Privacy Policy

Last updated: June 24, 2026

Flowers is built on a simple idea: your clinical work should stay on your computer. This policy explains, in plain language, what that means in practice, what the people behind Flowers can and cannot see, and the few moments your computer reaches the internet. Flowers is operated by Flowers App LLC ("Flowers," "we," "us").

The short version

• There is no account to create and no profile to fill in.
• Your sessions, transcripts, notes, conceptualizations, and client details stay on your computer, and we never receive or store them. (The one exception is the optional appointment-reminder emails you choose to send through your own email account — see below.)
• Transcription and note generation run entirely on your device using on-device models.
• Your data is encrypted at rest, with the key held only in your macOS Keychain.
• The app contains no analytics, no advertising, and no third-party trackers.

Information we collect

From your clinical work, essentially nothing. Flowers has no servers that receive your sessions, transcripts, notes, or client information, so there is nothing of yours for us to collect, see, sell, or hand over. We do not require an email address, a username, or any account to use the app.

If you contact us for support at [email protected], we will see whatever you choose to put in that message. We ask that you never include client information or protected health information in a support request.

Our contact page is not a form: it simply opens your own email application addressed to us. Nothing is submitted to this website and no third party sits in between. We keep the email you send so we can reply, and we use your address only to answer you.

On-device processing

Audio transcription and the drafting of notes, prep sheets, and conceptualizations are performed by AI models that run locally on your Mac. Your audio and text are processed in memory on your own machine. No prompts, transcripts, or generated content are sent to us or to any third-party AI service.

How your data is stored

Flowers stores your data locally on your computer. Sensitive fields, including names, contact details, notes, transcripts, and conceptualizations, are encrypted at rest using AES-256-GCM. The encryption key lives in your macOS Keychain. It is device-only and is not synced to iCloud. Any backups you create are encrypted and password-protected, and you choose where they are stored.

When Flowers uses the internet

Flowers is designed to run offline. There are only a few moments it may connect to the internet:

• One-time model download. During setup, Flowers downloads the on-device model weights it needs from Hugging Face. This transfers software, not your data.
• Subscription and licensing checks. If you subscribe to Flowers Pro, the app verifies your subscription with our payment provider, Stripe. These checks carry only a license token, never your clinical data. See below.
• Optional updates. Flowers may check for application updates.
• Calendar sync (optional). If you connect a calendar feed, Flowers fetches your appointments from the calendar URL you provide (for example, Google, iCloud, or Outlook). The request goes to your own calendar host under your own URL; it pulls your schedule in, and none of your clinical work is sent out. Because appointment titles can contain client names, we recommend using non-identifying titles in any calendar you connect.
• Appointment reminders (optional, off by default). If you turn this on and opt in a specific client, Flowers sends that client a brief reminder — the date, time, and your practice name, with no clinical detail — through your own email account. This is the one feature that sends a client detail (their email address) off your device, and it travels only through your own mail server, never through us. We never see it. See below.

Payments and licensing

Flowers Pro is a paid subscription handled by our payment provider, Stripe. When you subscribe, your payment details are collected and processed by Stripe under their own privacy policy. We do not see or store your full payment card details.

To unlock Pro features, Flowers exchanges a license token with the provider to confirm your subscription is active. This exchange contains licensing information only. It never contains your clients, sessions, notes, or any protected health information.

Calendar and appointment reminders

Both of these features are optional and off until you set them up.

Calendar. If you connect a calendar, Flowers reads appointments from the feed URL you provide. This is an inbound fetch from your own calendar host — your schedule comes in; nothing of your clinical work goes out. Because event titles can contain client names, we suggest using non-identifying titles in any calendar you connect, and any titles Flowers does import are stored encrypted on your device like the rest of your data.

Appointment reminders. Reminders are off by default and must be enabled per client. When you opt a client in, Flowers emails that client a minimal reminder (date, time, and your practice name — no clinical content) using your own email account and mail server. This is the only feature that transmits a client detail — their email address — off your device. It is sent directly from your mail provider to your client; Flowers' servers are never in the path and we never receive it. As the clinician, you are responsible for obtaining each client's consent to be emailed.

Cookies and analytics

The Flowers application contains no analytics or tracking of any kind. It sends us no usage data, no crash reports, and no telemetry. We genuinely do not know how you use the app.

This website runs no third-party advertising or tracking scripts, and sets no advertising cookies. There are two third-party components, both limited in scope:

• Cloudflare Turnstile, loaded on our home page alongside the email signup form, to check that a real person is submitting it rather than a bot. Turnstile is an anti-spam control, not an advertising product; it may set a short-lived cookie on that page and does not follow you around the web.
• An embedded product demo from YouTube (using YouTube's privacy-enhanced no-cookie domain). It does not load unless you click "Watch demo," so no request reaches YouTube or Google until you choose to play the video. Once you do, YouTube may set cookies and receives the usual data it collects for video playback, governed by Google's privacy policy.

Our mailing list

If you enter your email address into the signup form on our home page, we store that address, the date you signed up, and which page you signed up from. That is the entire record. We use it only to send you the product tour and occasional notes about Flowers, and we do not sell, rent, or share the list with anyone.

This list is entirely separate from the application. It never contains client information of any kind, and nothing in the app is connected to it. Please never send us client information — not through this form, and not by email.

Every message we send includes a one-click unsubscribe link, which removes your address immediately. You can also email [email protected] at any time to be removed, or to ask what we hold about you.

Your data, your control

Because everything lives on your computer, you remain in control of it at all times. You hold the keys. You can export an encrypted backup, move it to another computer, or delete your data locally whenever you choose. Since we never hold your data, there is no copy on our side to request or delete.

Children

Flowers is a professional tool intended for licensed clinicians and is not directed to children. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as Flowers evolves. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

Contact

Questions about this policy or your privacy can be sent to [email protected].