Privacy Policy
Effective 2026-05-24
This is the plain-English version of what GrowLove does with your data. Short version: we keep what you give us, we don't sell it, we don't run ad trackers inside the app, and we let you delete your account. The marketing site (growlove.app) uses privacy-respecting Google Analytics — details below.
Who we are
GrowLove is a small relationship app for one or two people. It helps you keep a calm daily check-in with yourself or your partner. The company operating GrowLove is the data controller for everything on this page. If you want to reach us about privacy, write hello@growlove.app.
What we collect
We only collect what we need to run the app. That's:
- Your account email, for secure sign-in. We use it to identify you and to send you transactional messages (account recovery, partner invites). We do not send marketing email unless you opt in.
- Your couple link, if you invite or accept a partner. That's a small record connecting your account to theirs and a one-time invite code.
- Your onboarding answers. The questions you answer when you first sign in, stored as you typed them.
- Your daily check-ins. The short reflections you write in the app, stored as you typed them.
- Your reactions to suggestions. When you accept, dismiss, or report back on a suggestion the app gave you, we record the action and the timestamp.
- A small set of derived facts about you. The app reads your onboarding and check-in answers and distills them into a short list of profile facts (your communication style, your preferences, recurring themes) so we can personalise future suggestions. See "How AI is used" below.
- Optional profile fields you add to your account, like display name, birth year, and city.
- Basic operational logs needed to keep the service running and to debug errors. We do not log the contents of your check-ins, suggestions, or any sensitive personal information in our operational logs.
Inside the GrowLove app we do not use third-party analytics, advertising SDKs, Sentry-style crash reporters, Segment, Mixpanel, or any product attribution service. We do not place advertising cookies anywhere.
Marketing site analytics. The marketing site (growlove.app — the pages you're reading right now, including the homepage, FAQ, and these legal pages) runs Google Analytics 4 with IP anonymisation enabled. It records aggregate visit data — pages viewed, referring source, country, device type, and whether you submitted the waitlist form — so we can tell which channels bring people here. It does not see your email address or any text you type into the waitlist form. Google Analytics cookies are limited to this marketing site and are never used inside the GrowLove app itself. If you'd rather not be counted, most browsers and ad blockers can block Google Analytics with one click.
Where it's stored
Your data lives in an encrypted, managed database operated by a reputable cloud provider in the United States. Credentials and secrets are stored in encrypted secret storage, not in code or in our application logs.
Who has access
Only the GrowLove backend can read or write your data, and only under a least-privilege role limited to what the app actually needs. No third parties have direct database access, and we don't share your data with marketing partners, ad networks, or data brokers. A small number of GrowLove maintainers may access production data when investigating a bug you reported or when responding to a legal request.
How AI is used
GrowLove uses third-party AI providers to:
- Distill your onboarding and check-in answers into short profile facts.
- Generate the personalised daily suggestion you see in the app.
When the app makes an AI request, we send only the part of your data that's needed for that specific request (for example, the text of your last check-in) along with a prompt that describes the task. We do not send your email address or any internal identifiers to the AI provider.
Our AI providers do not train on your data. We only work with providers whose paid-tier terms commit that prompts, responses, and user-submitted content are not used to train their foundation models. If you'd like to know which providers we use today, write to hello@growlove.app and we'll tell you.
If we change AI providers or move data outside this commitment, we'll update this page and notify active users by email before the change takes effect.
How long we keep it
We keep your data as long as your account is active. If you delete your account, we permanently delete the following within 30 days:
- Your user record (email, profile fields, sign-in identifier).
- Your onboarding answers.
- Your daily check-ins.
- The suggestions tied to your account.
Some derived data may persist beyond 30 days when it is no longer associated with a deleted user — specifically anonymised aggregates we use to understand product performance. We do not retain raw check-ins or onboarding answers after the 30-day window. If you shared check-ins with a partner and that partner is still active, the shared couple history may remain visible to them; ask us at hello@growlove.app if you'd like that removed too.
Backups are encrypted and rotate out within 35 days, so a deletion is fully removed (including from backups) within ~65 days at the outside.
How to delete your account
In-app: open Settings → Account → Delete account. You'll be asked to confirm. Once confirmed, the deletion is immediate from the live database; backups age out as described above.
By email: write to hello@growlove.app from the email on your account, with the subject line "Delete my account." We aim to confirm within 5 business days.
Your rights
Wherever you live, you can ask us to access, correct, export, or delete your data. If you're in the EU, EEA, UK, or Switzerland, the GDPR gives you formal rights to access, rectification, erasure, restriction, portability, and objection. If you're in California, the CCPA/CPRA gives you the rights to know, delete, correct, and opt out of the sale or sharing of personal information (we do not sell or share personal information, so the opt out doesn't apply in practice).
To exercise any of these rights, write to hello@growlove.app. We'll respond within 30 days. We won't charge you for a reasonable request and we won't ask for more identity proof than we need to confirm the request is yours.
Children
GrowLove is for adults in adult relationships. It's not designed for or directed to children under 16, and we do not knowingly collect data from children. If you believe a child has signed up, write to hello@growlove.app and we'll remove the account.
International transfers
Our servers and our AI providers operate in the United States. If you're outside the US, your data will be transferred to and processed in the US under the standard EU/UK contractual safeguards (Standard Contractual Clauses and the UK addendum).
Security
Connections between the app and our backend use TLS. Credentials and secrets are kept in encrypted secret storage, never in code. Our backend runs under a least-privilege role limited to what the app actually needs. We don't promise the impossible — no system is perfectly secure — but we don't take shortcuts on the obvious things.
Changes
If we change this policy in a way that affects how we handle your data, we'll update the effective date at the top and email active users before the change takes effect. Cosmetic edits (typos, link fixes) may land without a notice.
Contact
Email: hello@growlove.app
Postal mail: available on request.