Grove Privacy Policy

How Grove handles accounts, parenting conversations, learning activity and payment records
Oct 21, 2026

Last updated: October 21, 2026 · Version 1.0

Operator and contact

WANG XUEYU, an individual operator based in China, operates Grove and is responsible for personal information processed to provide this service. Contact 402377128@qq.com for privacy questions, access or correction requests, account deletion or complaints. This policy covers the English website and the account and learning features used through it.

Information we process

  • Accounts: email address or phone number, account identifiers, password-verification data where applicable, login sessions, account-security changes and support messages. Linked sign-in channels may supply identifiers needed to recognise your account.
  • Family and learning: a child nickname or label and age band, selected concerns, course and lesson progress, saved parenting cards, tasks and feedback, plus invitation and points records when you use those features.
  • AI conversations: your questions, chat titles, saved messages and generated replies, and records needed to continue or troubleshoot a conversation. This can include personal information you type.
  • Membership and billing: account-linked order references, plans, amounts, currencies, subscription status, renewal and expiry dates, refund events and support correspondence. Waffo Pancake collects web checkout and card details directly. Grove does not receive or store your full card number or security code. Apple transaction records are used for App Store purchase verification.
  • Technical information: IP address, approximate country derived from it, request times, browser or device information, errors, security and abuse-prevention logs, language preferences and referral sources. IP location is not used as a precise child location.

Grove is intended for adults aged 18 or older. A parent or authorised guardian manages a child profile; children should not register independently. We do not require a child's legal name, school, exact birth date, identity documents, face scans or voiceprints for parenting features. Do not send these details or medical records in a chat. Contact us if a child has registered directly or inappropriate child information has been supplied.

Purposes

We use information to register and secure accounts, deliver AI replies and course recommendations, save learning progress, verify membership, handle support and privacy requests, prevent fraud and meet legal obligations. Where a legal basis is required, processing relies on performing the service you request, appropriate legitimate interests in security and administration, legal obligations, or consent for uses requiring it. Optional family information may be omitted, with reduced personalisation.

We do not sell personal information or provide it to advertising networks for cross-context behavioural advertising. We do not make automated decisions about a child's access to education, healthcare, insurance or other significant entitlements. AI suggestions are educational material, not professional diagnoses or assessments of a child's ability.

How AI questions are handled

Your question is saved with your account conversation. Grove uses a limited recent context window, currently up to 20 messages, to continue a discussion rather than sending every conversation in your account. A child age band and relevant published course excerpts may also be included.

The submitted question is sent to Tencent Cloud ADP for course retrieval. The question, relevant recent context and supporting material are processed through OpenRouter and the selected model provider, currently DeepSeek, to produce a reply. We do not intentionally add your login email or phone number to tutor prompts, but identifying details you type can still be transmitted. Limiting the model context does not delete older saved messages.

Grove does not run model-training jobs on your conversations. This is not a guarantee that every external provider has zero retention or identical terms. Providers handle information under the arrangements and policies for their service. See OpenRouter's privacy policy. Avoid sharing confidential or sensitive information that is unnecessary for a question.

Providers and sharing

ProviderPurpose and information involved
Tencent CloudHosting, database and content storage; ADP course retrieval using your question; SMS verification using the destination phone number and verification message where enabled.
OpenRouter and the selected model provider, currently DeepSeekResponse generation using the question, recent context, age band and course excerpts described above.
ResendAccount and service emails using the recipient address and content necessary for verification, recovery or service communication. See Resend's privacy policy.
Waffo PancakeWeb checkout, recurring billing, receipts, refunds and payment administration when web purchasing is available. Grove supplies an account-linked customer reference and necessary transaction details; Waffo collects checkout details directly.
Apple or WeChat, when you use their channelsIdentifiers required for the sign-in or purchase feature you choose. Their own services are subject to their privacy terms.

Authorised administrators may access information when needed for support, security, content operations or privacy requests. Disclosure may also be necessary for legal obligations, abuse investigations or protecting users' rights. We do not publish private tutor conversations as public course material.

Cookies and browser storage

Login cookies and tokens support signed-in access and account security. Browser storage supports language and appearance preferences and passing a composed question between pages. When a referral-source parameter is present, a first-party utm_source cookie may retain it for 30 days; the source can also be associated with a resulting registration. Removing the cookie does not automatically erase a registration record.

Google Analytics, Microsoft Clarity, Plausible, OpenPanel and Vercel Analytics are not enabled on the current English website. Payment providers use their own checkout environments and may use their own cookies. Browser settings can manage cookies, although blocking login storage can prevent account features. We will update this notice and provide any required controls before introducing materially different tracking.

Retention, deletion and security

Account details, conversations and learning records are retained for the continuing account service. Tutor messages currently have no automatic expiry. Cancelling a subscription does not delete the account or its history.

Deletion requests may be submitted through account settings or by email and are reviewed by an administrator. Submission or acknowledgement does not mean erasure has already happened. We verify requests when needed and respond under applicable legal time limits. After a request is completed, information no longer needed for the account service is deleted or anonymised, except records retained for billing, tax, fraud prevention, disputes or another legal obligation. Restricted backups and operational records may remain until their retention cycle or legal purpose ends. Contact support about records retained in your case.

We use HTTPS, account-access checks and restricted administrative access. No system guarantees absolute security. Do not share credentials, card details or unnecessary sensitive information in chats or email. Security incidents and required notifications are handled under applicable law.

Processing locations and rights

The service is operated from China and uses Tencent Cloud infrastructure. International providers may process information outside your country, including through OpenRouter model routing, Resend and Waffo. Data-protection rules can differ by location. This notice does not claim that all information remains in one country or waive protections applicable to cross-border processing. Contact us for details relevant to your use of the service.

Depending on applicable law, you may request access, correction, a copy or deletion of information, restriction of or objection to processing, or withdrawal of consent where consent is the basis. Withdrawal does not affect earlier lawful processing. You may complain to the competent data-protection authority. Send requests to 402377128@qq.com; account verification may be needed to protect other users' data. Do not email full identity documents unless a suitable secure process has first been agreed.

Updates

We will update the date when this policy changes and notify you of material changes as required by law. See the Terms of Service and membership information for access, billing and refund rules.

IP Geolocation by DB-IP
Grove Privacy Policy