Privacy
Yours. Always private.
Growingwe holds photographs of somebody's child. That deserves plain language rather than a policy page nobody reads — so here is exactly what we do and what you control.
The four promises
What we will never do.
Not clauses buried in a policy, but the four rules the product is actually built around — each one enforced in the app, not just written down here.
Private by default
Nothing in Growingwe is ever public. There is no feed, no discovery, no profile for anyone to find.
No ads, ever
You are the customer, not the product. Your child’s photographs are not training data and not inventory.
You control every share
Every share names who will see it, by name, before it happens. Nothing leaves the app unless you send it.
Encrypted and audited
Documents and media are encrypted at rest, access is checked per item on every read, and every access is logged.
What you control
Nothing is shared by accident.
Sharing in Growingwe is a decision you make, item by item and person by person — never a default you have to discover and turn off.
Every memory has a visibility
Only me, the whole family, or a few chosen people. It is set on the memory itself and checked on the server every time anyone reads it — never only in the app.
Access is per person
When you invite someone you choose what they can reach. A grandparent can have the story without the health records or the document vault.
Sharing is always explicit
Before anything is shared, Growingwe names who will see it. Nothing leaves the app unless you send it, and there is no public link for anyone to stumble on.
Deleting takes two steps
Anything destructive names what will be lost, counts it, and makes “keep it” the easy button. Closing an account has a stated grace period, shown to you as a real date.
How your data is held
Careful, and honest about the limits.
Encrypted at rest
Media and documents are stored encrypted. The vault holds identity documents and medical records, so it is treated accordingly.
Every access is logged
Reads of the document vault are audited, and any share link is a capability token with an expiry rather than a permanent public URL.
Export whenever you like
Your memories, documents and records can be exported from Settings. It is your child’s story; you should never need our permission to hold a copy.
Sealed capsules stay sealed
A sealed Time Capsule is immutable and unreadable before its unlock date — including by the person who wrote it, and including by us.
Being precise about one thing: Growingwe encrypts your content at rest and enforces access on the server, but it is not end-to-end encrypted. The promise is “private by default”, not “zero-knowledge” — the server can generate a thumbnail and make your memories searchable, which requires being able to read them. We would rather say so here than imply otherwise.
Medical safety
Growingwe is not a medical tool.
What the health features do, and don’t
Growingwe stores, organises and reminds you from schedules and records that you entered yourself. It never diagnoses, never recommends treatment, never changes a dose, and never interprets a document you upload. Reminders repeat the schedule your doctor gave you — nothing more. Every health screen in the app carries this note, not just this page.
And no developmental anxiety
Milestones are never marked late, missing or behind. A nudge asks whether something has happened; “not yet” is a complete answer, and Growingwe simply asks again another time.
Coming to iOS and Android
Start your child’s story from today.
Growingwe is being built for iOS and Android together. Leave your address and we’ll write once — when there’s something real to open.