سياسة الخصوصية

Privacy Policy (English)

Last updated: 5 September 2026

Groowz is an Arabic-language child development companion for mothers and adult caregivers. The account belongs to the caregiver; children do not use the app. This policy covers the Groowz mobile app (iOS and Android) and groowz.com. We handle data in line with regional data protection laws (PDPL and equivalent) across the MENA region.

What we collect

• ◆Email address — to create your account, sign you in, and send reminders.
• ◆Your name, as passed to us by Apple or Google when you sign in — to address you by name.
• ◆Child's first name, date of birth, and optionally gender — the age in months is what every developmental observation is calculated against.
• ◆Voice recording — transient, used only to produce a transcript, then deleted (see below).
• ◆The transcript you review and confirm, and the observations derived from it — the daily report, attention signals and journey summaries.
• ◆Push token and device timezone — the timezone so a reminder lands at your local time; the token is stored to enable notifications in future, while today the daily reminder is scheduled by your phone itself and never leaves our servers.

What we do not collect

No location, contacts, photos or calendar. No analytics, crash reporting or advertising identifiers — none are installed in the app. No tracking across other apps or websites, so App Tracking Transparency does not apply. No payment data; there are no purchases.

Voice recordings

A recording is uploaded, transcribed by OpenAI, and kept for the few minutes you spend reviewing the transcript — deliberately, so you can listen back while checking the text. It is deleted from storage the moment analysis completes, and its reference is cleared from the database, even if the analysis itself fails. Re-recording or deleting a note before analysis deletes the audio immediately. The one case where a recording persists longer is if you close the app mid-review without finishing or discarding the note; a daily automated sweep then removes any abandoned recording older than two hours — within a day at most — and it is deleted in any case when the child or the account is deleted.

Neither your audio nor your text is used to train AI models by us. Nor by OpenAI, our provider: its API data usage policy states that data submitted through the API is not used to train or improve its models unless the customer explicitly opts in — and we have not, and will not. OpenAI retains limited logs for abuse monitoring for a bounded period before deleting them.

How AI is used

Our AI provider is OpenAI, which processes what we send on its servers, off your device. Exactly what reaches it:

• ◆The voice recording, to be turned into text. Nothing else is sent with it.
• ◆The text of your note as you reviewed it — or as you typed it, if you chose to write instead of record.
• ◆Your child's name and age in months, and gender if you added it.
• ◆Your child's recent daily reports, weekly and monthly summaries, and the domain, occurrence count and dates of any open attention signals — not the text of the signal itself.

OpenAI does not receive your email address, your name, or any identifier for your account or your child. Your child's date of birth is not sent either — only the age in months derived from it.

This happens when you submit a note, and also once a week and once a month when we summarise what has accumulated — the only time it happens while you are not in the app.

Before the first send, the app asks for your explicit permission and shows you the list above. You can withdraw that permission at any time from Account → Privacy and your data, which stops new notes and summaries from being sent; everything recorded before it stays as it is. The consent screen reaches iOS first and Android in a following update.

Who receives data

We do not sell your data and do not share it for advertising. We use processors acting on our instructions only: Supabase, OpenAI, Resend, Expo, Railway, Apple, Google — respectively for hosting, database, authentication and file storage; speech-to-text and note analysis; reminder and sign-in email delivery; push notification delivery; application server hosting; sign in with apple; google sign-in. We may disclose data where required by applicable law, or to protect our rights or someone's safety.

Each of these processors is contractually bound — by its terms of service and by the data processing agreement governing our use of it — to provide protection equal to what this policy describes: confidentiality, purpose limitation, security measures, and no use of your data for its own ends. None of them is permitted to sell your data or use it for advertising.

Some of this processing happens on servers outside your country, where these providers run their infrastructure. We transfer data only to providers bound by the protections above.

Retention and your rights

Notes, reports, signals and summaries are kept for as long as your account exists, since their value comes from accumulating over months. Deleting a child removes that child's notes, reports, signals, summaries and audio files; the name, date of birth and gender remain in a deactivated record that no longer appears in the app, and are erased when you delete your account. Deleting your account removes all of it, plus your profile, settings and sign-in credentials — after which an anonymous statistical record of the account (the dates it was created, was active, and was deleted) remains so we can measure product growth; it contains no email, no name, and nothing about your child. You can access your data in the app and edit your child's details there; your own name and email come from Apple or Google at sign-in, so write to us to correct those. You can delete your account from Account → Delete account or at groowz.com/delete-account, and withdraw AI-processing consent at any time from Account → Privacy and your data. For any data request, write to hi@groowz.com; we respond within 30 days.

Not a medical service

Groowz observes; it does not diagnose. Attention Signals are informational and are not medical advice or a substitute for a qualified professional.