Skip to content
Get the app

Legal

Growww privacy policy

What we collect, what the app reads from Google, how long we keep it, and your rights under India's DPDP Act, 2023.

Last updated: 16-10-2026

Growww↗ is made by Growww Tech, the trading name of Grovesbox Private Limited, 1st Floor, YBR Nilayam, Dayal Nagar Colony, Vishalakshi Nagar, Visakhapatnam, Andhra Pradesh 530043 ("we", "us"). This policy covers the Growww↗ app on Android and iPhone, the web app at app.growwwtech.com and this website, growww.in. It follows India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. The growwwtech.com website has its own policy.

This website

growww.in sets no cookies and runs no analytics or advertising scripts. Our host, Vercel, keeps standard request logs (IP address, browser, the page asked for and the time) to run and protect the site. If you use the light and dark switch, your browser remembers your choice on your own device; it is never sent to us.

Your account

When you sign up we keep:

  • your name and email address, and a password, which our login system stores only as a one-way hash, so nobody can read it. If you sign in with Google instead, Google shares your name, email address and profile photo with us (the sign-in permissions openid, email and profile);
  • your brand: its name, its GSTIN and an Indian (+91) mobile number. We check the GSTIN with a GST verification service (India Compliance) and keep what the GST records return: the legal name, the trade name and the registered address;
  • what you choose to add: your photo, your brand's logo, the platform your website runs on (Shopify, WooCommerce or another), and the email addresses of people the brand's owner adds to the team.

The app itself has no analytics, advertising or crash-reporting tools in it. It keeps your sign-in and a copy of what it last showed you on your phone, so it opens quickly.

Requests, projects and calls

If you hire the Growww Tech team, the app keeps what you send in Requests (messages, photos, files up to 25 MB and voice notes up to two minutes). The app uses your microphone only while you record a voice note, and your photos only when you pick one.

Calls to our support line, +91 81218 13876, are recorded. The recording is kept with your brand's records so the team can listen back and follow up; it is not shown in the app.

Phone notifications

If you allow notifications, the app registers your phone with OneSignal, the service that delivers them. OneSignal holds your login ID (the email address you sign in with), a device token for your phone and the text of the notifications we send you. We send one only when something needs you, such as a reply to your request. Switch them off any time in your phone's settings. Signing out stops them on that phone; deleting your account deletes your OneSignal record too.

Google Analytics and Search Console

If you connect them, the Analyst reads your website's numbers from Google. You sign in with Google and grant two read-only permissions:

  • https://www.googleapis.com/auth/analytics.readonly, to read reports from Google Analytics;
  • https://www.googleapis.com/auth/webmasters.readonly, to read reports from Google Search Console.

With them we can read reports. We cannot change anything in your Google account, your Analytics property, your Search Console site or your website.

What we read. So that you can choose, we read the names of the Analytics properties and Search Console sites your Google account can see, and keep only the one you pick. For that one Analytics property: daily revenue, purchases and visits for the last 8 weeks, and for 4 weeks around the same time a year earlier (to compare with last year); visits, purchases and revenue by channel and by source for the last 7 days; how many times products were viewed, added to cart, taken to checkout and bought in the last 7 days; totals for the last 28 days; your products by name with their revenue and units sold over 7 and 28 days; how many people are on your site right now; and the property's industry, currency, time zone, web address and measurement ID. From Search Console, for the matching site: daily clicks, impressions, click-through rate and average position for the last 62 days, and your top 10 searches over the last 28 days. Once a week we also run Google's public PageSpeed test on your home page, which needs no access to your account.

Every figure is a total for your whole site. We never ask Google for the names, email addresses or phone numbers of your visitors or buyers, and the reports we ask for do not contain them.

How we use it. Only to show you your own numbers on Home and in the Analyst, and to write the Analyst's read, its suggested moves and its ready answers in the app. A suggested move may link to the Growww Tech service that does that work. We do not sell this data, share it with anyone outside Growww Tech, use it for advertising, or use it to build profiles of you or your customers. People on our team look at these numbers only when you ask us for help, to keep the service secure, or when the law requires it.

How we store it. Google gives us an access token and a refresh token. Both are stored encrypted on our ERP and are never shown in the app or on any screen. Every hour we fetch fresh figures and replace the previous set, so we hold one summary per brand: the daily figures for the last 8 weeks and the 4 weeks a year earlier, and the weekly, monthly, channel, product and search tables above.

How to stop it. Tap Disconnect in the app (Account → Google Analytics). That withdraws our access at Google and deletes the tokens, the summary and the link to your property straight away. Deleting your login does the same for the access you granted. You can also remove Growww↗ at myaccount.google.com/connections; the numbers are then deleted at the next hourly refresh, and the name of the property you picked stays with your brand until you tap Disconnect.

Growww↗'s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who else handles your data

Each of these handles only its own part, for us:

  • our ERP at portal.growwwtech.com, which holds your account, your brands, your requests and the Google summary;
  • Google, for Google sign-in, the Google reports you connect, and Firebase Hosting, which serves the web app;
  • OneSignal, for phone notifications;
  • India Compliance, to check a GSTIN against the GST records;
  • the email service our ERP uses to send sign-up and password emails;
  • Cloudflare, which runs the address book (DNS) for our domains and stores media files;
  • Vercel, which hosts this website;
  • Zoho, only if you hire the team, for quotes, invoices and payments.

How long we keep it

  • Your account data, while your account is open. What deleting it removes, and what stays, is on Delete your account.
  • The Google summary is replaced every hour and deleted as described above.
  • Requests, their files and call recordings stay with your brand's records.
  • Invoices and quotes for work you hire us for, for as long as tax law requires.
  • Logs of how our systems were used, for at least one year, as the DPDP Rules require.

Your rights

Under the DPDP Act you can ask for a summary of the personal data we hold about you, have it corrected, completed or updated, have it erased, withdraw your consent, and name someone to act for you. Email privacy@growwwtech.com from the email address you sign in with; we reply within 30 days. You can also delete your own login in the app, under Account → Delete account. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Age

Growww↗ is for people aged 18 and over who run or work for a business. We do not knowingly keep data about children.

Security

Every connection to the app, the web app and this website is encrypted. Google tokens are stored encrypted, passwords only as one-way hashes, and your brand's records open only for the people on its team and for Growww Tech staff.

Changes

When this policy changes we update the date at the top. Before we change how we use your Google data, we tell you in the app and ask again where the law or Google requires it.

Contact

Grovesbox Private Limited (Growww Tech), 1st Floor, YBR Nilayam, Dayal Nagar Colony, Vishalakshi Nagar, Visakhapatnam, Andhra Pradesh 530043. Privacy questions: privacy@growwwtech.com.