Privacy Policy

Flowers is a small membership community for family caregivers and their elders, run by Mahogany Homes in Oakland, California. We collect the least we can get away with, we don’t run ads or analytics, and we never sell or share your information for marketing. Here is the whole of it, plainly.

What we keep, and why

• The membership roll. Your name, email, phone if you gave one, your membership standing and renewal date, and any note the founder writes (like “paid cash at the brunch”). This is the record of who belongs. Some of it may come from Stripe when you pay online; some is typed in by hand.
• Sign-in. We use your email and a six-digit code sent to it — no passwords. After you sign in, your device holds a signed token that proves the email was verified. Your membership standing is checked against the roll each time the app opens, not stored in the token.
• Seats and tickets. When you reserve a seat or buy a ticket we record the gathering, the name it’s under, and — at the door — when you were checked in. Your ticket’s QR code contains your name and seat details in a signed, readable form (it is encoded, not encrypted), so treat the QR like a boarding pass: anyone you let scan it can read the name on it. It contains no phone number, address, or payment details.
• What you share with the community. Posts, photos, memories on a gathering’s page, and elders you honor on the Face Card wall are visible to everyone in the community — that is their purpose. Photos are stored on our server. You can delete anything you shared, any time, from the app; the founder can also remove anything.
• A device key. Your phone makes itself a random identifier the first time it runs the app. It marks which posts and hearts are yours so only you (or the founder) can remove them. It is never shown to other members and identifies a device, not a person.
• On your device only. Your profile (name, who you care for, city, photo), your saved seats, tickets, and hearts live on your own phone. They are conveniences — losing the phone doesn’t lose your membership or a paid ticket, which are always recoverable from our records.

Payments

All payments run through Stripe. Your card number goes to Stripe, never to us — we cannot see it and do not store it. Stripe tells us who paid, their email, and whether a membership is current, which is how the roll stays up to date. Stripe’s own privacy policy (stripe.com/privacy) governs what they hold.

Where it lives

Community records are stored in our database, hosted by Supabase, and the website runs on Vercel — both are infrastructure providers who process data on our behalf and have no right to use it otherwise. Sign-in code emails are sent through Supabase as well. Photos are kept in a private store and served only through the app.

What we don’t do

• No advertising, no analytics trackers, no marketing pixels, no data brokers.
• No selling, renting, or trading your information — ever.
• No cookies for members. The only cookie in the whole app is the sign-in cookie on the founder-and-door side.
• The only emails we send are the sign-in codes you ask for. Receipts come from Stripe.

Who sees what

Other members see what you post and the name you go by. The founder sees the roll and everything shared. Someone she asks to help welcome people at a gathering sees that gathering’s guest list — names and check-in status, nothing else — and only while she has given them that role.

Your choices

• Delete anything you’ve shared, from the app, whenever you like.
• Ask to be taken off the roll and we will remove your entry. Payments already processed remain in Stripe’s records as the law requires.
• Sign out on any device; your seats and profile stay on that device until you clear them.

Children

Flowers is built for adults — family caregivers and their elders. Membership means an email address and a paid subscription, we never ask anyone’s age, and nothing here is designed for or aimed at children. We can’t see who is holding a phone, so we won’t pretend to promise what we can’t check — what we do promise is this: don’t make an account for a child, and if you tell us a child’s information has ended up in Flowers, we will delete it.

Changes

If what the app collects ever changes, this page changes with it, with a new date at the top. A meaningful change gets said out loud at gatherings too — that’s how this community talks.

Questions about any of this? Speak with Sharawn at any gathering. This is a small community — a real person answers.