Growney
Privacy Policy
Last updated: 13 September 2026
This policy explains how Growney, the mobile app for iOS and Android, and this website handle personal data. If anything is unclear, write to us at support@growney.app.
The short version
- We collect only what the app needs to work. No ads, no advertising IDs, and we never sell data.
- Only a grown-up can create a child's profile. We don't ask for a child's email or phone number.
- Your family's data is stored in the European Union (Belgium).
- Photos confirming tasks are deleted automatically 30 days after upload.
- You can delete your account and your family's data in the app at any time.
1. Who is responsible for your data
The controller of your personal data is Yevhenii Dryha, ul. Milczańska 18a/22, 61-131 Poznań, Poland, NIP 5273007452, REGON 522367200 (“we”, “us”). Contact: support@growney.app.
We have not appointed a data protection officer. Send any privacy question or request to the address above.
2. How Growney works
A grown-up creates an account and a family, adds children's profiles and sets up tasks, bonuses, fines and savings goals. Other grown-ups can be invited to the family. A child can use Growney on their own phone or tablet after a grown-up links it with a one-time code. Children never create accounts themselves.
Money in Growney is virtual. We don't process payments between family members and don't connect to banks.
3. What data we process
Grown-ups
| Data | What it includes | Why we need it |
|---|---|---|
| Account | Email address and password (stored hashed by Firebase Authentication), or an identifier from Sign in with Apple or Google if you use them | To create your account and let you sign in |
| Profile | The name your children call you (for example “Mom”), app language | To show who did what and to send notifications in your language |
| Family settings | Currency, value of a regular task, time zone | To count rewards and apply deadlines at the right time |
| Content you create | Tasks, bonuses, fines, goals, comments, pictures you choose or take | To provide the service |
| Family activity | Approvals, rewards, fines and purchases you record, and who recorded them | To keep balances and history |
| Notifications | Push token of your device and its language | To deliver notifications |
| Subscription | Whether the family's subscription is active, the plan and its end date | To give access to paid features. We never receive your card details. |
| Support | Your messages and our replies | To answer your questions |
Children
A grown-up enters and manages this data:
- name or nickname (a nickname is fine), an avatar picked from the app's pictures, year of birth (used to suggest tasks that suit the child's age);
- tasks, balance, history of rewards, fines and purchases, savings goals and settings such as automatic fines;
- photos the child takes to show a finished task, when a grown-up asks for photo proof, and goals the child suggests;
- for a linked device: an identifier the app creates for that device (no email or password), the device model, the time it was linked, its push token and language.
We don't ask for a child's email, phone number, location or contacts. Photo proof is meant to show the result of a task, such as a tidy room, not the child.
Technical data
When the app connects to our servers, they process the technical data needed to deliver and protect the service: IP address, device and operating system type, app version, time of requests and error logs.
If the app crashes, it sends a crash report through Firebase Crashlytics: device model, operating system version, app version, what the app was doing at the time and a random installation identifier. Crash reports don't include your name or email.
This website
This website uses no cookies, analytics or third-party trackers, and serves its fonts from our own server. Our hosting provider processes IP addresses and request logs to deliver the pages and protect them from abuse.
What we don't do
- We don't show ads, use advertising SDKs or read the advertising identifier.
- We don't track you across other companies' apps and websites.
- We don't sell personal data or share it for marketing.
4. Legal bases
We process personal data under the EU General Data Protection Regulation (GDPR) on these grounds:
- Contract (Art. 6(1)(b)): your account, family, tasks, balances, notifications and subscription.
- Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse, fixing errors, answering support requests and defending legal claims.
- Legal obligation (Art. 6(1)(c)): keeping accounting records and responding to lawful requests from authorities.
The app uses the camera, photos and notifications only after you allow it in your device's system prompt. You can turn this off in your device settings at any time.
5. Children's privacy
- Growney is an app for parents and families. Children only use the child mode, on a device a grown-up has linked.
- By adding a child's profile, a grown-up confirms that they are the child's parent or legal guardian, or have their permission.
- The child mode has no ads, no purchases and no way to contact people outside the family.
- A child sees only their own tasks, balance, goals and history.
- Grown-ups can review, change and delete a child's data in the app at any time. They can stop further collection by unlinking the child's device or deleting the profile.
- If you believe we hold a child's data without a parent's permission, write to us and we will delete it.
6. Who we share data with
Your family. Grown-ups in a family see all of that family's data, including children's photos. A child sees only what concerns them.
Service providers. These companies process data on our behalf, under data processing agreements, and only to run Growney:
| Provider | What for | Where |
|---|---|---|
| Google Cloud and Firebase (Google Ireland Limited) | Sign-in, database, storage for pictures and photos, server functions, push notifications, crash reports, website hosting | Database, files and server functions in the EU (Belgium). Sign-in, notifications and crash reports may also be processed in other countries, including the United States. |
| RevenueCat, Inc. | Checking subscription status with the App Store and Google Play. Receives a random user ID and purchase details from the store. | United States |
| Google Workspace (Google Cloud EMEA Limited) | Receiving and answering emails sent to our support address | EU and other countries, including the United States |
Apple and Google. The App Store and Google Play sell subscriptions and handle payments as independent controllers, under their own privacy policies. If you choose Sign in with Apple or Sign in with Google, that company also processes your sign-in. Apple and Google deliver push notifications to their devices.
Authorities. We disclose data only when the law requires it.
7. Transfers outside the European Economic Area
When a provider processes data outside the EEA, we rely on a European Commission adequacy decision, such as the EU–US Data Privacy Framework for certified companies, or on the Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards.
8. How long we keep data
| Data | Kept |
|---|---|
| Your account and profile | Until you delete your account |
| A family and its children's data | Until the last grown-up in the family deletes their account; then the whole family is deleted |
| A child's profile | Until a grown-up deletes it; then the child's balance, history, goals and photos are deleted and linked devices lose access |
| Photos confirming tasks | 30 days after upload. A photo still waiting for a grown-up's review is deleted after the review. |
| Pictures uploaded but never saved to a task, bonus, fine or goal | Up to 2 days |
| Push tokens | Until you sign out or delete the account, or the token stops working |
| Records that stop the app sending the same reminder twice | 7 days |
| Database backups | 7 days, so deleted data may remain in a backup for up to 7 days |
| Server logs | Up to 30 days |
| Support emails | Up to 2 years after your question is resolved |
How to delete your account and what happens to your data: Delete your account.
9. Your rights
You have the right to:
- access your data and get a copy of it;
- correct inaccurate data;
- have your data deleted;
- restrict processing;
- receive your data in a machine-readable format (portability);
- object to processing based on our legitimate interests;
- withdraw consent at any time, where processing is based on consent.
You can change and delete most data yourself in the app. For anything else, write to support@growney.app from the email address of your account. We will reply within one month. Parents exercise these rights on behalf of their children.
You can also complain to a data protection authority. In Poland that is the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also contact the authority in the EU country where you live.
10. Security
- Data is encrypted in transit (TLS) and at rest.
- Access rules let only members of a family read its data. A child's device reads only what concerns that child and loses access as soon as it is unlinked.
- Balances are changed only by our servers, never directly by the app.
- If a data breach puts your rights at risk, we will inform you and the authority as the GDPR requires.
11. Automatic fines
If a grown-up turns on automatic fines, the app deducts the fine that grown-up set for a task when its deadline passes without the task being done. This is a rule the family sets for itself, not profiling. Grown-ups can turn it off and undo any fine.
12. Changes to this policy
When we change this policy, we update the date at the top. We will tell you about significant changes in the app or by email before they take effect.
13. Contact
Yevhenii Dryha, ul. Milczańska 18a/22, 61-131 Poznań, Poland
Email: support@growney.app