Privacy Policy

Last updated: January 28, 2026

INTRODUCTION

At Grow Together, operated by Parova Labs S.R.L. ("Grow Together," "we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you use our mobile application and related services (collectively, the "Platform").

By using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

This Privacy Policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and Romania. We respect your rights regarding your personal data and are committed to transparency in our data practices.

INFORMATION WE COLLECT

We collect various types of information to provide and improve our Services. The information we collect includes:

1. Information You Provide Directly

  • Account Information: When you register, we collect your name, email address, password (encrypted), and optional information such as your anniversary date and profile picture.
  • Profile Information: You can customize your profile with an orb color preference, current mood, and other personalization settings.
  • Partner Connection: When you link with your partner using an invitation code, we store this connection to enable shared features.
  • User-Generated Content: We collect content you create and share, including journal entries, quiz responses, chat messages, love coupons, calendar events, tasks, stories, whiteboard drawings, game results, and achievement progress.
  • Communication: When you contact us for support or feedback, we collect the information you provide in your communications.

2. Information Collected Automatically

  • Device Information: We collect information about your device, including device type, operating system, unique device identifiers, and mobile network information.
  • Usage Data: We collect information about how you interact with the Platform, including features accessed, time spent on different screens, and engagement patterns.
  • Location Information: With your explicit consent, we collect and share your real-time location with your partner to enable distance calculations and location-based features.
  • Log Data: We collect standard server log information, including IP address, browser type, access times, and pages viewed.
  • Analytics Data: We use analytics services to understand app usage patterns and improve user experience.

3. Information from Third Parties

  • Authentication Services: If you sign in using Apple or Google, we receive basic profile information from these services.
  • Payment Information: Subscription payments are processed by Apple and Google. We do not store credit card or payment information directly.

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

1. To Provide and Maintain Our Services

  • Create and manage your account
  • Enable partner linking and shared features
  • Store and synchronize your content
  • Enable real-time chat and features
  • Share location information between connected partners (with consent)

2. To Improve and Personalize Your Experience

  • Customize the app interface based on your preferences
  • Provide personalized content recommendations
  • Analyze usage patterns to improve features

3. To Communicate with You

  • Send push notifications about partner activity
  • Provide service announcements and updates
  • Respond to your inquiries and support requests
  • Send reminders about streaks, events, and important dates

4. For Security and Legal Compliance

  • Detect and prevent fraud, abuse, and unauthorized access
  • Enforce our Terms and Conditions
  • Comply with legal obligations
  • Protect the rights, property, and safety of Grow Together, our users, and others

HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. We share your information only in the following circumstances:

1. With Your Partner

The Platform is designed for couples to share experiences. When you link accounts with your partner, certain information is shared between you.

2. With Service Providers

We work with trusted third-party service providers who help us operate the Platform:

  • Cloud Storage: Amazon Web Services (AWS) S3 and Google Cloud
  • Database Hosting: Supabase (PostgreSQL)
  • Authentication: Apple Sign In and Google Sign In
  • Payment Processing: Apple App Store and Google Play Store
  • Content Delivery: Cloudflare

3. For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

DATA STORAGE AND SECURITY

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect your data.

Security Measures

  • Encryption: Industry-standard encryption for data in transit (HTTPS/TLS) and at rest
  • Authentication: Passwords are securely hashed and never stored in plain text
  • Access Controls: Strict access controls to limit who can access user data
  • Regular Security Audits: We regularly review and update our security practices

Data Retention

  • Active Accounts: Data retained while your account is active
  • Inactive Free Accounts: Data may be deleted after 12 months of inactivity
  • Inactive Premium Accounts: Content retained for 3 months after subscription expires
  • Deleted Accounts: Personal data permanently deleted upon account deletion

YOUR RIGHTS AND CHOICES

Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws, including GDPR for EU users.

  • Right to Access: Request access to your personal information
  • Right to Rectification: Update or correct your personal information
  • Right to Erasure: Request deletion of your personal data
  • Right to Data Portability: Request a copy of your data in machine-readable format
  • Right to Object: Object to processing of your personal data
  • Right to Lodge a Complaint: File a complaint with your data protection authority

To exercise any of these rights, please contact us at contact@parovalabs.com. We will respond within 30 days.

CHILDREN'S PRIVACY

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@parovalabs.com.

INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data from the European Economic Area (EEA) to other countries, we ensure that appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will notify you through the Platform, email, or other appropriate means.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Controller: Parova Labs S.R.L.

Email: contact@parovalabs.com

LEGAL BASIS FOR PROCESSING (GDPR)

For users in the European Economic Area and Romania, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing is necessary to provide the Services you have requested
  • Consent: You have given explicit consent for specific processing activities
  • Legitimate Interests: Processing is necessary for our legitimate business interests
  • Legal Obligations: Processing is necessary to comply with legal obligations