Privacy Policy

The data controller — who decides how data is processed — is Arruda Technologies Ltda., CNPJ 55.366.078/0001-16. It also acts as the data protection officer (LGPD, art. 41). To contact it about anything in this text: filipejesse5@gmail.com.

During the beta there is no charge. Access is by invitation, and the service may change.

From your guardian account:

• name and email;
• password, stored only as an irreversible code (hash), never in plain text;
• acceptance of these texts: which version and when.

For children you register, including health data:

• name, date of birth, sex, blood type and emergency contacts;
• measurements (weight, height, head circumference), vaccines, appointments, exams, medications, allergies and other health information you record;
• development milestones, school, activities, diary, and photos and files you attach;
• accounts, goals and financial entries linked to the child.

For security:

a log of family activity (login, password change, invites, export and deletion), with date and time. For this we store a scrambled version of the IP address (an HMAC code), never the IP itself.

In your browser:

we do not use advertising or tracking cookies. We only store:

• a session cookie, required for you to stay signed in;
• your light or dark choice, stored in the browser;
• the preference cookie gu_appearance, with the family appearance name (Broto, Régua, Constelação or Passos). It is only so entry pages (login, signup and invite) show your family’s look. It contains no personal data, does not identify you and does not track anything; it expires in 1 year and is deleted when you delete your account or family.

Only to run Grow Up for your family: show growth curves, vaccines and reminders, organize each child’s development and finances, let invited guardians see the same data, protect the account from misuse and abuse, and keep backup copies. We do not use the data for any other purpose.

Health data is sensitive personal data, and children’s data needs even more care. We therefore process it based on your specific, highlighted consent as the child’s legal guardian (LGPD, art. 11, I, and art. 14, §1).

You give this consent by checking the two boxes when creating an account or accepting an invite. You can withdraw it at any time by deleting your account or the family (see “Your rights”). Without consent the service cannot be used, because it exists to store this data.

For the service to work, we use three companies that process data on our behalf (processors). They follow our instructions only.

• Vercel. Hosts the application. São Paulo region (gru1), Brazil.
• Turso. Stores the database: accounts, children and records. AWS sa-east-1 (São Paulo), Brazil.
• Cloudflare R2. Stores attached files (photos, exams, PDFs) and backups. Bucket in the region chosen by Arruda Technologies Ltda.; if outside Brazil, transfer follows LGPD art. 33.

No one else has access to the data, except an AI assistant you connect yourself.

• Family data: while the account exists. When you delete the family, everything is erased: records, attachments and its backups.
• Automatic backups: a daily copy, kept for 14 days then deleted.
• Activity log: 180 days.
• Login session: up to 30 days, or until you sign out.

New families sign up by invite. Anyone who requests an invite via “Request invite” joins a waitlist before having an account.

• What we store: your name, your email and, if you write one, a message (up to 280 characters).
• Why: only to send the invite link. We do not send automatic emails: the invite is sent manually.
• How long: up to 180 days after the request, or sooner if the request is discarded or you ask for deletion. After that the request is deleted.
• How to delete sooner: write to filipejesse5@gmail.com with the email used in the request.

Connecting an AI assistant is optional and needs your authorization for each connection. It only happens if you create a token in Settings or authorize an app, such as Claude, ChatGPT or Grok, on Grow Up’s authorization screen, and choose what it may do.

• What it reads: always the children’s health, vaccine, growth, development and school data. The diary and finances only with separate authorizations. Attachments appear by name and type, never the file.
• What it records: only if you allow recording. It can create vaccines (for example, by reading a photo of the vaccination card you send it), measurements, appointments and milestones, and diary entries if the diary is authorized too. It never changes or deletes what already exists. The photo stays with the assistant: Grow Up never receives or stores the image.
• Confirmation and undo: the assistant is instructed to show what it will record and to ask for your yes before saving, but Grow Up cannot check that it asked. That is why every saved change, even one made without asking, appears in “Changes by AI” in Settings, which shows the last 50, and can be undone for 7 days. Undo deletes only what the assistant created and was not edited since.
• With whom: the company behind the assistant you chose, for example Anthropic, OpenAI or xAI. It processes the data the assistant reads, and the photos you send it, under its own terms, and may do so outside Brazil.
• What we store: the connection name, what it may do, the last use date and your authorization, with the version of this policy. For an authorized app, also the name and address it publishes. For tokens, only a cryptographic digest. For each change, what was asked and what was created: the request of a change nobody confirmed is deleted when it expires, after 30 minutes; that of a confirmed change after 30 days; the rest after 180 days. Tokens created, authorized apps, changes and undos appear in the family’s recent activity.
• How to stop: disconnect the assistant in Settings. Access ends right away. A new token does not expire on its own unless you choose a validity. An authorized app gets an access that lasts 1 hour and a renewal code that lasts 30 days and is replaced on each use, so it stays connected while it keeps being used; disconnecting in Settings or in the app itself ends both. Until you accept a new version of this policy, assistants are blocked. What the company already received follows its own rules.

LGPD (art. 18) gives you, as the data subject, among other rights: to know what data we hold, correct it, take it with you, and request deletion. In practice:

• View and correct: everything you entered is in the app screens and can be edited there.
• Take your data: in Settings, “Backup and export” downloads everything in JSON, and main modules in CSV. The JSON also lists the connected assistants and the changes they made.
• Delete: in Settings, “Delete my account” removes your access, and “Delete family” permanently deletes all family data.
• Any other request (information, objection, review, questions): write to filipejesse5@gmail.com. We respond within 15 days.

If you believe processing is incorrect, you may also contact the National Data Protection Authority (ANPD).

• encrypted connection (HTTPS) across the app;
• passwords stored with strong salted hashing; temporary lockout after several failed attempts;
• each family sees only its own data, verified on every page, action and file;
• files delivered via signed links that expire quickly;
• activity log so you can spot unrecognized access;
• daily backups, kept for only 14 days.

No system is completely immune to failure. If an incident that may cause relevant harm occurs, we will notify you and the ANPD as the law requires.

We do not sell, rent or share your data with anyone other than the three processors above and any AI assistant you connect yourself. Grow Up has no ads, no third-party analytics, and does not build usage profiles.

If this text changes in a meaningful way, the version and date at the top change, and the next time you sign in we ask you to read and accept again before continuing. The Terms of Use follow the same version.