Privacy Policy

1. Information GrowGrow processes

Account and authentication information

GrowGrow creates an internal account identifier and an App Store account token for each account. You may use the app as a Guest or optionally connect Sign in with Apple. For an Apple-linked account, we store the private user identifier supplied by Apple. GrowGrow does not request Apple profile scopes and does not store your Apple name or email address.

A Guest account is still an online GrowGrow account. Its access credential is stored in the iOS Keychain on this device. iOS may preserve the credential if the app is reinstalled. If the credential or access to the device is lost before you connect Sign in with Apple, the Guest account may not be recoverable.

Family routines and content you provide

We store the information you choose to add so the app can work, including:

• a child's name or nickname and selected background;
• routine categories, task titles, schedules, dates, and time-of-day choices;
• task completion history and progress summaries;
• reward names, emoji, star costs, star balances, and redemption history; and
• calendar preferences such as time zone and first day of the week.

This information is associated with the adult's GrowGrow account. GrowGrow does not provide public profiles or public sharing. Please use nicknames where appropriate and do not put sensitive information in names, tasks, categories, or rewards.

App Store purchase

Apple processes payment for the paid App Store download. The current version does not require an additional in-app purchase, and GrowGrow does not receive or store payment-card or bank-account details.

Technical and diagnostic information

Our server records limited operational errors and request details, such as the request method and path, to operate and troubleshoot the service. During Guest onboarding, the iOS app also writes connection success or error details to Apple's unified device log. The current app does not include a third-party analytics, advertising, attribution, crash-reporting, or performance-monitoring SDK.

2. Information stored on your device

The app stores its bearer session credential in the iOS Keychain using device-only protection after first unlock. It stores the identifier of the currently selected child in UserDefaults. GrowGrow's routines, completions, rewards, and other family data are stored on the service rather than only on the device.

3. What GrowGrow does not currently use

The current app does not request access to the camera, photo library, microphone, location, contacts, or notifications. It does not use advertising identifiers, cross-app tracking, behavioral advertising, AI services, or third-party analytics. The public legal and support pages do not require sign-in and do not set GrowGrow advertising or analytics cookies.

4. How we use information

We process information to:

• create and authenticate Guest and Apple-linked accounts;
• sync routines and show daily plans, progress, stars, and rewards;
• provide support, maintain security, and diagnose service failures; and
• comply with applicable legal obligations and protect users and the service.

5. Service providers and data sharing

We use the following providers that are visible in the current implementation:

Apple

Apple provides optional authentication and distributes the paid app through the App Store. Apple may process your Apple account, device, and purchase information under its own policies. GrowGrow links Apple's private account identifier to your GrowGrow account only for synchronization and recovery; GrowGrow does not use that data for tracking.

Railway

GrowGrow's current public backend is hosted on Railway. Railway may process requests, server logs, and the account and family data handled by the backend as an infrastructure provider. This use is for hosting and app operation, not GrowGrow advertising or tracking. You can review Railway's Privacy Policy.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information when required by law, to protect rights or safety, in connection with a business transfer, or to vendors acting for us under appropriate obligations.

6. Storage and retention

Account and family data remains in the active database while the account exists. Apple-linked login sessions are configured to expire after 30 days; Guest sessions are long-lived so a family is not unexpectedly locked out of data tied to an installation. Signing out revokes the current server session.

Some deleted tasks and rewards may be archived while their completion, star, or redemption history is needed to present an accurate record. Deleting a child permanently deletes that child's associated routines, completions, stars, rewards, and redemption records from the active database. Deleting the account permanently deletes its active sessions and associated family and entitlement records from the active database.

Infrastructure providers may retain backups and limited operational logs for their standard security and recovery periods. Data in those backups is not used for product features and is removed as the backups expire. Contact support for current retention details.

7. Deletion and your choices

You can delete an individual child or your entire account from Settings in the app. If an account is connected to Sign in with Apple, GrowGrow asks you to reauthorize and attempts to revoke that Apple authorization before account deletion. If Apple authorization is permanently unavailable, you can still delete your GrowGrow account and family data, then manually remove GrowGrow under Sign in with Apple in your Apple Account settings. App Store purchase history is controlled by Apple and is not deleted with a GrowGrow account.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. To make a request, use our support page. We may need to verify that you control the relevant account.

8. Security

GrowGrow uses HTTPS for network requests, stores session tokens in hashed form on the server, and protects the app's session credential with the iOS Keychain. No security measure can guarantee that information will never be lost, misused, or accessed without authorization. You should protect access to your device and Apple account.

9. Children's privacy

GrowGrow is designed for a parent or guardian to manage family routines. Children are not asked to create their own accounts, and the app does not provide public posting or messaging. The adult using GrowGrow is responsible for choosing what information to enter about a child and for having the authority to provide it. If you believe child information was provided without appropriate authorization, contact us so we can review and delete it as appropriate.

10. International processing

GrowGrow and its service providers may process information in countries other than the one where you live. Where required, we rely on appropriate legal safeguards and honor mandatory privacy rights available in your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy as GrowGrow changes. We will post the revised policy here and change the “Last updated” date. If a change materially affects how we process information, we will provide additional notice when required by law.

12. Contact us

For privacy questions or requests, visit the GrowGrow support page.