Privacy Policy for Sprout

Last Updated: February 2, 2025

Introduction

Welcome to Sprout ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience using our app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Sprout mobile application.

By using Sprout, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our app.

1. Information We Collect

1.1 Information You Provide

Account Information:

App Usage Data:

1.2 Information Automatically Collected

Device Information:

Usage Analytics:

1.3 Information We Do NOT Collect

We do NOT:

2. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

3. How We Use Your Information

3.1 Provide Core Services

3.2 Improve User Experience

3.3 Maintain App Functionality

3.4 AI Features (With Your Explicit Consent)

When you actively choose to use AI-powered features (Task Breakdown, Brain Dump, "What Should I Do Now?"):

Automated Decision-Making: Our AI features provide suggestions and recommendations but do not make automated decisions that significantly affect you legally or similarly. You maintain full control over all tasks and decisions within the app.

4. How We Share Your Information

We do NOT sell your personal information. We only share data in these limited circumstances:

4.1 Service Providers (Data Processors)

We share data with trusted service providers who process data on our behalf under strict contractual obligations:

Supabase (database and authentication)

OpenAI (AI features)

RevenueCat (subscription management)

Google/Apple (OAuth authentication)

All service providers are contractually required to:

4.2 Legal Requirements

We may disclose your information if required by law, court order, or to:

4.3 Business Transfers

If Sprout is acquired, merged with another company, or undergoes a business restructuring, your information may be transferred as part of that transaction. You will be notified via email and/or prominent notice in the app at least 30 days before any such transfer, with an opportunity to delete your data before the transfer.

5. International Data Transfers

If you use Sprout from outside the United States:

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

We ensure adequate protection for international transfers through:

Note: We do not rely on the EU-U.S. Privacy Shield, which was invalidated in 2020.

6. Data Storage and Security

6.1 Where We Store Data

6.2 How We Protect Data

We implement industry-standard security measures:

6.3 Data Retention

6.4 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms:

We will notify:

Our notification will include:

You can report suspected security issues to: security@sproutapp.tech

7. Your Privacy Rights

7.1 Your Rights Under GDPR (EU/UK Users)

You have the following rights regarding your personal data:

7.2 How to Exercise Your Rights

In-app:

By Email:

Response Time:

Free of Charge:

7.3 Withdrawing Consent

You can withdraw consent for specific data processing activities without deleting your account:

Withdrawing consent does not affect:

7.4 Supervisory Authorities

For EU Users:

You can lodge a complaint with your local Data Protection Authority. Find yours at: https://edpb.europa.eu/about-edpb/board/members_en

For UK Users:

Information Commissioner's Office (ICO)

For California Users (CCPA):

8. Children's Privacy

Sprout is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 (or under 16 for EU/UK users without parental consent).

If you believe we have collected data from a child under the applicable age:

Parents/Guardians: If you want to review or delete your child's data, contact us with verification of guardianship.

9. Third-Party Services

9.1 Authentication Providers

When you use these services, they may collect data according to their own policies. We only receive the information necessary for authentication.

9.2 AI Services

9.3 Payment Processing

We do NOT store your payment information (credit cards, billing details, etc.). All payment processing is handled directly by Apple, Google, or their authorized processors.

10. Cookies and Tracking

10.1 What We Use

10.2 What We Don't Use

We do NOT use:

10.3 Your Control

You can manage cookie preferences in Settings → Privacy. Note that disabling certain cookies may affect app functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

How we notify you of significant changes:

What constitutes a significant change:

Your options:

For non-significant changes: We will update the policy and date without advance notice.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

General Inquiries:

Privacy & Data Protection:

Security Issues:

Mail:

Sprout App
2 Foster Close
Derby, DE3 0BF
United Kingdom

Data Protection Officer

For EU/UK users, you can contact our Data Protection Officer:
Email: dpo@sproutapp.tech
The DPO is responsible for overseeing our data protection strategy and GDPR compliance

Summary

Effective Date

This Privacy Policy is effective as of February 2, 2025 and applies to all users of the Sprout mobile application.

Thank you for trusting Sprout with your data. Your privacy matters to us.

Version History