Controller
Betser Life Private Limited (CIN U72900KL2021PTC067108, GSTIN 32AAJCB5847N1Z9), Mar Ivanios Vidya Nagar Institutions, TC 14/2608, CCCIET-B-HUB, Mar Ivanios Vidya Nagar, Nalanchira, Thiruvananthapuram, Kerala 695015, India. Privacy contact and grievance officer: Biji Thomas, bt@grownz.ai.
What the app collects
- Account: your email address, the name you give, country, currency, time zone, life stage, your year of birth (to confirm you are 18 or older and for retirement planning; from the next release also your birth month, for the same check) and an optional profile photo.
- Your answers when setting up: your situation, how money comes in, whether you track spending, what you save, whether you have EMIs or loans, and what worries you about money. They order what Home shows first and can be changed under Account.
- Consent: a record of the consent you give at the end of setting up, and when you gave it.
- Financial detail you enter: expenses, budgets, holdings, loans, policies, housing figures, goals, reminders, the documents and receipts you upload, and household membership.
- Family and trusted people: the email addresses of people you invite; and, if you use Who gets what, the names and email addresses of the nominees and trusted people you enter. Grownz does not write to a trusted person when you name them: you choose whether to give them their link. If they use it to ask for access, you are told at once and have 14 days to refuse, and amounts are never shown to them.
- Push notifications: if you switch them on, the subscription your browser creates (an address at your browser maker's push service and its keys), kept until you switch push off or delete your account.
- Technical: server logs with IP address and request metadata for security and rate limiting, kept 180 days as Indian CERT-In rules require; error reports through Sentry (errors only, no session replay).
- Payments: subscription status and a provider reference. When paid plans open, card and UPI details will be handled by Razorpay or Stripe and never reach Grownz.
- AI key: if you supply an Anthropic API key, it is stored sealed with a server secret. Only its last 4 characters are ever displayed.
What this website collects
- The contact form: your name, email address, topic and message, sent by email to our team inbox so that we can reply.
- The early-bird form: the email address you enter, used to send you the code and a copy to our team inbox. A one-way hash of the address is kept for 24 hours to limit repeat requests.
- Rate limiting: a one-way hash of your IP address, kept for up to 24 hours, to limit how often the forms and the assistant can be called.
- Form check: Cloudflare Turnstile checks that a form is sent by a person. Cloudflare processes connection data for that check under its own privacy policy.
- Analytics: Google Analytics 4, only when it is switched on for the site and only after you allow it in the cookie notice, with IP anonymisation. You can withdraw at any time from the footer. See the Cookie Policy.
- The assistant: the question you type is answered from the help centre in your browser. When the Claude upgrade is switched on, the question (never your data) is sent to Anthropic.
- Hosting: Vercel hosts this website and runs its forms, and keeps request logs with IP addresses and user agents as any web host does.
Why
To provide the service you signed up for, to keep it secure, to bill paid plans when they open, to answer support requests, and, on this website, to answer your questions and to send the early-bird code you asked for. We do not use your financial detail for advertising and we do not sell it. The legal basis is the consent you give when setting up, which you can withdraw at any time by deleting your account, and, for security logs, our legal duties and our legitimate interest in keeping the service safe.
Where it goes
Data is processed by the providers listed in the Sub-processors page: Supabase (database, authentication, storage), Fly.io (application hosting), Vercel (this website and its forms), Stripe and Razorpay (billing, when paid plans open), Resend (email), Inngest (scheduled jobs), Sentry (error reporting), Doppler (secrets), Cloudflare (the form check on this website), Google (analytics on this website, only with your consent) and Anthropic (in the product only when you supply your own key; on this website, the assistant may send the question you type to Anthropic when that upgrade is switched on). Grownz and these providers may process your data outside the country you live in.
Household sharing
If you invite someone, they see the areas you switch on, at the detail you choose. In summary mode amounts are removed on the server before the response is built.
How long
Your account, your financial detail, your files and your sign-in are erased at once when you delete your account from Your data in the app. Copies held in database backups are overwritten in the normal backup cycle. The append-only security audit log keeps a record of the deletion, never your financial detail, for 2 years. Server logs: 180 days. Idempotency keys: 24 hours. The hashes this website keeps for its forms: 24 hours.
Your rights
Depending on where you live you may have rights to access, correct, export, restrict or delete your data, and to complain to a supervisory authority. In the app you can do this yourself at any time: everything you entered is on its screen and editable, and Your data offers Download a copy (everything your household holds, as one JSON file) and Delete your account (erased at once). You may also email bt@grownz.ai; we verify the request through the email address on the account and respond within 30 days. Under India's Digital Personal Data Protection Act you may nominate a person to exercise these rights for you if you are unable to; email bt@grownz.ai to do so.
Cookies
The app uses a session cookie that is essential for sign-in. This website's cookie use is described in the Cookie Policy.
Children
Grownz is for adults. You must be 18 or older to create an account, in every market, and the app asks your year of birth at setup.
Grievance officer (India)
Under the Digital Personal Data Protection Act 2023 you may raise any concern about your personal data with our grievance officer, Biji Thomas, at bt@grownz.ai. We acknowledge within 48 hours and resolve within 30 days. If unresolved, you may approach the Data Protection Board of India.
Changes
We will post changes here with a new date and, for material changes, notify account holders by email.