Privacy Policy

This Privacy Policy explains how GrowthNodes ApS (CVR 40196021, Copenhagen, Denmark) collects, uses, and protects personal data across the growthnodes.xyz website and the apps and services we operate. GrowthNodes ApS is the data controller. Individual apps may add their own privacy details in their app-store listing and in-app information; where they do, that information applies together with this policy.

Data we collect

On the website:

• Server logs. Our hosting provider, Cloudflare, processes technical request data such as IP address, user agent, and requested URL to serve and secure the site.
• Contact-form data. When you submit the contact form we receive what you enter: the reason you select, your name, email address, and the message you send us (including any optional details).

In our apps and for accounts:

• Account data. If you create an account, we collect what is needed to run it, such as your email address and authentication credentials.
• Content and activity. Information you create or provide in an app, and usage and diagnostic data needed to operate, secure, and improve the product.
• Device and technical data. Identifiers and technical details such as app version, device type, and crash information, kept to what the app needs to function reliably.
• Payments. Purchases in mobile apps are processed by Apple or Google through their stores. We receive confirmation of a purchase and subscription status, not your full card details.

Why we process it and our legal bases

• To provide and operate the website, apps, and accounts you ask for (contract).
• To respond to your messages and support requests (legitimate interest).
• To keep our services secure and prevent abuse (legitimate interest).
• To meet legal, accounting, and tax obligations (legal obligation).
• Where we rely on consent, such as optional communications, you can withdraw it at any time.

We do not sell personal data, and we do not use it to build advertising profiles.

Children

Our website and apps are not directed to children, and we do not knowingly collect personal data from a child under the age of digital consent in their country. If an app is intended for a different audience, its store listing states this. If you believe a child has provided us with personal data, contact us and we will delete it.

Retention

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Contact submissions are kept only as long as needed to evaluate and follow up on the conversation. Account data is kept while your account is active and is deleted after you close it or request deletion, except for limited records we must retain by law.

Service providers

We share personal data only with providers that help us run the service, including:

• Cloudflare, for hosting, security, and spam protection (Turnstile).
• A transactional email provider, used to deliver contact-form messages to our inbox.
• Apple and Google, as the app stores and payment processors for mobile apps.
• Umami Cloud, for privacy-light, cookieless analytics that measures aggregate usage without cookies, cross-site tracking, or advertising profiles.

These providers process data on our behalf under agreements that limit how they may use it.

International transfers

Some providers may process data outside your country or the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, and you can object to or restrict processing, request portability, and withdraw consent. To delete your account and associated data, see theAccount & data deletion page. You can also complain to the Danish Data Protection Agency (Datatilsynet).

Security

We use technical and organizational measures to protect personal data, keep secrets out of client code, validate form submissions on the server, and limit access to what is necessary. No system is perfectly secure, but we work to reduce risk and respond quickly to issues.

Changes to this policy

We keep this policy under review and update it as our products and the law evolve. The date at the top shows when it last changed. Material changes will be reflected here.

Contact

To exercise your rights or ask about this policy, reach us through thecontact form or the support page. You are contacting GrowthNodes ApS, CVR 40196021, Copenhagen, Denmark.