Privacy policy

The short version:we collect what we need to make Growli useful to you — your garden, your plants, the photos you share with the app, and basic account info. We don't sell your data. We don't run third-party ad networks. You can export everything and delete your account at any time.

This document explains the details in plain English. If anything is unclear, email us.

1. Who we are

Growli is operated by YNMO LTD, a limited company registered in the United Kingdom (Companies House #13293288). We act as the data controller for personal information collected through the Growli app and getgrowli.app website.

2. What we collect

We collect only what we need to provide the service:

• Account info: email address, password (hashed), display name.
• Garden data: the plants you add, photos you upload, care history, location (city/region for climate matching — not exact address).
• Chat history: conversations with the Growli AI assistant, so the assistant can remember your garden over time.
• Device data: device type, OS version, app version, anonymous usage metrics (which features you use).
• Optional: push notification token (if you opt in to reminders), payment information (if you subscribe — processed by our payment provider, we never see your card details).

3. What we DON'T collect

• We don't track you across other websites or apps.
• We don't use third-party ad networks (Facebook Pixel, Google Ads tracking, etc.).
• We don't collect contacts, microphone audio, or background location.
• We don't require your real name or photo.

4. How we use your data

To run the service:

• Provide personalized garden recommendations based on your plants and climate.
• Send the daily morning briefing and frost alerts (if you opt in to notifications).
• Identify plants and diagnose issues from photos you share.
• Improve the Growli AI assistant's accuracy over time (your data trains the model that serves you specifically; your individual data is not used to train third-party models).
• Send transactional emails (account confirmation, billing receipts, password resets).

We do not use your data for advertising or share it with advertisers.

5. Who we share data with

Limited and only when necessary:

• Cloud providers we use to host the app (e.g. AWS, Cloudflare, Supabase) — they process data on our behalf under data-protection agreements.
• Payment processors (Stripe, Apple, Google) — they handle billing; we receive only confirmation of payment status, not card data.
• Email delivery (e.g. Postmark, SendGrid) — for transactional emails.
• AI/ML providers we use for the conversational assistant and image recognition. Photos and chat content may be processed by these providers under contracts that prohibit using your data to train third-party models.

We will disclose data if required by law (court order, regulatory demand) and where necessary to protect the safety of users.

6. International transfers

YNMO LTD is UK-based. Our cloud providers may store and process data in the UK, European Union, or United States. Where data is transferred outside the UK or EU, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Retention

We keep your data as long as your account is active. If you delete your account, we erase your personal data within 30 days, except for limited records we're legally required to keep (e.g. transaction records for tax purposes).

8. Your rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and personal data.
• Export your data in a portable format.
• Object to processing or restrict it.
• Withdraw consent for optional processing at any time.
• Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office — ico.org.uk).

Export and delete are available in-app under Settings. For anything else, email us.

9. Children

Growli is intended for users 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal information to us, email us and we'll delete it.

10. Cookies and tracking on getgrowli.app

The website uses minimal first-party cookies for session management and aggregated anonymous analytics (page views, popular content). We don't use third-party tracking cookies on the public website. The app itself does not use cookies.

11. Changes to this policy

We may update this policy. Material changes will be communicated by email or in-app notification before they take effect. The effective date at the top of this page indicates the current version.

12. Contact

Questions about privacy? Email us at hello@getgrowli.app. We respond within one business day.

For formal data protection requests, reference "UK GDPR data request" in your email subject and include your account email so we can verify identity.