1. Introduction & Scope
Welcome to GrowTogether ("the Service"), operated by G&T Studio Ltd ("we", "us", or "our") at growtogether.finance. We provide a collaborative household finance, budgeting, and wealth automation platform designed for couples.
This Privacy Policy explains our practices regarding the collection, storage, processing, and protection of your personal and financial information when you access our web application or mobile apps (iOS and Android).
By accessing or using GrowTogether, you acknowledge that you have read, understood, and agree to the practices outlined in this Privacy Policy.
2. Information We Collect
We collect information you provide directly to us when using the platform:
A. Account & Identity Information
- Full name, display name, and email address
- Securely hashed password (via Supabase Auth; we never store plain text passwords)
- Single Sign-On identifiers if authenticated via Google or Apple (email address, full name, profile avatar URL, and OAuth user IDs)
- User preferences: base currency (CAD or USD), home country / tax jurisdiction (Canada or United States), theme mode, and landing page preference
B. Financial Ledger Data
- Incomes & Paychecks: Estimated or actual recurring amounts, pay cycle frequency, and earner attribution
- Budget Allocations: Category names, monthly spend targets, 50/30/20 breakdown (Needs, Wants, Savings, Debt)
- Transactions & Merchant Logos: Dates, dollar amounts, vendor/merchant descriptions, category associations, payment methods, and user notes. Merchant descriptions may be processed via brand domain lookup services (Clearbit, Google Favicons, IconHorse) and Anthropic AI to display clean merchant logos in your feed.
- Debt Accounts: Balances, minimum monthly dues, interest rates (APR), and payoff strategies (Snowball / Avalanche)
- Savings: Target savings amounts, deadlines, and contribution schedules (managed across your Savings and Goals pages)
- Investment Records: Manually recorded holdings, portfolio groupings, cost bases, and share counts
C. Device, Native App & Notification Data
- Push notification device tokens (managed via Capacitor for iOS and Android reminders)
- Device platform and operating system version for mobile compatibility and error troubleshooting
- Diagnostic logs generated during crash events to ensure system stability
3. No Direct Bank Credentials Stored
GrowTogether does NOT connect directly to your bank accounts to initiate money transfers, nor do we request or store your online banking usernames, passwords, or PINs.
All financial figures, transactions, and account balances are manually entered or imported by you and your authorized household partner. You maintain 100% control over the data submitted to the platform.
4. AI Financial Guidance ("Monet") & Processing
GrowTogether features an intelligent financial guide named Monet, designed to answer budget questions, analyze spending trends, and generate year-in-review summaries.
5. Household Collaboration & Partner Sharing
GrowTogether is designed for collaborative wealth building. When you create or join a Household Space:
- Shared Visibility: All confirmed members of your household can view transactions, budget limits, savings goals, debts, and investment allocations submitted to that household space.
- Partner Attribution: Members can see which partner recorded a specific transaction or whether it was categorized as "Joint".
- Invitations: Household invitations are issued via invite links sent to your partner's email address through our email provider (Resend).
- Real-Time Sync: Data modifications are synchronized live across household devices using Supabase Realtime WebSockets.
- Partner Disconnection & Household Switching: You may switch your active household context or leave a household in account settings. Leaving a household detaches your user profile, while shared ledger entries previously contributed remain visible to remaining household members.
6. How We Use Your Information
We use the data we collect solely for the following operational purposes:
- Providing, operating, and maintaining the GrowTogether budgeting tools and algorithms
- Synchronizing shared household accounts, balances, and reports in real time
- Delivering transactional emails (verification OTP codes, password reset links, partner invitations)
- Sending scheduled push notifications (upcoming bills, budget updates, debt milestones)
- Generating downloadable PDF and Excel financial reports requested by the user
- Detecting, investigating, and preventing technical bugs, abuse, and security incidents
- Complying with applicable accounting and legal requirements
7. Third-Party Service Providers
We work with reputable technology infrastructure providers to host and secure GrowTogether. Each provider is subject to strict confidentiality and security obligations:
Supabase Inc.
PostgreSQL cloud database, Row-Level Security (RLS), authentication, and real-time WebSockets.
Vercel Inc.
Global edge hosting infrastructure, serverless compute functions, and frontend delivery.
Anthropic PBC
AI Claude API for intelligent financial guidance and automated review summaries.
Resend Inc.
High-deliverability transactional email service for OTP codes, password resets, and invites.
Google & Apple
Optional single sign-on authentication via Google OAuth and Sign in with Apple.
Yahoo Finance & TradingView
Public market quotes, delayed ticker data, and interactive charting widgets.
8. Google API Services Limited Use Disclosure
GrowTogether offers users the convenience of signing in using their Google accounts via Google OAuth.
GrowTogether's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We request only standard profile scopes (email, profile name, and profile picture). We do not request access to Google Drive, Gmail, Google Contacts, or other private user data.
9. Data Retention & Self-Service Deletion
You retain complete control over your account. We retain your information as long as your account remains open.
Self-Service Account Deletion: You can delete your account at any time directly inside the application under Settings → Delete Account. When triggered, our backend executes an automated purge (delete_auth_user) which deletes your credentials and personal profile.
Household Deletion Rules: If you are the sole or final remaining member of a household, deleting your account or leaving the household permanently deletes all associated household budgets, transactions, debts, and savings records. If your partner remains in the household, shared ledger transactions will remain accessible to them in anonymized form.
Backup Purge Timeline: Cached server logs and automated encrypted disaster-recovery database snapshots are overwritten and purged within 30 calendar days.
10. Your Privacy Rights (GDPR, CCPA/CPRA, PIPEDA)
Depending on your geographical jurisdiction, you have specific legal rights regarding your personal data:
Right to Access & Portability
Export your complete financial records, transactions, and reports anytime to Excel (.xlsx) and PDF directly from the app.
Right to Rectification
Edit or update any incorrect information, including category assignments, budget limits, and profile names.
Right to Erasure ("Right to be Forgotten")
Instantly initiate account eradication through Settings, or submit a manual deletion request to our team.
Right to Non-Discrimination
We will never deny you service, charge different prices, or provide a lower quality of service for exercising your privacy rights.
11. Security Measures & Data Safeguards
We employ comprehensive defense-in-depth security measures to protect your household data:
- Row-Level Security (RLS): Every database query is cryptographically verified against PostgreSQL security policies, ensuring users can only read or write records belonging to their authorized household space.
- Encryption in Transit: All communications between your browser, native mobile app, and our servers are encrypted using modern Transport Layer Security (TLS 1.2 / TLS 1.3).
- Encryption at Rest: Database volumes and automated backup snapshots are encrypted with AES-256 standard encryption.
- Password Hashing: User passwords are protected using industry-standard salted bcrypt hashing algorithms and are never stored in reversible form.
12. 18+ Age Requirement & Minors Policy
GrowTogether is strictly intended for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction).
Because personal finance management involves legally binding contracts, debt payoff management, and household asset tracking, we do not knowingly market to or collect personal information from individuals under the age of 18. If we discover that a minor under 18 has created an account, we will terminate the account and purge all associated records immediately.
13. Contact & Privacy Officer
If you have any questions, inquiries, or requests regarding this Privacy Policy or your personal information, please reach out to our team:
G&T Studio Ltd
Attention: Privacy & Data Protection
Email: hello@growtogether.finance
Website: growtogether.finance