Privacy Policy

FLhour Technologies, LLC

Effective Date: July 16, 2026

FLhour Technologies, LLC (“FLhour”, “we”, “us”, or “our”) operates the FLhour mobile application (the “App”) available on the Apple App Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and related services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

Contact Information

  • First and last name
  • Email address (used for account creation, 2FA, and password resets)
  • Phone number (used for 2FA and password resets)
  • Physical address

Location Information

  • Precise location (GPS): Collected during live work sessions (heartbeats with longitude/latitude), stop locations, garden geofencing, and “gardens near you” features.
  • Background location: Used to keep the work timer running and for on-site verification.
  • Minted certificates show location data and time data.

Sensitive Information (Identity Verification)

We use the Didit SDK for identity verification:

  • Government-issued ID document (via camera scan)
  • Face/selfie liveness video
  • Microphone/audio (for the short verification video)

User Content

  • Photos: avatar/profile picture, before/after session photos, and extra session photos
  • Free text: garden names, descriptions, and cultivator certificate notes
  • Content reports (reason + details)

Certificates & Activity

  • Earned certificates (hours worked, serial numbers, portions) that may be publicly viewable
  • Bids, offers, work sessions, and transaction history

Identifiers & Technical Data

  • Internal User ID
  • Device ID (for single-active-device enforcement)
  • Push notification token (Apple APNs)
  • Session timing, heartbeats, timestamps, and redacted app logs

Account & Security

  • Hashed password
  • Password-reset codes and attempt history
  • User-agreement acceptance version and timestamp

We do not use third-party analytics or advertising SDKs.

2. How We Use Your Information

We use the collected information to:

  • Provide the core Service (tracking work time/location, generating certificates, geofencing).
  • Verify your identity and maintain account security (including 2FA).
  • Communicate with you via email, SMS/text, or push notifications about your account, sessions, and updates.
  • Generate and display certificates. You control whether your real name and photo or a pseudonym/avatar appear on public certificates.
  • Process transactions and maintain records.
  • Improve the Service and ensure on-site verification.
  • Respond to content reports and enforce our terms.

3. Sharing and Disclosure of Information

We do not sell your personal information. We do not share your email address, phone number, or physical address with other FLhour users/customers. We may share information in these limited cases:

  • Service Providers: With trusted third parties who help operate the Service:
    • AWS Cognito (authentication – email/phone/password)
    • AWS Aurora, S3, CloudFront, Lambda (data storage and hosting)
    • Amazon Pinpoint / SNS (SMS communications)
    • Apple APNs (push notifications)
    • Didit (identity verification – ID and biometric video)
  • Public Certificates: Certificates showing earned hours may be viewable by other users or the public. You choose whether your real name/photo or pseudonym/avatar is displayed. Location data tied to certificates is limited to what is necessary for verification.
  • Legal Requirements: If required by law, subpoena, court order, or government request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets.
  • With Your Consent: For any other purpose you explicitly approve.

4. Your Choices and Controls

  • Location Services: You can enable/disable location access in your device settings. Background location is required for core timer functionality. You cannot mint certificates if you disable location services.
  • Timer: You consent to the recording of time at a location by using the timer start, pause, and stop functionality. You cannot mint certificates if you do not use the timer functionality.
  • Certificate Privacy: Choose real name/photo or pseudonym/avatar when creating/viewing certificates. Once you use your real name or photo on minted certificates you cannot remove them. Location data for minted certificates cannot be deleted and is viewable by the public.
  • Account Data: You can update or delete much of your information through the App. Contact us for full account deletion (some data may be retained for legal or security reasons or any data that is on minted certificates).
  • Marketing Communications: You can opt out of non-essential emails/SMS via the unsubscribe link or App settings.
  • Data Access / Deletion Requests: Email us at the address below to exercise your rights (access, correction, deletion, etc.).

5. Data Security

We implement reasonable administrative, technical, and physical safeguards (e.g., encryption, access controls, hashing) to protect your information. However, no system is completely secure. You are responsible for keeping your login credentials confidential.

6. Data Retention

We retain your information as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Location data associated with completed certificates is retained for verification purposes.

7. Children’s Privacy

The Service is not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect data from children. If we learn we have collected such data, we will delete it.

8. International Users

If you are outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

9. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of material changes via the App, email, or a prominent notice. Continued use after changes constitutes acceptance of the new policy.

10. Contact Information

FLhour Technologies, LLC
95 River Street Suite 208, Hoboken, NJ 07030
Email: info@flhour.com

For questions about this Privacy Policy or your data rights, please contact us at the email above.