Grove Privacy Policy

Last updated November 4, 2026 · Version 1.0 · Consumer health data notice

Grove is a garden app for adults (18 and older) who want to drink less or stop drinking. It is made by Pippa LLC. This policy covers Grove only.

The short version

1. What stays on your phone

Your daily check-ins (any drinks today, mood, cravings, tags and notes), drinks you count and your weekly goal, your drinking check answers, coping tools you used and how they helped, good moments and reflections, your support plan (reasons, triggers, if-then plans, warning signs), trusted people and their phone numbers, plans for tricky days, Bramble's notebook progress, your garden, reminders and settings. If Bramble chat is available to you, its history stays on your phone too.

This information is not backed up by us. If you lose your phone or delete the app, it is gone unless you exported it first (Settings, Private by default, Export my Grove data).

2. What we save on our servers

DataWhat it includesWhy
Your accountYour email address and password. The password goes to our sign-in provider, which stores it in protected form.Signing you in and sending sign-in codes
Your agreementsThat you confirmed you are 18 or older, and which Terms and policy versions you agreed to, with the timeShowing an adult agreed
Sharing choicesEach kind of data you turned sharing on or off for, when, and when it endsSending only what you allowed, and keeping a record of your choices
Shared summariesOnly if you share: a summary for the kinds you allowed, for example how many days you checked in, mood and craving trends, days you drank or used (no notes), tools used and whether they helped, reflections you marked to share, and topics you want to talk aboutLetting your care team see what you chose
Care team links and messagesThe clinic you connected to with a code, tools your care team suggests, and messages you exchange with themConnecting you with your care team
PurchasesWhether you have Grove Pro. Payment is handled by Apple or Google; we never see card details.Unlocking Pro decor

3. Bramble chat

Bramble chat is an AI, not a person. Grove asks for your agreement before your first message, and you can turn chat off in Settings at any time. When you chat, your messages and recent chat history go through our server to OpenAI, our service provider, to write Bramble's reply. Messages are first checked on your phone and on our server for safety concerns; if one is found, Grove shows fixed safety text and the message is not sent to the AI. We do not store chat messages on our server, and our logs hold counts and timing only, never what you wrote. OpenAI processes messages under its API terms, which say it does not use them to train its models and may keep them for up to 30 days to check for abuse. Chat history stays on your phone and you can clear it in Settings.

If you report a Bramble reply, we keep that reply, the reason you picked and any note you add, so our team can review it. Reports are deleted when you delete your account. Chat is never used for ads and is never sold.

4. What Grove does not do

5. Who can see your data

Only you, on your phone. A care team sees only the summaries you chose to share, while sharing is on. Pippa LLC staff can access server data only to run and secure the service. We disclose information if the law requires it, and we will tell you unless we are not allowed to.

6. Service providers

Amazon Web Services (accounts, our database and email), Cloudflare (our server), OpenAI (Bramble chat replies, where available), and Apple and Google (app delivery, purchases and notifications). Each processes data only to provide its service to us.

7. How long we keep information

Server data is kept while your account is open. When you delete your account, we turn it off right away and erase it after 30 days; until then, signing up again with the same email restores it. We keep a small set of records for about six years because health privacy rules require it: the history of your sharing choices, a record that the account was deleted, and logs of when a care team viewed what you shared. Summaries a care team already received may also be kept in their own records. Data on your phone is erased when you delete your account or remove the app.

8. Security

Data travels encrypted. On your phone, Grove's file is protected by the phone's encryption, and you can turn on Lock Grove to ask for Face ID, a fingerprint or your passcode.

9. Consumer health data notice

Information about your drinking, mood, cravings and wellbeing is consumer health data under laws such as Washington's My Health My Data Act. We collect it only to provide Grove to you, mostly on your phone as described above. We share it only with a care team you connect to and only with your consent for each kind of data, and with the service providers in section 6. We never sell it. You can see it (Export in Settings), stop sharing it, and delete it (Delete account in Settings, or email us). These rights apply wherever you live.

10. Your rights

You can access, correct, export and delete your data, and withdraw sharing consent, at any time in the app or by emailing us. We will not treat you differently for using these rights.

11. Adults only

Grove is for people 18 and older. We do not knowingly collect information from anyone younger. If you believe a minor has an account, email us and we will delete it.

12. Changes and contact

If we change what we collect or share, we will update this policy first and tell you in the app. Questions: Pippa LLC, pippa.app.general@gmail.com.