Legal

Privacy Policy

Last updated: 20 October 2026

This privacy policy explains how Diora ("Diora", "we", "us", or "our") collects, uses, and protects information about you. It covers the Diora app for iOS and Android, our website at joindiora.com, Diora Business at business.joindiora.com, and the checkout on shops that sell through Diora on the web. Diora is a plant collection tracker built for rare plant collectors. It includes optional social features: a public profile, following other collectors, sharing individual plants and breeding programs at a visibility level you choose, offering pollen, and direct messaging, described in section 9. By creating an account and using the app, you agree to the practices described below.

Bought from a shop on the web without a Diora account? Section 14 is written for you. It says what the checkout collects, who receives it, how long it is kept, and how to have it removed.

1. Who runs Diora

Diora is built and operated by Beebles, an Australian company. You can reach us at support@joindiora.com for any privacy question, request, or concern.

2. What we collect

We collect only what is necessary to make the app work, keep your data secure, and diagnose problems.

We do not collect: your device's location (Diora never asks for GPS permission, and we strip GPS coordinates out of every photo before storing it), your contacts, your full camera roll (we ask for permission only when you tap "add a photo" and only the photos you select are uploaded), your advertising ID, or anything used for ad targeting. A delivery address you type in when buying a plant is a different thing, and it is covered above and in section 14. Diora does not show ads, and we have no plans to ever introduce them.

The joindiora.com website. Our website collects a small amount of anonymous analytics of its own: which page was loaded, whether the visit came from a printed QR code such as the one on our stall banner, which app store button was tapped, and a coarse device bucket (iOS, Android, or desktop). Website analytics use no cookies and no browser storage, and nothing they collect is kept between page loads: the identifier attached to a website event is random, is created when the page opens, and is discarded when it closes. No account, email address, or name is attached to it. Your IP address is not recorded on the event and no location is derived from it. Where you arrived from is recorded only as a broad category such as "search" or "social", never as the full link you followed. Because nothing persists and no address is kept, website analytics cannot be connected to your Diora account, and nothing in the data we keep can tell us that two page views came from the same person. The processor is PostHog, hosted in the European Union, the same one listed in section 5.

Cookies and browser storage on shops and checkout. Separately from analytics, shops and checkout keep a few things in your browser so they work. None of them track you across sites and none are used for advertising.

The checkout cookies cannot be read by scripts on the page and are sent only to the checkout or that one order page.

3. Why we collect it

By creating an account you agree to this Privacy Policy. You can withdraw consent at any time by deleting your account.

4. How we store and secure it

No system is perfectly secure. If we become aware of a breach affecting your data, we will let you know without undue delay and explain what happened and what we are doing about it.

5. Who we share it with

Diora uses a small number of third-party processors. We chose each one for security, clear privacy posture, and the ability to delete data on request.

We do not currently use a third-party crash-reporting processor (such as Sentry). Diora sends push notifications for activity you opt into (such as new followers, replies, and messages) using the Expo Push Service, which delivers them via Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. These messages carry only the notification text and routing information, never the content of your records, and you can turn each type off in the app's notification settings.

We do not sell your data. We do not share it with advertisers. We do not use your plant data, notes, photos, messages, or any other content you create to train any machine learning model.

6. Your rights

You can:

If you bought from a shop on the web without an account, you have the same rights to access, correct and delete your details. Section 14 says how to use them.

If you live in the EU or UK, you have additional rights under GDPR: to restrict processing, to object, and to lodge a complaint with your local data protection authority. If you live in California, you have rights under the CCPA, including the right to know and the right to delete. We respond to verifiable requests within 30 days.

7. Children's data

Diora is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has used the app, please email us and we will delete the account.

8. International data

Diora is operated from Australia. Supabase stores your account, your content, shops and orders, including web orders, in Sydney, Australia. Some of the processors in section 5 handle data outside Australia:

By using Diora you consent to your data being transferred to and processed in these places. We take reasonable steps to ensure that any international transfer is protected by appropriate safeguards, including the standard contractual clauses where applicable.

9. Social features and how sharing works

Diora has a social layer ("Grapevine"), and every plant and breeding program carries its own visibility setting that you control. New accounts start public. When you set up your account, we ask you to choose, on a screen you cannot skip past, whether your collection starts public or private. Public is what the account is already set to, and choosing private changes it. Whichever you pick, you can change any single plant at any time, change the default later in Settings, and apply a level across your whole collection at once. Here is exactly how it works.

Your profile is visible to others. Once you have an account you have a public profile: your display name, your username (@handle), your bio if you write one, and your avatar if you set one. Other collectors can find your profile (for example by searching your username) and see these fields. Your profile does not expose your email address or any plant you have not chosen to share.

Every plant and breeding program has a visibility setting that you control. Each item can be set to one of three levels:

You set this per item, and you can change it at any time. You can also set a default visibility for new items and bulk-apply a visibility level across your collection. Raising an item to "followers" or "public" is what makes its details and photos (including the source text saying where it came from) readable by that audience. Lowering it back to "private" hides it again.

Following. You can follow other collectors and they can follow you. Following is one-way: following someone does not require their approval and does not make them follow you back. Who you follow and who follows you is used to decide whose content appears in your feed and to activate the "followers" visibility level described above.

Feed. The feed shows activity from accounts you follow and public activity, for example a new plant added, a propagation, or a new breeding program, but only for items whose visibility allows you to see them. Items you have kept private never appear in anyone else's feed.

Pollen offers. You can post a pollen offer to make your pollen available to the community. An offer you post is visible to others and can carry a photo. People can reply to your offer; those replies are attached to that specific offer.

Direct messaging. Diora includes private one-to-one messaging. You can message another collector (for example, to follow up on a pollen offer), and the messages you send and receive are stored so the conversation persists. Messages are delivered to the other participant in the conversation and are not part of your public profile or feed. Blocking prevents messaging between the two accounts.

Blocking. You can block another account. Blocking is symmetric in effect: a blocked account cannot see your followers-only or public content, cannot follow you, and cannot message you, and you stop seeing theirs. By design, blocking is silent: the blocked person is not told they have been blocked.

Where a plant came from (source text). Diora lets you record where each plant came from as free-text source data, which may include another collector's @handle. When you share that plant (followers or public), this text is visible to the audience you shared with, and a mentioned handle can be surfaced as a discovery suggestion. You enter this text yourself and Diora has no way to verify it; we do not vouch for the accuracy of what it says about where a plant came from. If you believe source text in another user's shared collection misrepresents you, email us.

In short: profiles are public, every plant and photo carries a visibility setting you control, and you can raise or lower it at any time. We will update this policy before adding a materially new way to share your data.

10. Deleting your social content, and what deletion does not reach

When you delete your account (section 6), your profile, follows, visibility settings, pollen offers, plants, plant events, plant photos, wishlist photos and listing photos are removed along with the rest of your data. Deletion is not the same as a retraction, though, and there are things it does not reach. A few things survive deletion, and we would rather tell you than let you find out. All of them exist to protect somebody else's record, not ours. This is the complete list.

Messages you sent stay in the other person's conversation. A conversation belongs to both people in it. Your name comes off them, but the text stays, so the other person keeps their own half of a conversation they were part of. Anything sent as part of a message stays with it for the same reason: taking the attachment away while the words remain would leave that person a broken thread. Replies you posted on someone else's pollen offer work the same way. If you would rather a message were gone, delete it before you delete your account. We cannot un-send what another person has already received.

Notifications you triggered stay in other people's inboxes, with the name and handle you had at the time.

What someone else wrote about their own plant stays on their plant. If a collector recorded that a plant came from you, that is their record and it remains.

Orders stay on the other person's record of their own sales or purchases, including what was bought and what it cost. The delivery details you gave a seller (name, phone number, address) are removed when your account is deleted. If you bought on the web without an account, there is no account to delete: section 14 says how your details are removed, and what stays with the shop.

Reports other people filed about you stay, for as long as we need them to deal with the report. We also keep anything the law requires us to keep, and only for as long as it requires.

Deleting a photo does not reach copies already handed out. Diora serves private photos through links that are authorised when they are created, not each time they are opened, so a link already delivered to someone's device can keep working until it expires. Deleting a photo removes it from Diora and stops us serving it to anyone new. It cannot reach a copy someone has already saved or screenshotted, which is true of any image anyone has ever been shown.

Apart from those, we do not keep your personal data after deletion.

If you want a specific piece of shared content taken down sooner, you can lower its visibility to private in the app, or email us.

11. We are not a plant care advice service

Diora records what you tell it about your plants. We do not provide care guides, watering schedules, diagnoses, or species identification. Nothing in the app should be treated as professional horticultural advice. This is a deliberate product choice, not a limitation we plan to fix.

12. Changes to this policy

We may update this policy as the app evolves. The "Last updated" date at the top reflects the most recent change. For material changes (anything that adds a new category of data collection, a new third-party processor, or a new sharing capability), we will surface a notice in the app the next time you open it. Checkout on the web always links to the current version of this policy.

13. How to contact us

For any privacy question, data export request, deletion request, or concern, email support@joindiora.com. Diora is a small project and replies are best effort, but we will get back to you as soon as we reasonably can.

14. Buying from a shop on the web

You can buy from a shop on Diora without a Diora account. This section covers that checkout.

What we collect. Your name, your email address, your phone number if you give one, and your delivery address if your plants are being posted. Pickup orders have no address. We also keep the plants you bought, the delivery option you chose, and the prices. We record which version of the checkout's notice you were shown, and a scrambled (salted and hashed) form of your IP address so we can limit repeated attempts. We do not store your IP address itself.

Who receives it. The shop you buy from receives your name, email address, phone number and delivery address. It sees them on your order, its packing slip and its invoice, so it can send your plants and contact you about the order. When a shop posts your order, it may share your name, delivery address, email and mobile with its carrier, such as Australia Post, so the parcel can be delivered and tracked. Diora runs the checkout and stores your order for the shop. Nobody else on Diora sees your details.

Paying by card. Card payments are processed by Stripe on the shop's own Stripe account, so the shop is the merchant you pay. You enter your card details in Stripe's card form, and they go to Stripe, never to Diora. Diora stores no card details. Stripe tells us whether the payment went through, the amount, Stripe's fees, and any refund or dispute. Diora charges the shop a fee on each card sale, which Stripe takes from the shop's payment. It is not added to what you pay.

Checks and suggestions. Cloudflare Turnstile checks that the checkout is filled in by a person, using your IP address and information about your browser. As you type your street address, your browser sends what you type to Google for address suggestions. Section 5 has the details of both.

Emails. We email you about your order only: your order confirmation, updates when the shop sends your order, has it ready for pickup or cancels it, a note when the shop sends you a message, and your order link when you ask for it. Replies reach the shop, when the shop has given a contact email. Resend sends these emails. We keep a log that each email was sent, and remove the address and the content from that log 30 days after sending. The shop's order history also shows each email we sent you, the address it went to and whether it was delivered, until your details are deleted.

Messages with the shop. You can message the shop from your order page, and the shop can message you there. Diora stores these messages with your order and shows them to you and the shop. Anyone you share your order link with can see and send them too. When the shop writes, we may email you to say there is a new message, but never what it says. You can turn these emails off on your order page. We check each message for payment details, such as bank details or a payment link, so we can show a warning beside it. We read a message only if it is reported to us, if the law requires it, or to keep Diora safe. If we remove a message, we delete its text 90 days later. Otherwise messages are kept with your order, and their text is deleted when your contact details are deleted.

Marketing. Checkout does not ask for your permission to send you marketing, and does not pass any such permission to the shop. Diora sends you no marketing.

Where it is stored. Your order is stored by Supabase in Sydney, Australia, and checkout runs on Vercel's servers in Sydney. Section 8 lists the processors that handle data outside Australia.

How long we keep it.

Seeing, correcting and deleting your details. Your order page shows the details the shop has for you. To correct them, ask the shop or email support@joindiora.com. The shop can correct your details itself. Its order history keeps a record of each change, including the old details, until your details are deleted. To delete them, email support@joindiora.com with your order number. When your details are deleted, your email address, phone number and delivery address are removed from your orders with that shop. If you ask us, your order link also stops working. Your name, what you bought, the prices and any tax invoice stay with the shop, as its record of the sale. We reply within 30 days.

This policy is written in plain English by intent. If anything in it is unclear, please email us. We will fix the wording.