Account & Data Privacy Model
Separately from diary encryption (see the Encryption documentation), GrowScope's account model is designed to need as little personal data as possible in the first place — an account is a username, not an identity, and there's no password to compromise either.
How to do this in GrowScope
- Choose a username — no password, email address, phone number, or real name is requested or stored.
- The account is assigned a random, cryptographically generated account ID, unrelated to the username or any personal data.
- That's it — there is no separate identity-verification or profile-completion step.
Minimal-identifier signup
- Category
- Privacy & Security
- Purpose
- Create an account without collecting personally identifying contact information.
- Input
- Username only, no password
- Location
- Signup screen
- User action
- Choose a username
- Output
- An account with a random, non-derived account ID — no email, phone, or name is ever on file.
- Used by
- None
- Related
- End-to-End Diary Encryption
Public 3D share links
- Category
- Privacy & Security
- Purpose
- Show a read-only 3D view of a box, plants or a finished cycle to someone without an account, only when the user chooses to.
- Input
- Sections and fields to include; optional expiry date, view limit and password
- Location
- Share button on the 3D map and on archived cycle cards
- User action
- Choose what to share
- Create the link
- Revoke it at any time
- Output
- A link of the form /app/s/<id>#<key>. The shared content is encrypted in the browser; the key is the part after #, which browsers never send to the server. A Screenshot mode renders a PNG on the device instead, uploading nothing.
- Used by
- None
- Related
- End-to-End Diary Encryption
Notes
- The GrowScope app does not use Google Analytics, ad trackers, or third-party crash reporters (Google Analytics runs only on the marketing website, and only after you accept it in the cookie banner). Private, first-party analytics are never sold or shared with third parties.
- IP addresses are held in memory only briefly, to rate-limit abuse, and are not written to the application database or logs.
- GrowScope never accesses device GPS. Outdoor/balcony weather features use a location the user types in themselves.
- Every uploaded photo is unconditionally re-encoded on the server, which strips EXIF metadata (the GPS coordinates the photo was taken at, device model, exact capture time) before the photo reaches storage — this happens automatically for every upload, not as a user choice.
- Paid-tier payment is cryptocurrency (USDT) only — no card number, billing address, or legal name is collected.
Where to find it in the app
Frequently asked questions
Does GrowScope ask for my email or phone number?
No. Signup is a username only, no password — no email, phone, or real name is ever requested or stored.
Is my data sold or shared with advertisers?
No. The GrowScope app has no ad trackers or third-party analytics, and does not sell user data.
Can anyone else see my plant data?
Only through a share link you create yourself. Nothing is published or pooled otherwise — GrowScope has no comparison with other growers. A share link can expire, be limited by views or a password, and be revoked.