We collect your email address for authentication, and any child growth data (name, date of birth, sex, weight, height measurements) you voluntarily enter. We collect this data solely to provide the growth tracking service.
Your data is stored in a self-hosted PostgreSQL database protected by row-level access control (RLS) and encrypted in transit (TLS). Database backups are compressed and stored with Backblaze B2. We use Plausible Analytics — a cookieless, privacy-friendly analytics tool — to measure aggregate page usage, and Google Fonts and Sentry for typography and error monitoring. We never sell your data.
You have the right to access, correct, export, and delete your data at any time. To exercise these rights, email privacy@growchart.app or use the in-app export and deletion features (Settings → GDPR & Health Data Privacy). We will process your request within 30 days.
We use only a single essential session cookie for authentication. No tracking or advertising cookies are used.
We use Paddle and Stripe for payment processing (subject to their privacy policies), Resend for transactional email, Plausible for privacy-friendly analytics, Google Fonts for typography, Sentry for error monitoring, Backblaze B2 for backup storage, and Anthropic / OpenRouter / Google (Gemini) for the optional AI advisor. The AI advisor receives only the currently selected child's profile data to answer your question; questions are not used to train models. No data is sold to any third party.
GrowChart is operated by adults (parents/guardians) on behalf of children. We do not knowingly collect data directly from children under 13.
For privacy inquiries: privacy@growchart.app