Privacy Policy
1. Who we are
GrowIQ is a smart greenhouse management application operated by GrowIQ UK, a trading name of SEVRA Group Limited, registered in England and Wales (Company No. 16573490). Our registered address is Unit 6, Springfield House, Evercreech Way, Highbridge, Somerset, TA9 4AR.
We are the data controller for personal data collected through GrowIQ. If you have any questions about this policy or your data, please email us at hello@growiq.co.uk.
2. What data we collect
We collect the following personal data when you use GrowIQ:
- Account data: your email address and password (stored securely, password is hashed and never readable)
- Greenhouse data: plant names, photos, readings, notes, harvest records and other data you enter into the app
- Usage data: when you log in, which features you use, and general app activity
- Payment data: handled entirely by Stripe. We do not store your card details. We receive confirmation of subscription status only
- Device data: browser type and device type for technical support purposes
We do not collect your location, sell your data, or share it with advertisers.
3. How we use your data
- To provide and improve the GrowIQ service
- To send you service emails (account confirmation, password resets, subscription receipts)
- To contact you about your waitlist signup or subscription
- To process AI analysis requests via Anthropic's Claude API - your plant photos and data are sent to Anthropic for processing but are not stored or used to train their models under our enterprise agreement
- To comply with our legal obligations
4. Legal basis for processing
We process your data on the following legal bases under UK GDPR:
- Contract: processing necessary to provide the service you have signed up for
- Legitimate interests: improving the app, preventing fraud, and ensuring security
- Consent: for marketing communications, which you can withdraw at any time
5. Data storage and security
Your data is stored securely using Supabase, hosted on servers within the European Union. We use industry-standard encryption for data in transit (HTTPS) and at rest. Access to your data is restricted to you and authorised GrowIQ staff only.
Plant photos processed by AI are transmitted securely to Anthropic and are not retained by them beyond the processing of your request.
6. Data retention
We retain your account and greenhouse data for as long as your account is active. If you delete your account, all your personal data is permanently deleted within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.
7. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (right to erasure)
- Restrict processing of your data
- Data portability - receive your data in a machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email hello@growiq.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
GrowIQ uses only essential cookies required for the app to function (authentication session tokens). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. Third party services
- Anthropic (Claude AI): processes plant photos and data for AI analysis. Anthropic's privacy policy applies to this processing.
- Stripe: processes payments. Stripe's privacy policy applies to payment data.
- Supabase: hosts our database. Supabase's privacy policy applies to data storage.
- Netlify: hosts the website. Netlify's privacy policy applies to web hosting.
We do not sell or share your personal data with any other third parties.
10. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email. Continued use of GrowIQ after changes constitutes acceptance of the updated policy.