Privacy Policy

Growy is a mental reprogramming app developed by Growy ("we", "us", "our"), available on iOS and Android. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our service.

By creating an account or using the app, you confirm that you have read and agree to this Privacy Policy. If you do not agree, please do not use the app.

Registration data: name, email address, and password (stored in encrypted form using bcrypt).

Usage data: daily check-ins, streak count, mood logs, daily intentions, and progress in the 90-day program.

Preferences: selected language, visual theme, and personalized app settings.

Social authentication data: when you use Sign in with Apple or Sign in with Google, we receive your name and email from those platforms, subject to their respective privacy policies.

Push token: a unique identifier generated by your device's operating system to send notifications. Collected only if you grant permission.

Technical data: device platform (iOS/Android) for compatibility and service operation purposes.

Personalize the content displayed (motivational quotes, affirmations, playlists) according to your profile and logged emotional state.

Calculate and display your progress in the 90-day program (streak, achievements, completed days).

Send reminder notifications when you enable them — you can disable them at any time in your device settings.

Process and manage your premium subscription.

Improve the service based on aggregated and anonymized usage patterns.

Comply with applicable legal and regulatory obligations.

We do not sell, rent, or trade your personal data with third parties for advertising or commercial purposes.

RevenueCat: we use RevenueCat to manage subscriptions and premium payments. RevenueCat processes data necessary to verify and maintain your subscription. See RevenueCat's privacy policy at revenuecat.com.

Apple (Sign in with Apple): if you use Apple social login, Apple shares your name and email (or masked email) with us. See Apple's privacy policy at apple.com/privacy.

Google (Sign in with Google): if you use Google social login, Google shares your name and email with us. See Google's privacy policy at policies.google.com.

Expo / Expo Push Notifications: we use Expo's push notification infrastructure to send reminders. Push tokens are managed by this service. See Expo's privacy policy at expo.dev/privacy.

Neon (database): your data is stored on servers managed by Neon, a cloud database provider. Data is protected by confidentiality agreements and encryption in transit and at rest.

All subprocessors are engaged with appropriate data protection clauses.

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

Passwords are stored with bcrypt hash (12 rounds) — never in plain text.

All communication between the app and our servers is performed via HTTPS/TLS.

Access to production databases is restricted by credentials and private networks.

No security system is foolproof. In the event of an incident affecting your data, we will notify you as required by applicable law.

We retain your data while your account is active.

Upon requesting account deletion (via the app or by email), your data is immediately removed from active systems.

Backup copies are kept for up to 30 additional days before being permanently deleted.

Anonymized or aggregated data for statistical purposes may be retained indefinitely, as it does not individually identify you.

Access: you may request a copy of the personal data we hold about you.

Correction: you may update your registration data directly in the app or contact us for corrections.

Deletion: you may delete your account and all associated data at any time. See getgrowy.app/delete-account.

Portability: you may request your data in a machine-readable format.

Objection and restriction: you may object to processing or request its restriction under certain circumstances.

Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at suporte@getgrowy.app. We will respond within 30 calendar days.

Your data may be transferred to and processed on servers located outside your country of residence, including in the United States, where some of our subprocessors are headquartered (RevenueCat, Expo, Neon).

By using the app, you agree to this international transfer. We adopt appropriate safeguards to ensure your data remains protected in accordance with applicable laws.

Growy is intended for users aged 13 and older, in accordance with the minimum age policies of the Apple App Store and Google Play Store.

We do not knowingly collect data from children under 13. If we become aware that we have collected data from a child below the minimum age, we will delete that information immediately.

Users between 13 and 17 years of age must have parental or legal guardian consent.

The mobile app does not use cookies. However, our website (getgrowy.app) may use essential cookies for functionality and analytical cookies to understand site usage. You can disable cookies in your browser settings.

We may update this Privacy Policy periodically. We will publish the updated version in the app and on the website with the effective date.

For significant changes, we will notify you via an in-app notice or by email with reasonable advance notice.

Continued use of the app after the effective date of changes constitutes acceptance of the revised policy.

For questions, requests, or complaints related to privacy and data protection, please contact us:

Email: suporte@getgrowy.app

Website: https://getgrowy.app

Growy — responsible for processing personal data of app users.