Your family’s privacy.

Effective 11 October 2026.

GrowNest stores your account email, display name, password hash, family records, documents, membership permissions and parent-circle messages in the site operator’s Cloudflare account. Passwords, recovery codes and email reset tokens are stored as one-way hashes. Reset links expire after 30 minutes and can be used once. When email delivery is connected, Cloudflare Email Service (or the configured transactional email provider) processes recipient addresses and password-reset messages. Session cookies keep you signed in.

Who can see what

Adults invited to your family can access all its records and documents. Editors can make changes; viewers can read and download. The family owner can revoke access. Parent-circle members see adult display names and messages, but cannot see your private family workspace merely by joining a circle. The site operator can administer the service and its database.

Storage and retention

Family data is stored in Cloudflare D1; the database was created in the Oceania region. This is not a guarantee that every processing operation or backup stays in Australia. Cloudflare may process network and diagnostic information globally. Records remain until removed by an authorised member or the operator. Infrastructure backups may retain earlier records for their configured retention period.

Your choices

Use Settings to export your family records and documents. Remove documents and individual records within the app; revoke invitations and adult access in Settings. Delete your account in Account & sharing. For other privacy requests, contact the operator who provided your GrowNest deployment. An operator contact address has not yet been configured.

Children and uploads

Adult accounts are for parents and caregivers aged 18 or older. Family owners may create child logins without an email address, replace their credentials and revoke access. Children see only their own assigned learning, activities, tasks and reflections. Parents and authorised family adults can see those assignments and reflections. Child login sessions expire after eight hours. Children cannot access family documents, parent circles or adult settings. Add only information you are entitled to share, minimise health and other sensitive details, and obtain appropriate permission before sharing information in parent circles. Uploaded documents are private to family members and served as downloads; automated malware scanning is not provided.

Cookies and third parties

GrowNest uses a necessary HttpOnly session cookie and no advertising trackers. Google Fonts may receive your network request when fonts load. Cloudflare provides hosting, storage, TLS and network protection. Your email address is not verified by this deployment; names and school affiliations are self-reported.