Grove is a personal recovery app. Your raw biometric data — heart rate, HRV, sleep, breathing — stays on your iPhone. What we hold off-device is the minimum we need to give you an account, manage your subscription, and keep your forest consistent if you reinstall or move to a new device. This page is the long version of that.
Grove Health (referred to here as "Grove," "we," or "us") operates the Grove iOS application and this website at grovehealth.org. By using Grove, you agree to the collection and use of information described in this Privacy Policy.
What we collect
From you, directly
- Account information — your email address, your first and last name, and the authentication provider you choose (email/password, Apple, or Google). This is processed by our authentication provider, Clerk.
- Subscription information — if you subscribe to Grove+, Apple's App Store handles the payment, and we receive your subscription state (active, trialing, expired) through RevenueCat. We do not see your credit card or billing address.
- Support correspondence — when you write to us via the form on the support page or by emailing us directly, we keep that conversation so we can help and follow up.
From your device, with your permission
- HealthKit reads. When you grant permission, Grove reads the following from Apple Health: heart rate variability, resting heart rate, heart rate, respiratory rate, active energy, sleep analysis (including stages), oxygen saturation (SpO₂), VO₂ max, wrist temperature, walking heart rate average, heart rate recovery, and workouts. These reads happen locally on your device and are not transmitted to a server.
- Computed scores and biome state. The numbers Grove derives from your HealthKit data — your daily recovery score, sleep score, strain, energy battery, and the visual state of your forest — are stored on your device and synced to our backend so your forest is consistent across reinstalls and devices. These are derived metrics, not your raw biometric records.
What we don't collect
- No third-party tracking SDKs. Grove does not include Sentry, PostHog, Mixpanel, Google Analytics, Facebook SDK, or any other analytics or attribution library.
- No advertising identifiers. We do not request the iOS advertising identifier (IDFA) and we do not run ads.
- No cross-app or cross-site tracking. Apple's privacy manifest for Grove sets NSPrivacyTracking to false.
- No raw biometric data leaves your device. The numbers HealthKit holds for you stay where Apple put them.
How we use what we collect
- Authenticate you, keep your session secure, and let you sign in across devices.
- Compute your daily scores from HealthKit data on your device, and persist the computed state so your forest is continuous.
- Manage your subscription, including free trials, renewals, and restores through Apple.
- Reply to your support requests.
- Detect and respond to abuse, fraud, or violations of our Terms of Service.
We do not sell your personal information, and we do not use it to train machine-learning models.
Where it lives
- HealthKit data — on your iPhone, in Apple's HealthKit store. Grove reads from it; nothing is written or copied off-device.
- Account credentials — handled by Clerk (clerk.com), our authentication provider.
- Subscription state — handled by RevenueCat (revenuecat.com), bound to your Grove account ID.
- Computed biome state and score history — stored on Grove's backend, hosted on Amazon Web Services in the United States.
- Support correspondence — when you submit the contact form on grovehealth.org, the submission is processed by Formspree (formspree.io) and forwarded to our support inbox at hello@grovehealth.org.
Each of these services has its own privacy policy and security practices. We work with vendors that we believe handle data responsibly, but we cannot speak for them — please review their policies if you need that level of detail.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain uses. To exercise any of these rights, email hello@grovehealth.org. We'll respond within a reasonable time and at most within 30 days where law requires it.
You can:
- Access or export — request a copy of the data we hold about you off-device (your account info, subscription state, biome state, support correspondence).
- Correct — update your name or email at any time inside Grove or by writing to us.
- Delete — request deletion of your Grove account. We'll remove your account, computed biome state, and score history from our backend. HealthKit data is yours and stays on your device — you control it through Apple's Health app.
- Withdraw consent — revoke HealthKit access at any time in iOS Settings → Health → Data Access & Devices → Grove. Grove will stop reading new data immediately.
- Object or restrict — ask us to stop processing your data for specific purposes, where applicable law permits.
For California residents (CCPA/CPRA), European Economic Area, UK, and Swiss residents (GDPR), and similar jurisdictions: the rights above apply, plus any additional rights granted by your local law. We do not sell or share your personal information for cross-context behavioral advertising, as those terms are defined under California law.
Children
Grove is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
International users
Grove is operated from the United States. If you use Grove from outside the U.S., your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. By using Grove, you consent to that transfer.
Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. If we make material changes, we'll notify you in-app or by email before the changes take effect.
Contact
Questions, requests, or concerns about this Privacy Policy or your data?
Email: hello@grovehealth.org
Operator: Grove Health
Website: grovehealth.org