🇪🇺 GDPR & Data Rights

Your Data Rights

Under GDPR, CCPA, and global privacy standards — your data is yours. Here's how to exercise your rights.

You don't need to be in the EU to exercise these rights. GrowChart extends GDPR-level data rights to all users globally, regardless of location.

Your Rights at a Glance

👁

Right of Access

Request a full copy of all personal data we hold about you and your children.

Response: 30 days

✏️

Right to Rectification

Correct inaccurate data. Most corrections can be done directly in the app.

Response: 30 days

🗑

Right to Erasure

Request permanent deletion of your account and all associated data ("right to be forgotten").

Purged: 30 days

📦

Data Portability

Export all your data in machine-readable JSON or CSV format. Available in-app instantly.

Instant / 30 days

🚫

Right to Object

Opt out of research data processing or any processing based on legitimate interest.

Response: 30 days

⏸

Right to Restriction

Ask us to pause processing your data while a dispute or complaint is being resolved.

Response: 30 days

How to Submit a Data Request

Most data operations can be done directly in the app without contacting us. For formal requests:

Try the in-app tools first

Go to Settings → Data & Privacy in the GrowChart app. You can export your data as CSV or JSON, manage research consent, and initiate account deletion directly — no email needed.

Submit a formal request by email

If you cannot access the in-app tools or have a complex request, email privacy@www.growchart.app with the subject: Data Request — [Your Request Type] (e.g., "Data Request — Erasure").

Identity verification

We will verify your identity by sending a confirmation to your registered email address. This protects your data from unauthorized deletion or access requests.

We process your request

We will confirm receipt within 72 hours and fulfill your request within 30 days. Complex requests may take up to 90 days — we will notify you if this applies.

Submit a Data Request

Use your registered email. Include your full name and the type of request.

📧 Email Data Request ⚙ In-App Privacy Settings

Filing a Complaint

If you are unhappy with how we have handled your data or a data request, please contact us at privacy@www.growchart.app. We will respond within 30 days.

If you remain unsatisfied, you have the right to lodge a complaint with your national data protection authority:

EU/EEA users: Your national Data Protection Authority (DPA). For example, the CNIL (France), BfDI (Germany), ICO (UK), or find yours at edpb.europa.eu
UK users: Information Commissioner's Office (ICO) — ico.org.uk
California users: California Privacy Protection Agency (CPPA) — cppa.ca.gov
Bangladesh users: Digital Security Agency (DSA) or applicable consumer protection authority

What Data We Hold About You

For transparency, here is what an account access request would typically include:

Account profile: email, display name, language preference, account creation date
Children's profiles: name, date of birth, sex, gestational age (if entered)
All measurement records with dates and calculated z-scores
Feeding, sleep, diaper, milestone, and vaccination logs
AI Advisor conversation history (Premium users)
Subscription and billing history (plan, dates — not card details)
Research consent record (if you consented or declined)
Caregiver invitations sent and received

We do not hold: your payment card details, your precise GPS location, or behavioural analytics profiles.