Privacy policy

What we collect

• Your account: your name, email address, and phone number if you sign in with a phone code. If you sign in with Apple or Google, we receive the name and email address they share with us.
• What you and your coach put into Growth90: tasks, sessions, goals, habits, wins, journal entries, identity statements ("I'm someone who…"), messages, photos, files, voice notes and videos, and answers to forms.
• Practice information: for coaches and practices, the practice's name, branding, staff, clients, classes and library.
• Device information: on the iPhone app, a push notification token so we can notify you of new messages.
• Usage and error information: see "Analytics and error reports" below.

How we use it

We use your information to run Growth90 for you: to sign you in, show you and your coach your coaching work, deliver messages and notifications, send the emails you'd expect (such as invitations and sign-in links), keep the service secure, and fix what breaks. We don't sell it, rent it, or use it for advertising or to decide credit or lending.

Who can see it, and who we share it with

• Your coach and your practice: what you share in a coaching space is seen by you, your coach, and staff of that practice who can open it. What you keep on your own Home stays yours.
• Service providers who run parts of Growth90 for us, only to provide it: Supabase (database, sign-in and file storage), Vercel (hosting), Sentry (error reports), Resend (email), Expo (iPhone push notifications), and, where a feature uses them, Mux (video), Deepgram (voice note transcripts), OpenAI and Anthropic (optional AI features such as a coach's message recap).
• Google, if a practice connects Google Sheets to receive form answers: Growth90 writes those answers to the spreadsheet the practice chose, with access only to files picked or created through Growth90. Growth90's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• When the law requires it, or to protect people from harm or fraud.

We never sell your information or share it with advertisers or data brokers.

Analytics and error reports

The web app counts page views with Vercel Web Analytics, without cookies and with record ids and query strings removed from addresses, so we learn which screens are used, not whose record someone opened. It isn't used on sign-in hand-off pages or on this page. When something breaks, Sentry receives an error report that names your account by its id only; any screen recording around an error masks all text and images. The Chrome extension has no analytics and sends no error reports.

The Growth90 Chrome extension

The Growth90 extension shows your Growth90 home on Chrome's new tab: a line of your own identity language, a habit's plan with "Did it today", and a quote, over a drawn background. Signing in is optional; signed out, it shows starter lines and classic quotes bundled with it.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension uses no Google APIs and reads no Google account data; it applies the same Limited Use rules to everything it handles: it uses your information only to show your Growth90 home, never transfers or sells it for any other purpose, never uses it for advertising or credit decisions, and no person reads it except with your permission, for security, or as the law requires.

How you sign in

"Sign in with Growth90" opens Growth90's own sign-in page in a Chrome window, so you never type a password into the extension. Growth90 hands the extension a one-time code, protected with PKCE, which the extension exchanges for its own session, separate from your web session. Each browser the extension is signed in on is listed in Growth90 under Settings → Account, with its device name (such as "Chrome on macOS") and when it was last used, and you can disconnect it there at any time.

What it collects, and why

• Your sign-in: your session tokens and your email address, to call Growth90 as you and to show who is signed in.
• Your Growth90 home: your identity lines, your habits and their plan and weekly count, and quotes from your library, read from your own Growth90 account to show on the new tab.
• Your first name, from your Growth90 profile, for the greeting.
• What you choose to record: a "Did it today" tap on your own habit, and a first line you write on the new tab, which is saved to your Growth90 account once you sign in.

The extension doesn't read the web pages you visit, your tabs or your browsing history, and doesn't report what you see, hide or click. It has no analytics, no tracking and no advertising, and it runs no code from the internet: everything it runs ships inside it.

Where it's kept

• On your computer, in the extension's own Chrome storage: your session, the last copy of your home (identity lines, habits and quotes) so the new tab opens instantly and offline, your first name, "Did it today" taps waiting to be sent, lines you wrote before signing in, and the new tab's settings and its place in the rotation.
• In Chrome sync, if you have it turned on: only the new tab's settings (the "Simple new tab" choice and which lines you hid, by id, not their words), so they follow you to your other computers. Google holds Chrome sync data under Google's own privacy policy.
• In your Growth90 account, with the rest of your Growth90 data: your habit taps and the lines you save.

Who it talks to

Only Growth90: our database and sign-in service (Supabase, at our project's supabase.co address) and app.growth90.com, for signing in and out. No other site is contacted.

Signing out and removing it

Signing out ends the session at Growth90 and removes from your computer your session and everything kept for that account: your home, your first name, taps not yet sent, lines not yet saved, and the rotation's place. The "Simple new tab" choice and your hidden lines stay, as settings of this browser, until you change them or remove the extension. Disconnecting the browser in Growth90's Settings ends that extension's session, so it receives nothing more from your account. Removing the extension from Chrome deletes everything it kept on your computer.

How long we keep it

We keep your information while your account is open, so Growth90 keeps working for you and your coach. When you delete your account, we delete it as described below. Our providers may keep backups and security logs for a limited time before they're overwritten.

Deleting your information

• Delete your account in Growth90 under Settings → Account → Delete account, or in the iPhone app. Your login, profile and personal record, with what you kept on it, are deleted. Records a practice keeps of its coaching with you stay with that practice, no longer linked to your login; ask your coach or practice to remove them.
• Disconnect the Chrome extension in Growth90 under Settings → Account, or sign out in the extension; remove the extension to delete what it kept on your computer.
• Ask us to see, correct or delete your information by emailing mark@streamlinedcoaching.com.

Security

Your information travels over encrypted connections, and the database checks every read and write against who you are, so one person can't see another's records. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you.

Children

Growth90 and its extension are not for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has given us information, email mark@streamlinedcoaching.com and we'll delete it.

Changes to this policy

When we change this policy, we'll update the date at the top, and for a material change we'll tell you in Growth90 or by email before it takes effect.

Contact

Questions or requests about your privacy: mark@streamlinedcoaching.com.