Privacy Policy

Overview

This Privacy Policy explains how Grow in the Word collects, uses, and shares information when you use our website and services (the "Service"). By using the Service, you agree to the practices described here.

The Service is operated by GROW IN THE WORD in Singapore.

Information We Collect

• Account data: Your name, email address, and authentication details when you create an account or sign in (including via Google OAuth).
• Content you create: Notes, questions, study sessions, preferences, and other content you submit through the Service.
• Usage data: Interactions with the Service such as pages viewed, features used, session timestamps, and diagnostics.
• Device data: IP address, browser type, and device identifiers used to secure and operate the Service.
• Cookies & local storage: We use cookies to keep you signed in and protect sessions. In guest mode, some data is stored locally in your browser so your notes persist until you create an account.
• Payment data: Subscription transactions are processed by Stripe. We do not store full payment card details on our servers.
• Communications: Messages you send to us or replies to service emails.

How We Use Information

• Provide and maintain the Service.
• Authenticate users and secure accounts.
• Personalize your experience and save your study progress.
• Process subscriptions and manage billing.
• Improve features, troubleshoot issues, and prevent abuse.
• Communicate with you about the Service.

How We Share Information

We do not sell your personal information. We share data only:

• With service providers that help us run the Service, such as hosting, authentication (Better Auth/Google OAuth), email delivery (Resend), payments (Stripe), and AI processing (e.g., Google Gemini or Anthropic when you use Ask features).
• To comply with legal obligations or enforce our terms.
• With your consent or at your direction.

Data Retention

We retain personal data for as long as necessary to provide the Service, comply with legal requirements, and resolve disputes. You may request deletion of your account; some information may be retained as required by law or for legitimate business purposes.

Your Choices

• Access and update your profile details within the Service.
• Request deletion of your account and associated data.
• Opt out of non-essential communications.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No system can be 100% secure, so we cannot guarantee absolute security.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children.

International Users

If you access the Service from outside the United States, your information may be transferred to and processed in the United States and other countries where our service providers operate.

Singapore PDPA Rights

If you are in Singapore, you may have rights under the Personal Data Protection Act (PDPA), including the right to access and correct your personal data and to withdraw consent for certain uses. We may need to verify your identity before responding. We aim to respond within 30 days of a complete request.

We may transfer personal data outside Singapore to our service providers. Where required, we use contractual or other safeguards to provide a comparable level of protection.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, when appropriate, provide additional notice.

Contact

Questions about privacy or PDPA requests? Contact our Data Protection Officer at the email address listed on our website.