Privacy Policy

1. Who we are

Growblic is a software studio based in India. We build and operate Growblic: Chat, Call, Meet, a messaging app for everyday use, and the Growblic platform, which other businesses (“integrators”) use to add messaging and calling to their own apps.

Your data is stored on Amazon Web Services in the Mumbai region (ap-south-1).

For anything in this policy, write to privacy@growblic.com.

When you use the Growblic app, Growblic is the data fiduciary. When you use a third party’s app built on the Growblic platform, that company decides what happens to the data in their app, and we process it on their behalf — their own privacy policy applies alongside this one.

2. Data we collect

We collect what the app needs to work. Several categories below are collected only if you switch that feature on, and we have marked those clearly.

Always, because the account depends on it

Your phone number. It is your account identity, and we send a one-time password (OTP) to it when you sign in.
Profile details you enter — display name, photo, about text, username, and business details if you add them (address, website, business email, opening hours).
Device information and push tokens. Device type and a Firebase Cloud Messaging (FCM) token so we can deliver notifications, plus the list of devices signed in to your account so you can review and revoke them.
Public encryption keys, one per device. These are public halves only. The matching private keys never leave your device and are never sent to us.

What you send and who you talk to

Messages and media. See End-to-end encryption — for encrypted chats we hold ciphertext we cannot read.
People you look up or message. If you search for a phone number to start a chat, we check whether that number has an account. We do not upload or store your whole address book in the background.
Call metadata — who called whom, when, and how long it lasted, so your call history works. Not the audio or video itself.

Only if you turn the feature on

Live location. Shared only when you start sharing, only with that chat, and it stops when you end it or the timer runs out.
Nearby People. While the Nearby screen is open, your approximate position is used to find other people who also have it open. Others see a coarse distance band, never your coordinates. If you enable Bluetooth precision, your device exchanges anonymous tokens that rotate and are not tied to your identity. Closing the screen turns discovery off.
Dating. Only if you enable Dating. It includes date of birth, gender, who you are interested in, photos, the location you choose, and your stated intentions and interests. We treat this as sensitive personal data. Dating is 18+ only.
UPI payment identity. Only if you add it. We store your UPI ID and generate a QR code from it so people can pay you. Growblic never processes payments and never touches money — the payment happens entirely in your own UPI app, and we see none of it.

3. End-to-end encryption

Messages, attachments and calls between up-to-date apps are end-to-end encrypted. We cannot read your message content, open your attachments, or listen to your calls.

Encryption and decryption happen on the devices themselves, using keys only those devices hold. What reaches our servers is encrypted data plus the metadata needed to deliver it — who sent it, who receives it, and when. For calls, the audio and video are encrypted before they leave your device, so our servers pass through media they cannot decode.

Two honest caveats, because a privacy policy that overstates protection is worse than useless:

Older app versions. A chat or call is encrypted only when both sides are running a version that supports it. Until both people have updated, that conversation may not be end-to-end encrypted. The app shows you the current state rather than implying protection it does not have.
Metadata is not content. We still know that a message was sent, between which accounts, and when — that is what makes delivery possible.

Automated replies (away messages and greetings) in an encrypted chat are composed and sent by your own device, because our servers cannot read the message that triggered them.

4. How we use your data

To run the service — delivering messages, connecting calls, syncing your account across your devices.
To send notifications you have asked for.
To keep people safe: preventing spam, abuse and fraud, and enforcing our Terms of Service.
To provide the specific features you enable, as described above.
To fix problems and improve reliability.

We do not sell your personal data, and we do not show ads. We do not build advertising profiles, and we do not share your data with data brokers.

6. Keeping and deleting data

We keep your data while your account is active, so the app works as you expect across your devices.

To delete your account and your data, email privacy@growblic.com from the address or phone number linked to your account. We process erasure requests within 30 days. Some records may be retained where the law requires it.

Encrypted message content is unreadable to us whether it is stored or deleted — we never held the keys to it in the first place.

7. Your rights

Under India’s Digital Personal Data Protection Act, 2023, and equivalent rights for users covered by the GDPR, you can:

Access the personal data we hold about you.
Correct anything inaccurate or incomplete.
Erase your data and close your account.
Withdraw consent for any feature you switched on — turning off Dating, Nearby People, location sharing or UPI removes that data from your profile.
Complain to us, and to the Data Protection Board of India if we do not resolve it.

To exercise any of these, write to privacy@growblic.com.

8. Grievance Officer

In line with the Digital Personal Data Protection Act, 2023, you can reach our Grievance Officer about any privacy concern or complaint:

Grievance Officer, Growblic
Email: privacy@growblic.com
We respond to grievances within 30 days.

9. Children

The Growblic app is not intended for anyone under 13, and you may not create an account if you are younger than that.

Dating is strictly 18+. Enabling it requires a date of birth, and the app refuses to switch it on for anyone under 18.

If you believe a child has given us personal data, email privacy@growblic.com and we will remove it.

10. App permissions and why we ask

Every permission below is requested at the moment the feature needs it, and the app keeps working if you decline — you simply lose that feature.

Camera: Taking photos and videos to send, and scanning QR codes (including UPI codes).
Microphone: Voice and video calls, and voice messages.
Location: Only for the features you start: sharing your live location in a chat, and Nearby People while that screen is open.
Bluetooth / Nearby devices: Improving Nearby People’s precision using anonymous rotating tokens, and passing messages between nearby devices when the network is unavailable.
Contacts: Finding people you already know who are on Growblic. We look up numbers you choose to search rather than continuously uploading your address book.
Notifications: Telling you about new messages and incoming calls.
Photos and files: Choosing images, videos and documents to send.

11. Changes to this policy

We will update this policy when the product changes. The date at the top always reflects the current version, and we will give notice in the app for changes that materially affect you. Continuing to use the service after a change means you accept the updated policy.

Effective date: 27 August 2026.

12. Contact us

Growblic
Privacy: privacy@growblic.com
General: hello@growblic.com