XGROW PRIVACY POLICY

Introduction

The policy describes how we collect, use, share and secure your personal data within the trading platform (Store), the IoT solutions ecosystem, and mobile applications (for iOS and Android).

Data Controller

In accordance with the GDPR (General Data Protection Regulation EU 2016/679), your Data Controller is Piotr Mietliński (an unregistered business) with the registered address: ul. Sielawy 21G/33, 61-680 Poznań, Poland.

Contact email of the Inspector (Responsible Person): xgrow.contact@gmail.com and by phone at: (+48) 725 633 665.

Data Processed by Mobile Applications (App Store & Google Play)

Our application, which serves to operate the Xgrow OS hardware controller, does not collect access to private files on the user's device.

  • Local Bluetooth Mode: The application processes information regarding your sensors and devices locally at the phone level by communicating over the Bluetooth interface. The configuration is sent straight to the local controller and we do not transfer these settings (e.g. schedules, fertilizer parameters, or fertilizer working time) to the Xgrow cloud.
  • Remote Mode (Cloud): Upon optional activation of the Cloud synchronization by the user, telemetric information (sensor readings, temperatures, humidity), system logs reported by Xgrow OS, and notifications are sent to the Xgrow servers. We do this exclusively to allow you insight from anywhere in the world into visual cultivation logs and to run the assistant function correctly.
  • Mobile Permissions: Depending on the OS, we may usually ask for permission to use Bluetooth or approximate location (a technical requirement of Android systems when searching for BLE devices) and PUSH notifications (alerts regarding reservoirs or leaks).

Use of the AI Assistant

An AI assistant is available on the Xgrow platform for diagnosis. User requests to this assistant (e.g. app photos, logs, text typed in chat fields) are sent to relevant cloud providers to acquire instructions or calculate nutrients. We urge users not to provide any of their personal or sensitive personal data in the AI dialog boxes.

E-commerce Data Collected (Store) and Processing Goals (GDPR)

When completing an order in our online store, you directly provide:

  • First name, last name, shipping address, phone number - for physical fulfillment of the delivery contract / retail courier. Basis: contract execution (Art. 6 para 1 lit. b GDPR).
  • Email address and payment data – for processing by associated transaction gateway services regarding e-commerce processing, as well as accounting (third-party documentation).

Analytics and Session Recording Services

We use traffic analysis tools – mainly Google Analytics 4 (GA4). This tool automatically aggregates anonymized data to show us statistics about the store output and how you reach us. You can manage these cookies in the Cookie Preferences available on the interactive bottom banner of our window, letting you block their exchange process with our analytic instances.

We also use Hotjar (Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta) for session recording and heatmap analysis. Hotjar may store cookies and similar tracking technologies to record mouse movements, scrolls, and clicks in order to improve usability of the store. If you accept Advertising & Tracking Cookies in our Cookie Banner, Hotjar will be activated. You can opt out at any time through the Cookie Preferences banner. For more information see Hotjar's Privacy Policy.

Your rights

You hold the right strictly to access personal data, rectify it, request its complete erasure ("right to be forgotten"), restrict its processing, lodge an objection against processing, and officially file a complaint to the President of the Personal Data Protection Office (PUODO) in Poland.

Last update: April 2026

non-existing