Privacy policy

Earlier versions of the service ran a one-time liveness check at signup using Amazon Rekognition Face Liveness, and derived a face template from it so that one person could not hold several memberships. That step has been removed. Nothing in the product performs it any more, and the code that did has been deleted.

Members who joined while that step existed have an enrolment record from it. Each one carries a deletion deadline stored on the record itself, and the images are deleted when it passes. We do not create new records, and nothing reads the existing ones to make decisions about you.

If you were enrolled and want the remaining record erased before its deadline, write to info@growmoment.app and we will remove it. Because nothing depends on it any more, there is no consequence to your membership for asking.

• Email address and, if you sign in with a password, a password held in hashed form by Firebase Authentication. We never see the password itself.
• Member number, allocated once and never reused.
• Nickname and avatar. Both are generated for you: the nickname and its meaning, and the avatar image, are produced by a model from a prompt and a style you choose. Your stated gender is used to pick an avatar style and for nothing else.
• “About me”, if you write one. It appears on your public profile and is given to Aris as standing context.
• Your timezone, captured from your browser. It exists so the daily reminder lands at 22:00 where you are rather than at a random hour.

• Check-ins. One per local day: a level from 0 to 5 and, optionally, a note. The note is private to you. To write his reply, Aris sends it to our AI provider — see Your notes and AI below. His reply is stored so your history can show what he said.
• Stories. If you publish a day, a single headline written by Aris from your note becomes visible to other members. That headline is a synthesis, not your note reproduced. A second, separate choice — made per day — decides whether the note behind the headline travels with it. Unpublishing removes both and leaves no record that a story existed.
• Your protocol base. Sex, birth date, height, weight, how often you train, how the rest of your day moves, your bedtime and how long you intend to sleep. We store what you told us; every target is computed from it on read and none of the computed numbers are stored.
• Your day. The schedule, targets and goals you keep, and which parts of the protocol you ticked off on a given day.
• Forum activity. Posts, comments and votes, under your nickname and visible to other members.

Body and health figures. Your height, weight, date of birth, sleep and training load can amount to data concerning health. We treat them as special-category data and process them on the basis of your explicit consent, given at checkout and again when you set up your base. You can withdraw that consent or delete the base entirely, without giving up the rest of the membership. We do not connect to fitness trackers or wearables and we do not collect step counts or heart-rate data.

Your daily note is a free-text field, so what goes in it is entirely yours to decide — and people write about their health, their moods, their treatment and their setbacks. We do not ask for any of that, and no part of the product looks for it. But we do have to say plainly what happens to a note once you save it.

Where it goes. The note is stored in our database in Frankfurt. To write his reply, and to write a story headline if you ask for one, Aris sends the text of that note to OpenAI in the United States. It is sent without your name, your email or your account id — the provider receives the words and nothing that identifies who wrote them. We ask the provider not to store it, and it is not used to train their models. Like any API customer we cannot rule out a short abuse-monitoring window on their side; what we control is that nothing we send links those words to you.

The basis for it. Because a note can contain data concerning health, we treat it as special-category data and rely on the explicit consent you give at checkout, which names your notes and this transfer. You can withdraw that consent at any time; the practical effect is that Aris stops replying, because a reply to a note requires sending the note.

What stays private. Notes are private by default and no other member can read one. Publishing a day as a story is a separate choice you make per day, and it publishes a one-line headline rather than the note; releasing the note behind it is a further, separate choice. Nothing is inherited from one day to the next.

If you would rather Aris never saw a particular day, leave the note empty — the check-in still counts, and your streak is unaffected.

Payments run through Stripe. We hold a Stripe customer id, a subscription id and status, the price, the amount, the currency, the billing interval, the renewal date and invoice records. We never receive or store your card number.

• Request data — IP address, user agent, the page requested, and the time — logged by our hosting provider for security and diagnostics.
• Error reports — when something breaks, a stack trace and the account id associated with the failing request go to our monitoring service.
• Page-timing measurements — anonymous loading and responsiveness figures. They carry no identifier and are used to find slow pages.
• Cookies. Only the ones that keep you signed in, carry an in-progress signup, and remember your cookie choice. See the cookie policy.