Controller
[PLACEHOLDER: legal entity name], [PLACEHOLDER: registered address]. Privacy contact: [PLACEHOLDER: privacy contact address].
What we collect
- Account: your email address, display name, country, currency, time zone, life stage, and an optional profile photo.
- Financial detail you enter: expenses, budgets, holdings, loans, policies, housing figures, goals, reminders, documents you upload, and household membership.
- Technical: server logs with IP address and request metadata for security and rate limiting; error reports through Sentry (errors only, no session replay).
- Payments: subscription status and provider references. Card and UPI details are handled by Razorpay or Stripe and never reach Grownz.
- AI key: if you supply an Anthropic API key, it is stored sealed with a server secret. Only its last 4 characters are ever displayed.
Why
To provide the service you signed up for, to keep it secure, to bill paid plans, and to answer support requests. We do not use your financial detail for advertising and we do not sell it.
Where it goes
Data is processed by the providers listed in the Sub-processors page: Supabase (database, authentication, storage), Fly.io (application hosting), Vercel (edge routing), Stripe and Razorpay (billing), Resend (transactional email), Inngest (scheduled jobs), Sentry (error reporting), Doppler (secrets), and Anthropic (in the product, only when you supply your own key; on the marketing website, the assistant may send the question you type to Anthropic on our key when that upgrade is switched on). [PLACEHOLDER: hosting regions once production is final]
Household sharing
If you invite someone, they see the areas you switch on, at the detail you choose. In summary mode amounts are removed on the server before the response is built.
How long
Financial detail and profile: until account deletion plus 30 days. Uploaded documents: 7 years after account close where tax law requires it, otherwise 30 days. Audit log: 2 years. Idempotency keys: 24 hours. Server logs and error reports: [PLACEHOLDER: retention].
Your rights
Depending on where you live you may have rights to access, correct, export, restrict or delete your data, and to complain to a supervisory authority. Self-serve export and deletion are not yet available in the product. To exercise any right, email [PLACEHOLDER: privacy contact address] and we will respond within [PLACEHOLDER: response time, 30 days suggested]. We will verify the request through the email address on the account.
Cookies
The app uses a session cookie that is essential for sign-in. This website's cookie use is described in the Cookie Policy.
Children
Grownz is not directed at people under 18. [PLACEHOLDER: age threshold per market]
Changes
We will post changes here with a new date and, for material changes, notify account holders by email.