Legal

Privacy Policy

Last updated 11 July 2026

GrowSense ("Company", "we", "us", or "our") helps parents and guardians understand a child's growth. Because that means handling a child's health information, we treat this data with particular care. This Privacy Policy explains what we collect, why, where it is stored, who can see it, and the choices you have. It applies to our website, app, and related services (the "Services"). By using the Services, you agree to the practices described here. If anything is unclear, email contact@growsense.life.

Who holds an account. GrowSense accounts are created and managed by a parent or legal guardian on behalf of a child. The adult account holder is in control of the child's information at all times and can export or delete it whenever they choose.

1. Scope and our role

GrowSense is offered to users across several countries. This Policy sets one protective baseline that respects recognized data-protection frameworks (such as the EU/UK GDPR and Thailand's PDPA) wherever you use the Services.

We act as the data controller for the personal data we process to provide the Services — deciding what is collected and how it is used, as described below. When you choose to grant a clinician or researcher access to your records, that recipient acts as an independent controller for the data you share with them, under their own responsibilities.

2. Children's data

GrowSense is designed to be used by an adult about a child. We do not knowingly allow a child to create their own account. The information you enter about your child is health information, and we handle it only for the purposes in this Policy and only for as long as you keep it in your account. You may delete any child's record, or your whole account, at any time (see Your rights).

Bone-age X-ray images deserve special mention: they are stored solely so you can keep a serial history and, if you choose, share it with a clinician. They are never used for any other purpose.

3. What we collect

We collect only what the Services need, and most fields are optional — you decide how much to enter.

Account & identity

Your email address and the sign-in method you choose (Google, Apple, or email and password).

Child profile & growth data

The child's first name (or a nickname), date of birth, and biological sex — used to place measurements on the correct growth reference and set age-appropriate targets.
Optionally, parents' heights and ages, used only to estimate a target-height range.
Measurements (height, weight, and derived BMI) and the daily nutrition, activity, and sleep entries you log.

Medical records (only if you use these tools)

Illness history, medications, lab results, and puberty-staging notes you enter, and any bone-age X-ray images you upload.

Connected devices (optional)

With your explicit permission, the app can sync figures from a connected wearable or health service — such as sleep, activity, and related metrics — to fill those logs. You can disconnect at any time.

Transactional records

A record of any subscription or redemption (what was purchased and when). We do not see or store your full payment-card number (see Payments).

Technical & system data

Basic technical information needed to run and secure the Services — such as your IP address, device and browser type, and diagnostic data used to keep the app working and to prevent abuse.

4. How we use it

We follow data-minimization principles and process your data only to:

Provide the core features — calculate and show percentiles, target-height range, readiness score, trends, and the AI coach's template answers (which fill in your child's own numbers).
Let you review, correct, and export your family's history.
Operate, maintain, and secure the Services, and respond to support requests.

We do not sell, rent, or trade your data, show advertising, or use your child's health information for advertising or third-party profiling. Health and growth data are kept strictly separate from any marketing purpose.

You. Your family's data is private to your account by default.
People you explicitly invite. If you grant access to a doctor or researcher, they see only the records you share, and you can revoke access at any time.
No one else. We do not share your data with advertisers, data brokers, or unrelated third parties.

6. Where it's stored

Your data is stored in our secure cloud database, hosted in the Singapore region. Access is restricted at the database level so that each account can reach only its own records. GrowSense is a cloud service: your history is stored on our servers so it stays consistent across your devices and can be shared with the people you choose — it is not kept only on your device.

7. International transfers

Because our infrastructure serves users globally, your information may be transferred and processed across international borders. Where we do this, we rely on appropriate safeguards (such as standard contractual clauses) and encryption in transit to protect your data to a consistent standard. By using the Services, you acknowledge these transfers.

8. Security

Data is encrypted in transit (HTTPS/TLS).
Row-level security rules enforce that you can read and write only your own family's records.
Sign-in is handled by established providers; we never see your Google or Apple password.

We apply technical, administrative, and physical safeguards designed to protect your data from unauthorized access, loss, or disclosure. No online service can promise perfect security, but we work to protect your data and to limit what we hold to what the Services genuinely need.

9. Payments

GrowSense offers a free tier and paid tiers. When you purchase or redeem a plan, we keep a record of the transaction. We do not see or store your full payment-card number — billing is handled securely by the app store or payment provider you use, under their own terms.

10. Cookies & technical data

Our website and app use only the essential storage and technical data needed to sign you in, keep you signed in, run the Services, and protect them from abuse — for example, your device's local storage for your session and server logs that include your IP address for security. We do not use third-party advertising cookies or cross-site tracking.

11. Retention

We keep your data for as long as your account is active. When you delete a record or your account, it is removed from our live database. Some day-level logs may be pruned automatically after a period of inactivity to keep the app fast; your measurement history and account are kept until you delete them.

12. Your rights

Wherever you live, you are in control of your family's data. You may:

Access & portability — view and export the data we hold for you.
Rectification — correct any inaccurate information.
Erasure ("right to be forgotten") — delete any record, or use Delete account in Account & settings to erase everything.
Restriction — limit specific processing, for example by disconnecting a wearable or adjusting permissions.

Depending on where you live, you may have additional legal rights under laws such as Thailand's PDPA or the EU/UK GDPR. To exercise any of them, email contact@growsense.life and we will respond.

13. Business changes

If the Company is involved in a merger, acquisition, asset sale, or similar transaction, account information may be transferred as part of that transaction. Any acquiring entity will remain bound by the commitments in this Policy until it is formally superseded, and we will notify you of any material change to who controls your data.

14. Changes to this policy

We may update this Policy from time to time. When we make a meaningful change, we will update the date at the top and, where appropriate, notify you in the app. Continuing to use GrowSense after a change means you accept the updated Policy.

15. Contact

Questions, requests, or concerns about your privacy — including access and erasure requests? Email contact@growsense.life. We read every message.