Privacy Policy

1. What We Collect

When you create an account and use Growthling, we collect and store the following information:

• Account data: your name, email address and a hashed version of your password (we never store your plain-text password)
• Child profiles: name, date of birth, and sex — as entered by you
• Measurements: weight, height, head circumference, dates, optional notes and photos you add
• Offline storage: copies of family records saved in your browser so you can view them offline

2. How We Use Your Data

Your data is used solely to:

• Display your children's growth charts and percentile calculations
• Persist your data across sessions so you don't lose it
• Extract measurements from input you choose to send through optional AI tools

We do not use your data for advertising, profiling, or any purpose beyond providing the Growthling service.

3. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Neon (neon.tech). The connection is encrypted in transit via TLS. Passwords are hashed using bcrypt before storage.

While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• Infrastructure providers: Neon (database hosting) and Railway (app hosting) process your data as part of running the service
• Optional AI imports: text, images, audio and spreadsheet content you submit through AI import tools are sent to OpenAI to extract measurements. Audio is transcribed before extraction. Manual entry does not require these tools.
• Caregivers: people you invite can access the child profiles you share with them
• Legal requirements: if required by law, regulation, or legal process

5. Cookies & Tracking

Growthling uses a single session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or fingerprinting.

Automatic third-party page-view analytics are currently disabled. To learn how people find Growthling, your browser remembers the kind of site that first sent you (for example a search engine, an AI assistant or a campaign link, never the full address) and the first public page you opened. When you sign up, we add one to an anonymous daily total for that source and page; it is not linked to your account. Growthling stores a language preference and offline copies of family records in your browser. Offline copies on this browser are cleared when you sign out or delete your account. Copies previously downloaded or saved on other devices cannot be remotely erased.

6. Children's Privacy

Growthling is designed for parents and caregivers to track their children's growth. We do not knowingly collect information directly from children. All data is entered by the parent or caregiver who creates the account.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data via the app's edit features
• Delete your account and the child records you own from Account & privacy
• Export your account and owned child records as JSON from Account & privacy

Use Account & privacy for export and deletion. For other requests, contact us at the email below.

8. Data Retention

We retain your records while your account is active. Account deletion removes your account, sessions and owned child records from the application database. Records owned by other caregivers remain in their accounts. Infrastructure backups and records held by service providers are subject to their retention policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app. Continued use after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, please reach out:

Email: [email protected]