Last updated: October 16, 2026 Effective date: October 16, 2026
This Privacy Policy explains how GrowTall ("we", "our", "the app") collects, uses, shares, and protects your personal information when you use the GrowTall mobile application.
GrowTall is operated by Milan Santosh Mishra, based in India. If you have any questions about this policy or your personal data, email us at buddhabliss99@gmail.com.
By using GrowTall, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the app.
GrowTall is a height-growth companion app for people aged 13 and older. We provide a personalized nutrition plan, an exercise program, sleep guidance, progress tracking, an AI coach, and an optional community feed — all designed to help users work toward their height potential.
Data controller: Milan Santosh Mishra, India. Contact: buddhabliss99@gmail.com
We only collect what we need to personalize your plan and run the app. We do not sell your data, and we do not share it with advertising networks or data brokers.
When you sign up and complete the onboarding flow, you share:
| Category | Examples |
|---|---|
| Account identifiers | Email address, password (stored hashed by our auth provider). If you use Sign in with Apple, your identity token plus your full name on first sign-in (or Apple's private relay address if you choose "Hide My Email"). If you use Continue with Google, your identity token plus your Google email and display name. |
| Demographic data | Date of birth, gender, ethnicity |
| Body measurements | Current height, current weight, foot size |
| Family information | Mother's height, father's height, information about taller relatives |
| Lifestyle inputs | Sleep hours, weekly activity level, diet quality, diet type, allergies, dislikes |
| Sensitive puberty indicators (13–25 users) | Facial hair stage, acne level |
| Goal | Dream height target |
If you sign in with Apple and choose "Hide My Email," Apple gives us a private relay address (@privaterelay.appleid.com) instead of your real email. Any email we send you is forwarded by Apple to your real address; we never see it directly.
As you use GrowTall day-to-day, we log:
| Category | Examples |
|---|---|
| Progress tracking | Meals you mark as eaten, exercises you complete, sleep habits checked, sleep rating, daily habits checklist |
| Height and weight history | Every height log you save, every weight log you save, the date of each measurement |
| Derived health metrics | Calculated BMR, TDEE, growth surplus, BMI, daily calorie and macro targets, Growth Score |
| Community activity (if you post) | Chosen username, posts, comments, likes, reports you submit, users you block |
| Subscription status | Whether you are on a trial, monthly, or 6-month plan; trial start and end dates |
| AI interactions | Messages you send to the GrowTall AI coach, and the ingredients and requests you type into the Meal Planner AI. The GrowTall AI coach also receives a snapshot of your current profile (age, current height, dream height, gender, sleep hours, diet quality self-rating, workout frequency, growth-window status, and a reference to your stored predicted-height range — the literal number is not sent to the model) as part of every prompt so its responses are grounded in your real numbers. If you have allowed GrowTall AI, the text of community posts you write is also sent to Anthropic Claude (Haiku) for an automatic safety check before publication (comments are not). Nothing is sent to Anthropic until you allow GrowTall AI in the app — see Section 3 below. |
Like most apps, we automatically collect some technical data when you use GrowTall:
We do not use third-party advertising SDKs and we do not track you across other apps or websites. Sentry is used for crash + performance diagnostics only — not behavioral analytics.
If you tap "Share progress card," the app saves the generated image to your device's photo library. This only happens when you explicitly request it, and the image never leaves your device unless you share it yourself.
GrowTall can send you local reminder notifications — for meals, workouts, bedtime, streaks, weekly progress, and (during a free trial) a reminder before your trial converts to a paid plan. These reminders are scheduled locally on your device; we do not operate a push server, and no data is sent to us to deliver them. We ask for your permission before enabling notifications, and you can turn them off at any time in Settings or in your device's system settings.
We use your data only for the purposes listed below:
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:
We do not sell your personal information. We share it only with the third-party service providers listed below, and only to the extent necessary to operate the app.
| Provider | What they receive | Why | Location |
|---|---|---|---|
| Supabase, Inc. | Account email, onboarding data, logs, community posts, comments, likes | Cloud database, authentication, real-time sync | United States |
| Anthropic PBC (Claude API) | Only after you allow GrowTall AI: the contents of your AI chat messages (with a profile snapshot), Meal Planner AI prompts (the ingredients and requests you type + diet type, allergies, dislikes, and per-meal targets), and the text of community posts for the safety check | To generate AI responses and to screen community posts for safety violations before publication | United States |
| RevenueCat, Inc. | Your GrowTall user ID, your purchase and renewal history from Apple or Google, subscription and trial status | Subscription management, entitlement checks | United States |
| Apple, Inc. (Sign in with Apple) | Apple-issued identity token; your full name on first sign-in; relay email if you choose "Hide My Email" | Authentication only | Apple-controlled (United States / Ireland) |
| Apple, Inc. (App Store) | Your purchase if you subscribe via the App Store | Payment processing, subscription management | United States / Ireland |
| Google LLC (Sign-in) | Google-issued identity token; your Google email and display name | Authentication only | United States |
| Google LLC (Google Play) | Your purchase if you subscribe via Google Play | Payment processing, subscription management | United States |
| Sentry (Functional Software, Inc.) | Crash reports and performance traces (your account ID only — no email, no full name, no IP) | Crash diagnostics and performance monitoring | United States |
| Expo, Inc. | App crash reports and basic telemetry (aggregated) | App delivery and diagnostics | United States |
| Cloudflare, Inc. | Proxied request metadata between the app and Supabase (the Worker forwards traffic transparently because some Indian ISPs DNS-block Supabase directly) | Network reliability in India | Global edge (Cloudflare-controlled) |
We never share your data with advertising networks, analytics brokers, or resellers. We do not share your community posts with anyone outside GrowTall, other than the community feed that is visible to other GrowTall users.
When you subscribe, the transaction happens directly between you and Apple or Google. RevenueCat receives the purchase and renewal records Apple or Google provide for your subscription (linked to your GrowTall user ID), and GrowTall sees your subscription status — neither of us ever sees your card number, CVV, or billing address.
GrowTall is operated from India. The third-party providers listed in Section 5 — Supabase, Anthropic, RevenueCat, Apple, Google, Sentry, Expo, and Cloudflare — host their infrastructure in the United States and other regions outside India.
This means that when you use GrowTall:
By using GrowTall, you consent to this international transfer of your data. Where required by the Indian Digital Personal Data Protection Act, 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR), or similar laws, we rely on standard contractual clauses and the providers' own transfer mechanisms to protect your data.
We retain your data for as long as your account is active. If you delete your account, we remove your data from our active systems — including your purchase record at our subscription provider, RevenueCat — within 30 days. Backups are rotated out within 90 days of account deletion.
Some data may be retained longer where required by law (for example, tax records related to your subscription).
Data sent to Anthropic Claude for the AI coach, the Meal Planner AI and the community post safety check is processed in real time to generate a response. Per Anthropic's privacy commitments, it is not used to train Anthropic's models. Anthropic deletes it within 30 days, except that content its automated safety systems flag as violating its Usage Policy may be kept for up to 2 years, and data may be kept longer where the law requires. See Anthropic's privacy policy for the current terms.
No system is perfectly secure. If we ever detect a security incident that affects your personal data, we will notify you in accordance with applicable law.
Depending on where you live, you may have the following rights over your personal data:
| Right | What it means | How to use it |
|---|---|---|
| Access | Request a copy of the data we have about you | Email buddhabliss99@gmail.com |
| Correction | Fix inaccurate data | Edit it in the app, or email us |
| Deletion | Have us delete your account and data | Settings → Delete account; without a subscription, the Delete account link at the very bottom of the screen after your results (“Your plan is built & ready”); or email us (see Account Deletion) |
| Portability | Get your data in a portable JSON format | Email buddhabliss99@gmail.com |
| Objection | Object to certain processing based on legitimate interests | Email buddhabliss99@gmail.com |
| Withdraw consent | Turn off features that rely on consent, like notifications | Settings or device settings |
| Stop AI sharing | Turn off GrowTall AI so nothing more is sent to Anthropic | Settings → AI features |
| Complain to a regulator | File a complaint with your data protection authority | See your local authority's website |
These rights apply under the GDPR (EU/UK), CCPA/CPRA (California), and the DPDP Act, 2023 (India). We will respond to verified requests within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the rights listed above, plus the right to opt out of the "sale" of personal information. GrowTall does not sell personal information, so there is nothing to opt out of.
GrowTall is intended for users aged 13 and older. We collect date of birth during onboarding and do not knowingly allow accounts for users under 13.
If you are a parent or guardian and you believe your child under 13 has created a GrowTall account, please email buddhabliss99@gmail.com with the account email. We will delete the account and all associated data within 30 days of verifying your request.
For users aged 13 to 17, we recommend using GrowTall with the knowledge and support of a parent or guardian. The predictions and recommendations in the app are for guidance and education — not medical advice.
The app and website may contain links to third-party websites (for example, to open the App Store to manage your subscription). This Privacy Policy does not apply to those third-party sites. We encourage you to read their privacy policies before sharing information with them.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where required, notify you in the app or by email. Your continued use of GrowTall after changes take effect means you accept the updated policy.
If you have any questions, requests, or complaints about this Privacy Policy or your personal data, please contact:
Milan Santosh Mishra Email: buddhabliss99@gmail.com Website: https://puneet766.github.io/tallify-legals/
We aim to respond to all privacy requests within 30 days.