapping an emergency hotline number hands off directly to the iOS Phone app, which initiates an ordinary phone call outside of FloraFang.
FloraFang requests optional location permission to record coarse coordinates (rounded to two decimal places, roughly one kilometre) and a reverse-geocoded city or region name when you save an entry. This is used solely on-device to help narrow down species geographic ranges and organize your field log. Precise street-level coordinates are never recorded, location is never tracked in the background, and your location data is never transmitted to us or any third party. If you choose to export your field log, the export archive you create includes these coarse coordinates, and where that file goes is entirely up to you.
Nothing. No analytics package, no crash reporting service, no advertising identifier, no third-party SDK. We have no way to identify you as a user and no way to see anything you photograph.
FloraFang offers one optional, one-time purchase (not a subscription) that unlocks a handful of extras: the Field Naturalist chat, exporting your personal field log, shareable identification cards, a field checklist, and the full species catalog browser. All hazard identification and the exposure checklist, including exporting an exposure incident report, stay free whether or not you buy it. Payment is handled entirely by Apple through the App Store; FloraFang never sees or stores your payment details, and the only thing the app keeps track of is whether the unlock has been purchased.
FloraFang needs camera access to identify anything. The camera feed is used for the viewfinder and for the photo you choose to capture. It is not recorded or transmitted.
Delete individual entries in the field log or Exposure Log, or delete the app to remove everything at once. We hold no copy, so there is nothing to request from us.
FloraFang is not directed at children under 13, and we do not knowingly collect information from anyone.
Turning it on would mean photographs leaving your device, which would be a material change. It would be opt in, it would be visible in the app, and this policy would be rewritten before it shipped.