Privacy Policy

Controller

Betser Life Private Limited (CIN U72900KL2021PTC067108, GSTIN 32AAJCB5847N1Z9), Mar Ivanios Vidya Nagar Institutions, TC 14/2608, CCCIET-B-HUB, Mar Ivanios Vidya Nagar, Nalanchira, Thiruvananthapuram, Kerala 695015, India. Privacy contact and grievance officer: Biji Thomas, bt@grownz.ai.

What the app collects

Account: your email address, the name you give, country, currency, time zone, life stage, your year of birth (to confirm you are 18 or older and for retirement planning; from the next release also your birth month, for the same check) and an optional profile photo.
Your answers when setting up: your situation, how money comes in, whether you track spending, what you save, whether you have EMIs or loans, and what worries you about money. They order what Home shows first and can be changed under Account.
Consent: a record of the consent you give at the end of setting up, and when you gave it.
Financial detail you enter: expenses, budgets, holdings, loans, policies, housing figures, goals, reminders, the documents and receipts you upload, and household membership.
Family and trusted people: the email addresses of people you invite; and, if you use Who gets what, the names and email addresses of the nominees and trusted people you enter. Grownz does not write to a trusted person when you name them: you choose whether to give them their link. If they use it to ask for access, you are told at once and have 14 days to refuse, and amounts are never shown to them.
Push notifications: if you switch them on, the subscription your browser creates (an address at your browser maker's push service and its keys), kept until you switch push off or delete your account.
On your phone: the Grownz app keeps your session in the phone's own secure storage (Keychain on iPhone, Keystore on Android), never in a cookie. So that a weak signal still shows your numbers, it also keeps the last answers to its screens on the phone, sealed with a key held in that secure storage, for up to 30 days; they are forgotten when you sign out or change household, and the phone leaves them out of its backups. If you switch on the app lock, the phone's own Face ID, Touch ID or fingerprint check unlocks it; Grownz never sees that biometric.
Technical: server logs with IP address and request metadata for security and rate limiting, kept 180 days as Indian CERT-In rules require; error reports through Sentry (errors only, no session replay).
Payments: subscription status and a provider reference. When paid plans open, card and UPI details will be handled by Razorpay or Stripe and never reach Grownz.
AI key: if you supply an Anthropic API key, it is stored sealed with a server secret. Only its last 4 characters are ever displayed.

What this website collects

The contact form: your name, email address, topic and message, sent by email to our team inbox so that we can reply.
The early-bird form: the email address you enter, used to send you the code and a copy to our team inbox. A one-way hash of the address is kept for 24 hours to limit repeat requests.
Rate limiting: a one-way hash of your IP address, kept for up to 24 hours, to limit how often the forms and the assistant can be called.
Form check: Cloudflare Turnstile checks that a form is sent by a person. Cloudflare processes connection data for that check under its own privacy policy.
Analytics: Google Analytics 4, only when it is switched on for the site and only after you allow it in the cookie notice, with IP anonymisation. You can withdraw at any time from the footer. See the Cookie Policy.
The assistant: the question you type is answered from the help centre in your browser. When the Claude upgrade is switched on, the question (never your data) is sent to Anthropic.
Hosting: Vercel hosts this website and runs its forms, and keeps request logs with IP addresses and user agents as any web host does.

Why

To provide the service you signed up for, to keep it secure, to bill paid plans when they open, to answer support requests, and, on this website, to answer your questions and to send the early-bird code you asked for. We do not use your financial detail for advertising and we do not sell it. The legal basis is the consent you give when setting up, which you can withdraw at any time by deleting your account, and, for security logs, our legal duties and our legitimate interest in keeping the service safe.

Where it goes

Data is processed by the providers listed in the Sub-processors page: Supabase (database, authentication, storage), Fly.io (application hosting), Vercel (this website and its forms), Stripe and Razorpay (billing, when paid plans open), Resend (email), Inngest (scheduled jobs), Sentry (error reporting), Doppler (secrets), Cloudflare (the form check on this website), Google (analytics on this website, only with your consent) and Anthropic (in the product only when you supply your own key; on this website, the assistant may send the question you type to Anthropic when that upgrade is switched on). Grownz and these providers may process your data outside the country you live in.

If you invite someone, they see the areas you switch on, at the detail you choose. In summary mode amounts are removed on the server before the response is built.

How long

Your account, your financial detail, your files and your sign-in are erased at once when you delete your account from Your data in the app. Copies held in database backups are overwritten in the normal backup cycle. The append-only security audit log keeps a record of the deletion, never your financial detail, for 2 years. Server logs: 180 days. Idempotency keys: 24 hours. The hashes this website keeps for its forms: 24 hours.

Your rights

Depending on where you live you may have rights to access, correct, export, restrict or delete your data, and to complain to a supervisory authority. In the app you can do this yourself at any time: everything you entered is on its screen and editable, and Your data offers Download a copy (everything your household holds, as one JSON file) and Delete your account (erased at once). You may also email bt@grownz.ai; we verify the request through the email address on the account and respond within 30 days. Under India's Digital Personal Data Protection Act you may nominate a person to exercise these rights for you if you are unable to; email bt@grownz.ai to do so.

Cookies

The web app uses a session cookie that is essential for sign-in; the phone app uses no cookies and keeps its session in the phone's secure storage. This website's cookie use is described in the Cookie Policy.

Children

Grownz is for adults. You must be 18 or older to create an account, in every market, and the app asks your year of birth at setup.

Grievance officer (India)

Under the Digital Personal Data Protection Act 2023 you may raise any concern about your personal data with our grievance officer, Biji Thomas, at bt@grownz.ai. We acknowledge within 48 hours and resolve within 30 days. If unresolved, you may approach the Data Protection Board of India.

Changes

We will post changes here with a new date and, for material changes, notify account holders by email.