Privacy Policy

1. Introduction

Grove Karma ("we," "us," or "our") operates the Grove Karma platform, a karma-powered community for solopreneurs. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name and email address
• Profile information you choose to provide (bio, avatar, links to your products)
• Authentication data from third-party providers (Google or Apple) if you use social login

2.2 Community and Activity Data

As you use the Service, we collect:

• Communities you create, join, or apply to
• Tasks you create, complete, or are assigned to
• Karma earned and spent within each community
• Screenshots and images you upload as task completion proof
• Warning and moderation history within communities

2.3 Automatically Collected Information

We automatically collect certain information when you use the Service:

• IP address and approximate location
• Browser type, operating system, and device information
• Pages visited and features used
• Date and time of access
• Referring website or source

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process karma transactions and task completions
• Facilitate community membership and administration
• Send you notifications about tasks, community activity, and account updates
• Enforce our Terms of Service and community guidelines
• Detect and prevent fraud, abuse, or unauthorized access
• Analyze usage patterns to improve user experience

4. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Within communities: Your profile name, avatar, karma balance, task history, and warning status are visible to other members and admins of communities you belong to.
• Public directory: If you create a community, its name and description are visible in the public community directory.
• Service providers: We share data with third-party providers that help us operate the Service (hosting, email delivery, authentication).
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

5. Third-Party Services

The Service integrates with the following third-party services:

• Google OAuth: For account authentication. Subject to Google's Privacy Policy.
• Apple Sign In: For account authentication. Subject to Apple's Privacy Policy.
• Email service provider: For sending magic link authentication emails and notifications.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Task completion screenshots and community activity logs may be retained in anonymized form for platform integrity purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), secure session management, and access controls.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

8. Cookies and Local Storage

We use cookies and browser local storage for essential functionality:

• Session cookies: To keep you logged in and maintain your session.
• Preference storage: To remember your theme preference (light/dark mode).

We do not use tracking cookies or third-party advertising cookies.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Export your data in a portable format
• Object to or restrict certain processing of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at the email address listed below.

10. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete that information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@grovekarma.com