Privacy, how Florimel keeps your past yours

Hosted in Europe

Florimel is published by Kawaru and hosted in the European Union. Your archive lives with the app, not scattered across third-party services.

Encrypted before it is stored

What you write is encrypted before it ever reaches Florimel’s database. That covers journal entries and drafts, answers to prompts, letters to the future, look back reviews, personal events, the names of people and who they were to you, places and addresses, the labels on your timeline, details imported from your calendar, and the identifying parts of a photo such as its filename and its location label.

Each account is given its own randomly generated encryption key. That key is itself protected by a separate master key held outside the database, and it is never derived from your password, so it does not change when your password does. Backups are encrypted too, both of the database and of uploaded files, before they are stored or moved anywhere. Passwords are handled separately, through secure one-way hashing: Florimel keeps no readable copy of yours.

And what is not A few things have to stay readable for the service to run: dates, map coordinates, record identifiers, statuses, and the references that point to stored files. And Florimel’s server can decrypt your private content when it needs to, in order to give it back to you. That makes this server-side encryption, not end-to-end or zero-knowledge encryption, and we would rather say so plainly than let the word “encrypted” do more work than it should. Uploaded image files are included in the encrypted backups, but the live files themselves are not individually covered by the per-account database encryption.

GDPR, honoured in full

Florimel is fully GDPR-compliant, and treats the regulation as a floor rather than a ceiling. Every right it names is a working feature of the product, not a request form: access and portability through the full encrypted export, rectification on any page you open, and erasure as a true hard delete. There is no profiling, no automated decision-making, and no sale or sharing of personal data, and your archive does not leave the European Union.

No third-party analytics

There are no third-party trackers or analytics following you through Florimel. What you write is not fuel for an advertising profile.

Your voice is not stored

When you record a voice note, it is transcribed to text and the audio is then discarded. This is how the app is built, not a setting you have to find. The words stay; your voice does not.

Your photos stay with you

Photo files are never handed to third parties. When a photo carries location information, only those coordinates are used, to file the image into the right chapter of your life. Every stored image is served through a private, owner-checked route, so it is reachable only by you.

People are described simply

A person in your archive is a first name and a free-text note about who they were to you. Nothing more: no contact details, no addresses. Suggestions of names to add come only from your own writing.

What the app does, and does not, hand to a machine

Florimel uses automated help for only three narrow things: spotting a name in your writing so it can offer it back for you to confirm, condensing your own answers into a single atmosphere line, and turning a voice note into text. It never uses that help to write, extend, or improve a memory. Cues you see are either your own words, quoted exactly, or a dated public fact.

Leaving, and being forgotten

You can take everything with you through a full, encrypted export. And if you choose to go, a genuine right to erasure hard-deletes your archive rather than simply hiding it.

In short: your words are yours, encrypted in the database, kept in Europe, unseen by advertisers, never ghostwritten, and yours to take or to delete at any time.

Start with Florimel The thinking behind the design

Your past stays yours.