Privacy policy

Last updated: 28/10/2026

This policy explains what data the GrowinApp mobile app and this website process, what for, and what rights you have. The studies you take part in also have their own informed consent, which you accept before joining.

Who is responsible

The University of the Balearic Islands (UIB), through the research team of the Growing Healthy (GrowHe) project. Contact: info@batlab.cat. UIB Data Protection Officer: dpo@uib.es.

What data we process

  • Your account: name, email address, password (stored encrypted, nobody can read it), date of birth, sex and the language of the app.
  • Your children, in studies aimed at children: the name or nickname you choose, their date of birth and sex.
  • Your participation: a pseudonymous code for each study, your answers to the questionnaires, when you receive and answer them, and the messages you exchange with the team in the chat.
  • Your device: the identifier used to send you notifications, and whether it is iOS or Android.
  • Technical data needed for the service to work, such as your signed-in session and the server's error logs, which may include your IP address.

We do not use the data for advertising, we do not sell it and we do not build commercial profiles. The app does not collect your location.

What we use it for

  • To create and protect your account, and to confirm your email address with a code.
  • To check whether you meet a study's age and sex requirements.
  • To send you questionnaires, reminders and notifications.
  • To let you talk to the research team in the chat.
  • For each study's research and, where the project provides for it, to publish open data that is always anonymised.

The legal basis is your consent (Art. 6.1.a and 9.2.a of the General Data Protection Regulation, GDPR) and scientific research in the public interest (Art. 6.1.e and 9.2.j GDPR).

Who has access

The research team of each study only sees your pseudonymous code, your age and sex when you enrolled, your answers and your messages. They never see your name or your email address.

To provide the service we use providers that process data on our behalf:

  • The server that hosts the app, the website and the database.
  • Resend, which sends the emails with verification codes.
  • Apple (APNs) and Google (Firebase Cloud Messaging), which deliver notifications to your phone. They receive the device identifier and the text of the alert, which does not include your name.

We do not share the data with anyone else unless the law requires us to.

How long we keep it

  • Account data, for as long as your account is open.
  • Verification codes, 15 minutes. Sessions, at most 30 days without using the app.
  • The notification identifier, until you sign out or delete your account.
  • Study answers, for as long as the research needs them. When you delete your account they are anonymised.

How to delete your account

You can delete your account whenever you like from the app (Profile → Leave the app) or from this website, at Delete your account, without needing the app installed.

Your name, email address, password, date of birth, sex, your children's names, your devices and the alerts you received are deleted, and you stop taking part in every study. The answers you have already sent are kept for the research, anonymised: nobody will be able to link them to you. The messages you wrote in the chat are also kept, linked only to the pseudonymous code; if you want them erased, you can ask for it by exercising your rights.

Your rights

You can exercise your rights of access, rectification, erasure, objection, portability and restriction of processing, and withdraw your consent at any time. Write to the Universitat de les Illes Balears, Secretaria General, for the attention of the Data Protection Officer, Ctra. de Valldemossa, km 7.5, 07122 Palma (Spain), or to dpo@uib.es. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

The app is for adults. In studies aimed at children, the adult registers them and answers on their behalf; children have no account and cannot sign in to the app.

Changes

If this policy changes, we will say so on this page with the date of the last update, and if the change affects what you accepted, the app will ask you to accept it again.