Who we are
Sproutt(“Sproutt”, “we”) operates this website. Our registered address is Hyderabad, India. For anything in this policy, contact us at hello@sproutt.life.
What we collect
We collect only what the site needs to function:
- Your email address — to identify your account and send account emails (confirmation, password resets).
- Your name — as you enter it at signup, or as provided by Google if you sign in with Google.
- Your profile picture — only if you sign in with Google, which supplies a link to it.
- Your password — stored only as a salted hash by our authentication provider. We never see or store the password itself.
- Your orders — what you bought, when, the amount, and the tree count attached to it.
We do not collect your date of birth, your location, your contacts, or your browsing activity on other sites. We do not run advertising or analytics trackers on this site.
Cookies
We use cookies for one purpose: keeping you signed in. These are strictly necessary — without them you would be signed out on every page. They contain your session token, are marked HTTP-only so scripts can't read them, and are refreshed as you browse.
We do not use advertising, tracking, or third-party analytics cookies. Signing out clears the session.
Who processes your data
We use Supabasefor our database and authentication. Your account and order records are stored there on our behalf, under their data processing terms. If you sign in with Google, Google handles that authentication and tells us your name, email address and profile picture — Google's own privacy policy governs what they do with your data.
We do not sell your personal data, and we do not share it with anyone for marketing.
How your data is protected
- Every database table enforces row-level access rules, so your account and orders are only readable by you.
- Your tree contribution total is calculated by the database from your paid orders. Nobody — including you — can edit it directly.
- Passwords are hashed, never stored or transmitted in the clear.
- Session cookies are HTTP-only and revalidated on every request.
No system is perfectly secure. If we ever become aware of a breach affecting your data, we will tell you.
How long we keep it
Your account data is kept for as long as your account exists. Order records may be retained longer where tax or accounting law requires it. When you delete your account, your profile and order history are deleted with it — which also removes your tree contribution total.
Your rights
You can ask us to:
- Show you a copy of the data we hold about you
- Correct anything inaccurate
- Delete your account and personal data
- Stop processing your data in a particular way
Email hello@sproutt.life and we'll action it. You can edit your own name and profile picture yourself at any time from your account page.
Children
Sproutt isn't intended for children under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll remove it.
Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top. Material changes will be communicated by email.
Contact
Privacy questions: hello@sproutt.life. Anything else: our help page.