Privacy Policy

1. Introduction

GrowBotiq ("we," "our," or "us") operates the GrowBotiq Lab mobile application ("the App"). This Privacy Policy explains what information the App handles, where it goes, who can see it, and what you can do about it. By using GrowBotiq Lab you agree to the practices described here.

GrowBotiq is located at 1 Bay St, Toronto, ON M5J 0B6, Canada, and acts as the controller of the personal data described below. You can reach us at info@growbotiq.com.

2. The Short Version

3. What Stays on Your Device

The following is processed only on your device and never reaches us, unless you enable backup or sharing:

• Photos you capture or import for trichome analysis
• Detection results, trichome classifications and maturity estimates
• Plant profiles, grow logs, harvest records and environment readings
• Environments, strains, light schedules and cost calculations

In line with Apple's guidelines, data processed only on device is not "collected". You can remove it by deleting records in the App or uninstalling the App.

4. What We Collect, and When

4.1 Account (only if you create one)

Cloud backup, multi-device sync and GrowBotiq Teams require an account. We collect your email address, an account identifier, and the timestamps of sign-in and verification. Authentication is provided by Google Firebase Authentication.

4.2 Content you back up or share

If you enable cloud backup or share an environment in Teams, the content of that environment — plants, logs, analyses, harvest records and photos — is stored on our infrastructure (Google Firebase Firestore and Cloud Storage) so it can be restored or delivered to the people you shared it with.

Environments you do not share, and data you do not back up, are not uploaded. Sharing is per environment and opt-in.

4.3 Subscription and entitlement data

Purchases are processed entirely by Apple. We never receive your card number, billing address or Apple Account password. We receive and store the subscription status needed to unlock paid features, and — where access was granted by us rather than purchased — a record that your account has been granted access.

4.4 Notifications

If you allow notifications, we store a push token issued by Apple and handled through Firebase Cloud Messaging, so reminders and team messages can reach your device. You can revoke this at any time in iOS Settings.

4.5 Support messages

When you write to us from inside the App, we receive your message, the email address you enter, and basic technical details you can see in the message body before sending: app version, build, device model and iOS version. Your email address is saved on your device to pre-fill the next message.

4.6 Analytics and diagnostics

We use Firebase Analytics and crash reporting to understand how the App is used and where it breaks. This includes screen and feature usage, session counts, app and OS version, device model, and crash traces. It is pseudonymous, aggregated in our reporting, and never used for advertising. We do not use the Advertising Identifier (IDFA) and do not track you across other companies' apps or websites.

5. Why We Use It

We do not use your content to train our detection models, and we do not sell or rent personal information to anyone.

6. Who Can See Your Data

6.1 Other people, when you share

When you share an environment in GrowBotiq Teams, its plants, logs, analyses and photos become visible to the members of that company workspace whose role and scope cover it, and depending on their role they may be able to edit or delete those shared records. The workspace owner controls membership and roles.

Stopping sharing removes the shared copy from the workspace, but does not retrieve copies already downloaded onto other members' devices. Your own original always stays on your device.

6.2 Service providers

• Apple — app distribution, purchases and subscriptions
• Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Analytics) — account, storage, sync, notifications, analytics
• Our email provider — delivery of support messages you send from the App

These providers process data on our instructions under data-processing terms, and only to provide their service to us.

6.3 Legal

We may disclose data where required by law, to respond to lawful requests, or to protect the rights, safety or property of GrowBotiq, our users or the public. We will not disclose more than is required, and we will tell you where we are legally free to do so.

7. Where Your Data Is Processed

GrowBotiq is based in Canada. Our Firebase project is hosted in the European Union (europe-west1); some administrative and analytics processing occurs in Canada and the United States. For transfers out of the European Economic Area or the United Kingdom, we rely on the European Commission's adequacy decision for Canada and on Standard Contractual Clauses with our providers.

8. How Long We Keep It

• On-device data — for as long as you keep it. We cannot delete it for you and cannot see it.
• Backed-up and shared content — while the backup or the sharing is active. When you stop sharing an environment, the shared copy is removed from the workspace. When you delete your account, associated cloud content is deleted within 30 days, except where retention is required by law.
• Account record — until you delete the account.
• Support messages — up to 24 months, so we can follow up on a recurring fault.
• Analytics — up to 14 months, Firebase Analytics' default.

9. Your Rights

Depending on where you live — including under the GDPR, UK GDPR, PIPEDA and the CCPA/CPRA — you may have the right to:

• Access the personal data we hold about you
• Correct data that is inaccurate or incomplete
• Delete your personal data
• Export your data in a portable format
• Withdraw consent where processing is based on consent
• Object to processing based on legitimate interest
• Complain to your supervisory authority

Write to info@growbotiq.com. We answer within 30 days. We do not discriminate against you for exercising any of these rights: the App works the same either way.

We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

10. Deleting Your Account

You can delete your account from inside the App, in the account section. This removes your account, the cloud content associated with it, and your membership of any company workspace. Content you shared and that other members already downloaded stays in their local copies.

Deleting the app from your phone does not delete your account — it only removes the local copy. Use the in-app deletion if you want the cloud side gone too.

11. Security

We protect data with:

• TLS encryption for everything in transit
• AES-256 encryption at rest, applied by our infrastructure provider
• Server-enforced access rules, so an account can read only its own data and the workspaces it belongs to
• Server-side verification of purchases and access grants — the app cannot grant itself paid access
• On-device processing of all image analysis, so analysis never requires an upload

No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authority as required by law.

12. Children

GrowBotiq Lab is not intended for anyone under 17, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, write to us and we will delete it promptly.

13. Permissions the App Asks For

• Camera — to photograph plants and run live trichome detection. Frames are analysed on device.
• Photo library — to import an existing photo for analysis, and to save results if you ask.
• Notifications — reminders and, in Teams, messages from your team.
• Local network / Bluetooth — only for direct device-to-device team sync, which works over Wi-Fi or Bluetooth without a server.

Each is optional and can be revoked in iOS Settings; the features that depend on it stop working, the rest of the App continues.

14. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced in the App before they take effect, and the "Last Updated" date above will change. Continuing to use the App after that constitutes acceptance.

15. Contact Us

Questions, requests or complaints about privacy:

GrowBotiq
1 Bay St, Toronto, ON M5J 0B6, Canada
Email: info@growbotiq.com