Privacy Policy
How GrowLeafy handles your data — in plain language.
What we collect
Your verified mobile, the assets you add, order details and the location moments you choose to share. Scanner sessions are anonymous.
What we never expose
Your phone, email, home address, documents or precise location are never shown to scanners — the public scan page shows only the identity fields you allowlist. Masking happens on the server; the browser never receives hidden fields.
One identity, many windows
Enterprises connected to your asset see only the data domains, fields and purposes you consent to — via access grants that expire. Organizations never see another organization's private data merely because they know the same asset.
Location
Location is private by default. Shares are time-limited, purpose-based and revocable. There is no continuous tracking — a QR is an identity, not a GPS tracker. Scan location is captured only with consent.
Asset passport & DPP
Digital Product Passport data (origin, materials, sustainability, repairability, recycling, certifications) is stored factually and regulatory-neutrally — we claim no jurisdiction's compliance unless the data says so.
Your rights
Access, export, correct and delete your data: account deletion is built into the app and support will help with exports. We follow applicable law, including India's DPDP Act.
Sharing
We share data only with service providers you transact with, partners you contact through consent-gated connections, or when required by law.
